From 32f64b54fd94a5e6a145ef7c2c8faf051f721a71 Mon Sep 17 00:00:00 2001 From: codex Date: Wed, 14 Oct 2026 19:56:35 +0200 Subject: [PATCH] RAIL-HO-WP-0011-T09: window console receipt for RPF-WP-0015-T03; fix receipt YAML Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883 --- .custodian-brief.md | 6 ++---- .../RAIL01-CONSOLE-20261014T164803Z.yaml | 2 +- .../RAIL01-CONSOLE-20261014T175624Z.yaml | 17 +++++++++++++++++ ...1-reproducible-s1-declaration-and-handoff.md | 3 +++ 4 files changed, 23 insertions(+), 5 deletions(-) create mode 100644 docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T175624Z.yaml diff --git a/.custodian-brief.md b/.custodian-brief.md index ad83139..bc1b44e 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,7 +2,7 @@ # Custodian Brief — railiance-infra **Domain:** financials -**Last synced:** 2026-10-14 10:29 UTC +**Last synced:** 2026-10-14 17:13 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams @@ -30,13 +30,11 @@ Progress: 0/4 done | workplan_id: `788a005b-f6d4-5db9-8866-21251951fa0b` *(wait: Depends on T03 and reviewed live-host authorization.)* ### Make the S1 declaration reproducible and the handoff verifiably green -Progress: 7/9 done | workplan_id: `5738f113-1c4e-5d27-95b2-b6655e0b7279` +Progress: 8/9 done | workplan_id: `5738f113-1c4e-5d27-95b2-b6655e0b7279` **Open tasks:** - ! T08 — Automate bounded SOPS recipient rotation `920f869a` *(wait: Live recipient removal or credential replacement requires explicit operator approval after the dry run.)* -- ! T09 — Confirm and test railiance01 provider console access `f404b272` - *(wait: Only the Host Europe account holder (founder) can confirm the panel console mechanism and test it.)* ## Inbox Hygiene diff --git a/docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T164803Z.yaml b/docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T164803Z.yaml index b825e75..4a000fe 100644 --- a/docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T164803Z.yaml +++ b/docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T164803Z.yaml @@ -5,7 +5,7 @@ attested_by_role: host-europe-account-holder attested_at: "2026-10-14T16:48:03Z" panel_login: ok mfa_used: false -console_mechanism: "Wiederherstellungskonsole" (provider web terminal); panel also offers "Server stoppen", "Server neu starten", "Notfallmodus" +console_mechanism: '"Wiederherstellungskonsole" (provider web terminal); panel also offers "Server stoppen", "Server neu starten", "Notfallmodus"' console_shows_host: true independent_of_guest_network: true rescue_mode_offered: true diff --git a/docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T175624Z.yaml b/docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T175624Z.yaml new file mode 100644 index 0000000..bf69d90 --- /dev/null +++ b/docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T175624Z.yaml @@ -0,0 +1,17 @@ +receipt_id: RAIL01-CONSOLE-20261014T175624Z +host: railiance01 +provider_resource_id: c0e697d1-4c71-40f5-9746-0b4c4b9e5c17 +attested_by_role: host-europe-account-holder +attested_at: "2026-10-14T17:56:24Z" +panel_login: ok +mfa_used: false +console_mechanism: '"Wiederherstellungskonsole" (provider web terminal); also "Server stoppen", "Server neu starten", "Notfallmodus"' +console_shows_host: true +independent_of_guest_network: true +rescue_mode_offered: true +hard_reboot_offered: true +reboot_window_id: rpf-wp-0015-t03-window-20261014-01 +note: >- + Window receipt for RPF-WP-0015-T03 on 2026-10-14 (UTC), carrying forward the + founder's same-day console confirmation (capability receipt + RAIL01-CONSOLE-20261014T164803Z). Panel login has no second factor (finding). diff --git a/workplans/RAIL-HO-WP-0011-reproducible-s1-declaration-and-handoff.md b/workplans/RAIL-HO-WP-0011-reproducible-s1-declaration-and-handoff.md index 51ea0aa..fa54bce 100644 --- a/workplans/RAIL-HO-WP-0011-reproducible-s1-declaration-and-handoff.md +++ b/workplans/RAIL-HO-WP-0011-reproducible-s1-declaration-and-handoff.md @@ -325,6 +325,9 @@ guest networking), provider stop/restart, and "Notfallmodus" (rescue). Receipt: docs/evidence/railiance01-console-access/RAIL01-CONSOLE-20261014T164803Z.yaml. Finding: the panel login has no second factor; enabling MFA on the Host Europe account is recommended (founder). Each reboot window still needs its own same-day receipt. +Window receipt RAIL01-CONSOLE-20261014T175624Z names RPF-WP-0015-T03 window +rpf-wp-0015-t03-window-20261014-01 (same-day carry-forward of the founder's console +confirmation); both receipts' console_mechanism quoting was fixed so they parse as YAML. ## Acceptance