diff --git a/workplans/RAIL-HO-WP-0006-forgejo-registry-ref-cleanup.md b/workplans/RAIL-HO-WP-0006-forgejo-registry-ref-cleanup.md index 11d4de7..1b13469 100644 --- a/workplans/RAIL-HO-WP-0006-forgejo-registry-ref-cleanup.md +++ b/workplans/RAIL-HO-WP-0006-forgejo-registry-ref-cleanup.md @@ -9,7 +9,7 @@ owner: codex topic_slug: railiance created: "2026-07-09" updated: "2026-07-09" -state_hub_workstream_id: "d99833d5-481d-4884-8b61-e9e549e0753f" +state_hub_workstream_id: "c54e5b14-1aa8-5907-b750-e0b531f6389f" --- # Forgejo Registry Ref Cleanup and WP-0005 Closeout Prep @@ -42,7 +42,7 @@ through **2026-07-12**. id: RAIL-HO-WP-0006-T01 status: done priority: high -state_hub_task_id: "ab681255-541b-4e1b-bdf7-f6c8193c0f48" +state_hub_task_id: "3a93fb56-d7bd-52fd-8425-245e6df5c43c" ``` Push local commits on `railiance-apps`, `railiance-platform`, `activity-core`, @@ -58,7 +58,7 @@ and `secrets-engine` from the prior registry migration session. id: RAIL-HO-WP-0006-T02 status: done priority: high -state_hub_task_id: "b822184c-0e54-40e4-b190-be737c8b4f43" +state_hub_task_id: "5a9194fa-551e-590e-b38c-624164b05047" ``` Update `issue-core` production deploy path and operator docs: @@ -76,7 +76,7 @@ Update `issue-core` production deploy path and operator docs: id: RAIL-HO-WP-0006-T03 status: done priority: high -state_hub_task_id: "478b8d01-fa27-4ad1-9f39-0208467bb2f4" +state_hub_task_id: "f0f345d0-4d1f-5c50-97e5-48f550327a01" ``` Update `state-hub` Helm values and operator docs: @@ -95,7 +95,7 @@ Update `state-hub` Helm values and operator docs: id: RAIL-HO-WP-0006-T04 status: done priority: medium -state_hub_task_id: "f07a955b-0565-4156-a1c6-e0ee22d849ba" +state_hub_task_id: "714ef254-a495-5898-94e3-7b062f84161e" ``` Update `whynot-design` publish/consume docs and `package.json`: @@ -113,7 +113,7 @@ Update `whynot-design` publish/consume docs and `package.json`: id: RAIL-HO-WP-0006-T05 status: done priority: medium -state_hub_task_id: "18006a7d-9ac0-46b3-9172-0d90ceab2573" +state_hub_task_id: "a9508dd5-b4f8-5373-a555-dfa2c93c3764" ``` Update `ops-hub` bootstrap seed and operator docs to Forgejo OCI `/v2/`. @@ -128,7 +128,7 @@ Update `ops-hub` bootstrap seed and operator docs to Forgejo OCI `/v2/`. id: RAIL-HO-WP-0006-T06 status: done priority: medium -state_hub_task_id: "53b3114b-01c0-4f14-a12a-595932de429b" +state_hub_task_id: "a65d889f-a8e6-56e7-a189-7bb62bff49fc" ``` Update `core-hub` k8s manifests and deployment docs to Forgejo OCI paths. @@ -143,7 +143,7 @@ Update `core-hub` k8s manifests and deployment docs to Forgejo OCI paths. id: RAIL-HO-WP-0006-T07 status: done priority: medium -state_hub_task_id: "87cbe4ef-a303-46cb-9454-616a2c0fe08b" +state_hub_task_id: "1996d875-3be3-57f4-ad38-62ecef4999da" ``` Replace remaining `gitea.coulomb.social` raw URLs in @@ -159,7 +159,7 @@ Replace remaining `gitea.coulomb.social` raw URLs in id: RAIL-HO-WP-0006-T08 status: done priority: low -state_hub_task_id: "66e0330b-fd4e-4cb2-b866-1d3b1c767191" +state_hub_task_id: "3cf2b117-b464-5f52-8c4a-cc3785679330" ``` Replace `~/railiance-bootstrap` (stale duplicate of `railiance-cluster`) with a @@ -177,7 +177,7 @@ preserved at `~/railiance-bootstrap.stale-20260709`. id: RAIL-HO-WP-0006-T09 status: done priority: low -state_hub_task_id: "3c740d1c-6771-4627-b240-78517ae53d8f" +state_hub_task_id: "4a26f82f-ea24-5691-9399-1fc14a60951f" ``` Update `docs/forgejo-gitea-retirement-checklist.md` with WP-0006 completion diff --git a/workplans/RAIL-HO-WP-0007-first-reef-rollout-and-s1-canonicalization.md b/workplans/RAIL-HO-WP-0007-first-reef-rollout-and-s1-canonicalization.md index 63fb1b8..f9a1cd4 100644 --- a/workplans/RAIL-HO-WP-0007-first-reef-rollout-and-s1-canonicalization.md +++ b/workplans/RAIL-HO-WP-0007-first-reef-rollout-and-s1-canonicalization.md @@ -9,7 +9,7 @@ owner: codex topic_slug: railiance created: "2026-07-25" updated: "2026-07-26" -state_hub_workstream_id: "42c28d2e-6e1b-4ec4-b191-8ba9f09899da" +state_hub_workstream_id: "9447ace8-b341-5f02-95c4-7ae4d062e9b6" --- # RAIL-HO-WP-0007 - First reef rollout and S1 canonicalization @@ -44,7 +44,7 @@ It must not: id: RAIL-HO-WP-0007-T01 status: done priority: high -state_hub_task_id: "e162235f-b4c1-42fb-ae17-23f698a8ad3f" +state_hub_task_id: "5fc12f17-3af6-5fed-86c3-32e9f9c1c054" ``` Document the S1 direction so new architecture work anchors on `railiance-infra` @@ -65,7 +65,7 @@ records as non-authoritative context. id: RAIL-HO-WP-0007-T02 status: done priority: high -state_hub_task_id: "aa32fb8d-adab-41d3-bb8d-13167df7cc44" +state_hub_task_id: "83132d76-462f-5835-a034-69102c061f6b" ``` Prepare the minimum substrate identity and topology data needed for: @@ -88,7 +88,7 @@ and runbook sources. id: RAIL-HO-WP-0007-T03 status: done priority: medium -state_hub_task_id: "f5d58dc6-5086-4cc7-9282-d15a6eb51549" +state_hub_task_id: "d26377c9-5c7c-5e3c-96b8-d032118a144c" ``` Record which substrate facts are stable enough for reef rollout now and which @@ -107,7 +107,7 @@ nickname taxonomies like "associate", "sidecar", and "comet". id: RAIL-HO-WP-0007-T04 status: done priority: medium -state_hub_task_id: "0297092c-556d-42f0-bd9d-283db0f375dd" +state_hub_task_id: "5a42eb53-6a8c-507e-ad9e-ec51a308d9c9" ``` Prepare the handoff for creating the first reef repos and for reducing the S1 diff --git a/workplans/RAIL-HO-WP-0008-railiance01-resource-and-commercial-evidence.md b/workplans/RAIL-HO-WP-0008-railiance01-resource-and-commercial-evidence.md index b8909c0..537522a 100644 --- a/workplans/RAIL-HO-WP-0008-railiance01-resource-and-commercial-evidence.md +++ b/workplans/RAIL-HO-WP-0008-railiance01-resource-and-commercial-evidence.md @@ -11,7 +11,7 @@ created: "2026-08-11" updated: "2026-08-15" related: - RESOURCE-WP-0003 -state_hub_workstream_id: "7122657f-87c8-46b5-a725-a1af1ba0af12" +state_hub_workstream_id: "b5abfd6b-08f0-5db2-8f54-056817478220" --- # RAIL-HO-WP-0008 — railiance01 resource and commercial evidence @@ -29,7 +29,7 @@ Origin: `RESOURCE-WP-0003-T04` delegated evidence gap. id: RAIL-HO-WP-0008-T01 status: done priority: high -state_hub_task_id: "cde55584-229d-4e27-8fc8-0f54d78c71ed" +state_hub_task_id: "480e60b1-6cd4-5df5-a534-77381213e974" ``` Record the Host Europe product/service class, non-secret provider resource ID, @@ -59,7 +59,7 @@ provenance, while unknown or restricted fields remain explicitly classified. id: RAIL-HO-WP-0008-T02 status: done priority: high -state_hub_task_id: "8b0e5547-23ae-4516-b6d7-9c196882d088" +state_hub_task_id: "689e565c-b69a-50c7-865f-44447e0d073f" ``` Define a stable non-secret observation containing provisioned and usable CPU, @@ -85,7 +85,7 @@ Sample at `2026-08-15T17:02:50Z`: 4 vCPU, 16377056 KiB RAM, 193 GiB root id: RAIL-HO-WP-0008-T03 status: done priority: medium -state_hub_task_id: "8bdaa96f-400b-455f-87db-d5c11e287142" +state_hub_task_id: "e7e8c382-cff6-569e-8dfd-e39b7884676d" ``` Define the recurring host-maintenance activities and measurable operator-labor diff --git a/workplans/RAIL-HO-WP-0009-firewall-declared-state-and-api-exposure.md b/workplans/RAIL-HO-WP-0009-firewall-declared-state-and-api-exposure.md index 8695e20..bd7f1e7 100644 --- a/workplans/RAIL-HO-WP-0009-firewall-declared-state-and-api-exposure.md +++ b/workplans/RAIL-HO-WP-0009-firewall-declared-state-and-api-exposure.md @@ -13,7 +13,7 @@ related_repos: - railiance-cluster - railiance-platform - railiance-master -state_hub_workstream_id: "ebf3c8d1-9066-4f13-a2d5-1da0409f2162" +state_hub_workstream_id: "91ac6340-c9e4-591b-b04d-a53db463e308" --- # RAIL-HO-WP-0009 - Firewall declared-state integrity and k3s API exposure @@ -82,7 +82,7 @@ It must not: id: RAIL-HO-WP-0009-T01 status: done priority: high -state_hub_task_id: "9a000a00-7cfd-4798-803f-bf59359a09b7" +state_hub_task_id: "16010958-40b2-5463-b64b-c86800a5c08a" ``` Make the allowlist declarative. Add `k3s_api_allowed_sources` (empty default — @@ -100,7 +100,7 @@ session (`89.244.90.236` granted; `kubectl` verified, node Ready v1.35.1+k3s1). id: RAIL-HO-WP-0009-T02 status: done priority: high -state_hub_task_id: "7d91dfc2-481b-4943-90e9-bb1b814a23dc" +state_hub_task_id: "bf66bb87-1601-587b-a91d-1908b8c1142d" ``` Converge the base role against `railiance01` and confirm the resulting UFW state @@ -154,7 +154,7 @@ operator-approved prune of those three grants. SSH stays; kubectl goes via id: RAIL-HO-WP-0009-T03 status: done priority: high -state_hub_task_id: "3e835b96-736c-458c-91eb-04bfd4c7e0e7" +state_hub_task_id: "847837f8-e4b4-5b9d-b625-e69d4c340f92" ``` Audit the rest of the base role for the same class of defect: any place where @@ -207,7 +207,7 @@ tags**, so convergence cannot be scoped. Add tags as part of this task. id: RAIL-HO-WP-0009-T04 status: done priority: medium -state_hub_task_id: "908630e8-e245-47f5-a060-3949250f522c" +state_hub_task_id: "ad315a7c-6a33-5716-9ab1-5b05f547e208" ``` Remove the k3s API from the public internet. Operator addresses rotate, so an @@ -230,7 +230,7 @@ remaining grants is T02. id: RAIL-HO-WP-0009-T06 status: done priority: high -state_hub_task_id: "764adf9e-cb60-4edd-86bf-f0c170e65cd2" +state_hub_task_id: "e498c6d5-3e29-5dea-80d2-08c712b15466" ``` **Flannel VXLAN is declared open to Anywhere.** Found 2026-08-12 by the newly @@ -261,7 +261,7 @@ address in that list before converging firewall. id: RAIL-HO-WP-0009-T05 status: done priority: medium -state_hub_task_id: "81af8470-286c-440a-bbe7-b47a17ee6750" +state_hub_task_id: "ac0c3e8e-3384-5765-8ad1-98ffa68f19c1" ``` Propose a declared-vs-live conformance check for firewall state, and route it to diff --git a/workplans/RAIL-HO-WP-0010-new-reef-ports-need-a-grant.md b/workplans/RAIL-HO-WP-0010-new-reef-ports-need-a-grant.md index 737d4a5..46e2f7c 100644 --- a/workplans/RAIL-HO-WP-0010-new-reef-ports-need-a-grant.md +++ b/workplans/RAIL-HO-WP-0010-new-reef-ports-need-a-grant.md @@ -13,7 +13,7 @@ related: - RMASTER-WP-0023 - RAIL-HO-WP-0009 - ADR-0008 -state_hub_workstream_id: "9eed7d88-27a5-4fbe-b405-2a40aae832f3" +state_hub_workstream_id: "226e81e2-2bed-5d3b-869f-0cec7940719c" --- # RAIL-HO-WP-0010 — new-reef host ports @@ -33,7 +33,7 @@ stays a named exception. id: RAIL-HO-WP-0010-T01 status: done priority: high -state_hub_task_id: "f4cc01f8-5b5e-4693-b389-9bd81e26a799" +state_hub_task_id: "7935c941-269a-5827-a139-1b02c6b649f6" ``` Bootstrap / inventory for a new reef starts with SSH (and Nydus only if