From 6c3a4164b71406c0ecb98bcd53aa0b09d6caa1c5 Mon Sep 17 00:00:00 2001 From: codex Date: Tue, 20 Oct 2026 22:43:09 +0200 Subject: [PATCH] RAIL-HO-WP-0014-T02: attended apply on railiance01 done Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 605711@bnt-lap001 Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61 --- WORK-RECORDS.md | 2 +- ...AIL-HO-WP-0014-custodian-agt-restricted-host-account.md | 7 +++---- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index f413210..2d62de2 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -64,5 +64,5 @@ | task | RAIL-HO-WP-0013-T03 | wait | — | workplans/RAIL-HO-WP-0013-host-time-baseline.md | | task | RAIL-HO-WP-0013-T04 | wait | — | workplans/RAIL-HO-WP-0013-host-time-baseline.md | | task | RAIL-HO-WP-0014-T01 | done | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md | -| task | RAIL-HO-WP-0014-T02 | wait | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md | +| task | RAIL-HO-WP-0014-T02 | done | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md | | task | RAIL-HO-WP-0014-T03 | wait | — | workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md | diff --git a/workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md b/workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md index 35724a3..e0db796 100644 --- a/workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md +++ b/workplans/RAIL-HO-WP-0014-custodian-agt-restricted-host-account.md @@ -76,14 +76,13 @@ validate-handoff-readonly` OK. No host was contacted. ```task id: RAIL-HO-WP-0014-T02 -status: wait +status: done priority: high -needs_human: true -depends_on: [RCLUSTER-WP-0019-T03] -blocking_reason: "Attended founder apply on Railiance01; the closing goss check only passes once RCLUSTER-WP-0019 has made the k3s kubeconfig 0600." state_hub_task_id: "a61955c2-11d3-505c-a033-48fa2284f1da" ``` +**Done 2026-10-20 (attended, founder recovery session open).** Applied to Railiance01; fresh tegwick login verified; goss 33/33 after registries.yaml was restricted to 0600. Evidence: the-custodian `docs/evidence/2026-10-20-railiance01-cutover-steps-2-4.md`. + From `~/railiance-infra/ansible`, as the operator (admin certificate), limited to Railiance01 and the `restricted_agent_account` tag (no CA key needed):