coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Implement S3 service assurance and admission checks
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 11:43:55 +02:00
parent 8f828c7609
commit 234b1b559f
21 changed files with 1728 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

198
assurance/service-records.json Normal file
View file

@ -0,0 +1,198 @@
{
"schema": "railiance-platform.service-records.v1",
"reviewed": "2026-09-05",
"review_owner": "railiance-platform",
"review_scope": "S3 disclosure of unsupported guarantees; not external package approval",
"services": [
{
"service": "apps-pg",
"accountable_owner": "railiance-platform",
"package_or_consumer_owner": "railiance-platform",
"operator_role": "attended platform operator; application proof by consumer owner",
"consumers": [
"vergabe",
"coulomb_social"
],
"failure_domain": "single-node railiance01",
"availability": {
"status": "unsupported",
"target": null,
"decision_owner": "railiance-platform + railiance-platform"
},
"rpo": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + railiance-platform"
},
"rto": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + railiance-platform"
},
"retention": "30 days",
"existing_evidence": "docs/evidence/RPF-WP-0019-backup-restore-2026-08-20.md",
"recovery_custody": "OpenBao: 2-of-3 operator quorum plus independent encrypted snapshot custody; database/offsite: governed backup lane and separately available restore key. Availability not verified in this task.",
"maintenance_abort": "docs/railiance01-coordinated-reboot.md; stop before mutation when freshness, quorum, consumer readiness or named abort operator is absent",
"freshness_policy": "assurance/service-contract.json; diagnostic thresholds only, no installed cadence approval",
"requirement_assessment": "No accepted numeric consumer availability/RPO/RTO requirement found in the reviewed contracts. Service classes inform placement, not guarantees. Refuse any request for guaranteed HA/node-loss recovery until matched to supported substrate and package proof."
},
{
"service": "platform-pg",
"accountable_owner": "railiance-platform",
"package_or_consumer_owner": "rapp-postgres",
"operator_role": "attended platform operator; application proof by consumer owner",
"consumers": [
"audit-core",
"tenant-engine",
"core-hub",
"isolation-probe"
],
"failure_domain": "single-node railiance01",
"availability": {
"status": "unsupported",
"target": null,
"decision_owner": "railiance-platform + rapp-postgres"
},
"rpo": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + rapp-postgres"
},
"rto": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + rapp-postgres"
},
"retention": "30 days",
"existing_evidence": "rapp-postgres/docs/evidence/backup-restore-2026-08-13.md",
"recovery_custody": "OpenBao: 2-of-3 operator quorum plus independent encrypted snapshot custody; database/offsite: governed backup lane and separately available restore key. Availability not verified in this task.",
"maintenance_abort": "docs/railiance01-coordinated-reboot.md; stop before mutation when freshness, quorum, consumer readiness or named abort operator is absent",
"freshness_policy": "assurance/service-contract.json; diagnostic thresholds only, no installed cadence approval",
"requirement_assessment": "No accepted numeric consumer availability/RPO/RTO requirement found in the reviewed contracts. Service classes inform placement, not guarantees. Refuse any request for guaranteed HA/node-loss recovery until matched to supported substrate and package proof."
},
{
"service": "platform-pg-2",
"accountable_owner": "railiance-platform",
"package_or_consumer_owner": "rapp-postgres",
"operator_role": "attended platform operator; application proof by consumer owner",
"consumers": [
"sbom-nexus"
],
"failure_domain": "single-node railiance01",
"availability": {
"status": "unsupported",
"target": null,
"decision_owner": "railiance-platform + rapp-postgres"
},
"rpo": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + rapp-postgres"
},
"rto": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + rapp-postgres"
},
"retention": "30 days",
"existing_evidence": "rapp-postgres/docs/evidence/RAPP-POSTGRES-WP-0005-T04-boundary-restore-2026-08-22.md",
"recovery_custody": "OpenBao: 2-of-3 operator quorum plus independent encrypted snapshot custody; database/offsite: governed backup lane and separately available restore key. Availability not verified in this task.",
"maintenance_abort": "docs/railiance01-coordinated-reboot.md; stop before mutation when freshness, quorum, consumer readiness or named abort operator is absent",
"freshness_policy": "assurance/service-contract.json; diagnostic thresholds only, no installed cadence approval",
"requirement_assessment": "No accepted numeric consumer availability/RPO/RTO requirement found in the reviewed contracts. Service classes inform placement, not guarantees. Refuse any request for guaranteed HA/node-loss recovery until matched to supported substrate and package proof."
},
{
"service": "openbao",
"accountable_owner": "railiance-platform",
"package_or_consumer_owner": "rapp-openbao",
"operator_role": "attended platform operator; application proof by consumer owner",
"consumers": [
"approved credential lanes"
],
"failure_domain": "single-node railiance01",
"availability": {
"status": "unsupported",
"target": null,
"decision_owner": "railiance-platform + rapp-openbao"
},
"rpo": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + rapp-openbao"
},
"rto": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + rapp-openbao"
},
"retention": "KV history/audit/snapshot retention not accepted",
"existing_evidence": "reviews/WARDEN-WP-0027-T02-DRILL-20260822-01-openbao-snapshot-receipt.json",
"recovery_custody": "OpenBao: 2-of-3 operator quorum plus independent encrypted snapshot custody; database/offsite: governed backup lane and separately available restore key. Availability not verified in this task.",
"maintenance_abort": "docs/railiance01-coordinated-reboot.md; stop before mutation when freshness, quorum, consumer readiness or named abort operator is absent",
"freshness_policy": "assurance/service-contract.json; diagnostic thresholds only, no installed cadence approval",
"requirement_assessment": "No accepted numeric consumer availability/RPO/RTO requirement found in the reviewed contracts. Service classes inform placement, not guarantees. Refuse any request for guaranteed HA/node-loss recovery until matched to supported substrate and package proof."
},
{
"service": "forgejo-backup",
"accountable_owner": "railiance-platform",
"package_or_consumer_owner": "railiance-forge",
"operator_role": "attended platform operator; application proof by consumer owner",
"consumers": [
"forgejo"
],
"failure_domain": "source host plus separately encrypted Nextcloud copy",
"availability": {
"status": "unsupported",
"target": null,
"decision_owner": "railiance-platform + railiance-forge"
},
"rpo": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + railiance-forge"
},
"rto": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + railiance-forge"
},
"retention": "14 daily + 4 weekly target; local 7/type",
"existing_evidence": "docs/forgejo-backup.md",
"recovery_custody": "OpenBao: 2-of-3 operator quorum plus independent encrypted snapshot custody; database/offsite: governed backup lane and separately available restore key. Availability not verified in this task.",
"maintenance_abort": "docs/railiance01-coordinated-reboot.md; stop before mutation when freshness, quorum, consumer readiness or named abort operator is absent",
"freshness_policy": "assurance/service-contract.json; diagnostic thresholds only, no installed cadence approval",
"requirement_assessment": "No accepted numeric consumer availability/RPO/RTO requirement found in the reviewed contracts. Service classes inform placement, not guarantees. Refuse any request for guaranteed HA/node-loss recovery until matched to supported substrate and package proof."
},
{
"service": "cnpg-option-a",
"accountable_owner": "railiance-platform",
"package_or_consumer_owner": "railiance-platform",
"operator_role": "attended platform operator; application proof by consumer owner",
"consumers": [
"production-of-record CNPG logical dumps"
],
"failure_domain": "source host plus separately encrypted Nextcloud copy",
"availability": {
"status": "unsupported",
"target": null,
"decision_owner": "railiance-platform + railiance-platform"
},
"rpo": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + railiance-platform"
},
"rto": {
"status": "unsupported",
"target_seconds": null,
"decision_owner": "railiance-platform + railiance-platform"
},
"retention": "offsite retention not accepted",
"existing_evidence": "docs/cnpg-option-a-backup.md",
"recovery_custody": "OpenBao: 2-of-3 operator quorum plus independent encrypted snapshot custody; database/offsite: governed backup lane and separately available restore key. Availability not verified in this task.",
"maintenance_abort": "docs/railiance01-coordinated-reboot.md; stop before mutation when freshness, quorum, consumer readiness or named abort operator is absent",
"freshness_policy": "assurance/service-contract.json; diagnostic thresholds only, no installed cadence approval",
"requirement_assessment": "No accepted numeric consumer availability/RPO/RTO requirement found in the reviewed contracts. Service classes inform placement, not guarantees. Refuse any request for guaranteed HA/node-loss recovery until matched to supported substrate and package proof."
}
]
}