coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Record the MAS backup pair node delivery and close RPF-WP-0070-T02.
All checks were successful
CCR intake gate / gate (push) Successful in 13s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4541@bnt-lap001
Assistant-Session: 2099b3aa-d7d9-49a9-ab4e-fa8b7d0e39e8
This commit is contained in:
codex 2026-11-03 05:53:50 +01:00
parent 98e2cad1cc
commit 3035f87d7f
4 changed files with 49 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WORK-RECORDS.md
View file

@ -237,7 +237,7 @@
| task | RPF-WP-0069-T08 | done | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
| task | RPF-WP-0069-T09 | wait | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
| task | RPF-WP-0070-T01 | done | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
| task | RPF-WP-0070-T02 | progress | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
| task | RPF-WP-0070-T02 | done | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
| task | RPF-WP-0070-T03 | todo | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
| task | RPF-WP-0070-T04 | todo | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
| task | RPF-WP-0070-T05 | todo | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |

9
credential-change-requests/CCR-2026-0062-mas-backup-primary.yaml
View file

@ -178,6 +178,15 @@
"details": [
"Founder approved node execution for this delivery in an attended session. source_ref founder-node-admission-2026-11-03."
]
},
{
"at": "2026-11-03T04:53:27Z",
"actor": "User (platform-owner)",
"kind": "node_delivery",
"result": "passed",
"details": [
"Admitted export sha256 16dbfe197b6f42e24bcd7d23e81e5d699ec7d3eb17e7a5177415e5d757a1a372; KV version 1 delivered to /etc/mas-backup/primary.env root:root 0600 in a 0700 directory; readback equal; token revoked. Receipt docs/evidence/mas-backup-node-delivery-2026-11-03.json."
]
}
],
"activation_conditions": [

28
docs/evidence/mas-backup-node-delivery-2026-11-03.json Normal file
View file

@ -0,0 +1,28 @@
{
"schema": "platform.application-backup-credential-delivery.v1",
"runner": "attended: founder ran /opt/railiance-platform/scripts/application_backup_credentials.py --execute as root on railiance01",
"delivery_source_sha256": "b4a9622f2afe122b3aadbb7d2a818b8b7a92d248f2c9d6a9105460f452b2872e",
"delivery": {
"application": "mas",
"ccr": "CCR-2026-0062",
"ccr_sha256": "16dbfe197b6f42e24bcd7d23e81e5d699ec7d3eb17e7a5177415e5d757a1a372",
"cluster_uid": "a553c742-0115-43d4-99a4-a5ca56fe0786",
"delivered_at": "2026-11-03T04:53:27.406627+00:00",
"directory_mode": "0700",
"kv_path": "platform/workloads/mas/backup-primary",
"kv_version": 1,
"mode": "0600",
"outcome": "created",
"owner": "root:root",
"readback_equal": true,
"status": "delivered",
"target": "/etc/mas-backup/primary.env",
"token_revoked": true
},
"node_check": {
"/etc/mas-backup": "root:root 700",
"/etc/mas-backup/primary.env": "root:root 600, 98 bytes",
"/etc/mas-backup/credential-reader.json": "admitted CCR export, root:root 600"
},
"values_recorded": false
}

13
workplans/RPF-WP-0070-mas-evidence-recovery.md
View file

@ -140,11 +140,11 @@ was not read or copied. Delivery admission stays false, and
```task
id: RPF-WP-0070-T02
status: progress
status: done
priority: medium
needs_human: true
depends_on: [RPF-WP-0070-T01]
intervention_note: "Admission set 2026-11-03; admitted CCR export SHA256 16dbfe197b6f42e24bcd7d23e81e5d699ec7d3eb17e7a5177415e5d757a1a372. Next: attended root run of scripts/application_backup_credentials.py --application mas --expected-kv-version 1 --execute on railiance01, then record the metadata receipt."
intervention_note: "Done 2026-11-03: /etc/mas-backup/primary.env delivered (KV v1, root:root 0600, readback equal, token revoked). Receipt docs/evidence/mas-backup-node-delivery-2026-11-03.json."
state_hub_task_id: "c8a9ba31-9fb6-5412-90b7-dea658943053"
```
@ -182,6 +182,15 @@ passes the delivery helper's execute-mode contract check. The delivery
helper source is `b4a9622f2afe122b3aadbb7d2a818b8b7a92d248f2c9d6a9105460f452b2872e`.
`/etc/mas-backup` does not exist on the node yet.
2026-11-03 04:53Z: the founder installed the admitted export as
`/etc/mas-backup/credential-reader.json` and the delivery helper at
`/opt/railiance-platform/scripts/application_backup_credentials.py`. Both
hashes were checked on the node. The delivery ran as root and recorded:
status `delivered`, outcome `created`, KV version 1, `readback_equal`,
`token_revoked`. The node check shows `/etc/mas-backup` root:root 0700 and
`primary.env` root:root 0600 at 98 bytes. T02 is done. Receipt:
`docs/evidence/mas-backup-node-delivery-2026-11-03.json`.
## Install the worker and publish the first offsite copy
```task