coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Requalify tasks after founder attended-window choices (2026-10-11, round 3)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1370019@bnt-lap001
Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
This commit is contained in:
codex 2026-10-11 21:06:41 +02:00
parent 2366c1125f
commit 4258fbecf3
2 changed files with 9 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md
View file

@ -72,14 +72,13 @@ removed. Evidence: `docs/evidence/forgejo-scaleway-restore-2026-09-06.json`.
```task
id: RPF-WP-0038-T04
status: wait
needs_human: true
decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
blocking_reason: "Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval."
status: todo
priority: high
state_hub_task_id: "a4807df0-ec96-58f1-9cbd-42b1dcde0d6f"
```
2026-10-11: requalified — founder chose prefix .../application-archives/forgejo/, retention 7d+4w+3m via lifecycle, Nextcloud essentials-only secondary. If issuing the prefix-scoped credential needs the founder's Scaleway console or OpenBao login, add one exact command to the attended-window checklist. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md (Round 3).
Choose an independent archive prefix and confirm storage retention/caller
contract, bounded worker credential delivery and multipart transfer/abort.
Then retrieve a primary full archive and execute isolated application recovery.

10
workplans/RPF-WP-0053-coulomb-paired-backup-admission.md
View file

@ -45,13 +45,14 @@ Do not mark the warden offsite workload identity resolved without a declaration.
```task
id: RPF-WP-0053-T02
status: wait
status: todo
priority: high
needs_human: true
intervention_note: "Platform must admit the exact Scaleway primary archive caller/prefix, reconcile its current custody front door and retention/capacity, and deliver bounded credentials before activation."
state_hub_task_id: "b06f1a44-1a55-588c-9c6c-3c1e290544df"
```
2026-10-11: requalified — founder approved the prefix-scoped IAM credential and delivery path. If issuing it needs the founder's Scaleway console, add one exact command to the attended-window checklist. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md (Round 3).
The original Nextcloud overwrite-slot proposal is withdrawn; its current workload
uploader is create-only and secondary. Reuse the platform primary contract:
s3://railiance-platform-pg-backup/platform-pg/application-archives/coulomb-social/,
@ -88,13 +89,14 @@ activation. No retained-object/version-delete rights belong in the publisher.
```task
id: RPF-WP-0053-T03
status: wait
status: todo
priority: high
needs_human: true
intervention_note: "Needs T01/T02 owner admission and founder go for the exact first quiescence/upload and schedule; independent offsite retrieval and recovery proof remain required."
state_hub_task_id: "871c14da-2940-5be6-8ce8-953973422064"
```
2026-10-11: requalified — founder approved the schedule (daily 03:15 UTC, RPO 24 h, stale 26 h, RTO 60 min). Activation follows T02 under the standing change rule. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md (Round 3).
Founder ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED, plus
explicit primary archive creation/version-read authority. Proposed UTC daily03:15
(+up to 5min jitter), RPO target24h, hourly stale threshold 26h, provisional