From 4258fbecf35eb5788fb44909fec1ecaf095a9dc0 Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 11 Oct 2026 21:06:41 +0200 Subject: [PATCH] Requalify tasks after founder attended-window choices (2026-10-11, round 3) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87 --- .../RPF-WP-0038-forgejo-scaleway-primary-coverage.md | 7 +++---- .../RPF-WP-0053-coulomb-paired-backup-admission.md | 10 ++++++---- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md b/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md index d4d8eb8..e352ac5 100644 --- a/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md +++ b/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md @@ -72,14 +72,13 @@ removed. Evidence: `docs/evidence/forgejo-scaleway-restore-2026-09-06.json`. ```task id: RPF-WP-0038-T04 -status: wait -needs_human: true -decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483 -blocking_reason: "Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval." +status: todo priority: high state_hub_task_id: "a4807df0-ec96-58f1-9cbd-42b1dcde0d6f" ``` +2026-10-11: requalified — founder chose prefix .../application-archives/forgejo/, retention 7d+4w+3m via lifecycle, Nextcloud essentials-only secondary. If issuing the prefix-scoped credential needs the founder's Scaleway console or OpenBao login, add one exact command to the attended-window checklist. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md (Round 3). + Choose an independent archive prefix and confirm storage retention/caller contract, bounded worker credential delivery and multipart transfer/abort. Then retrieve a primary full archive and execute isolated application recovery. diff --git a/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md b/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md index 346204b..a9b546b 100644 --- a/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md +++ b/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md @@ -45,13 +45,14 @@ Do not mark the warden offsite workload identity resolved without a declaration. ```task id: RPF-WP-0053-T02 -status: wait +status: todo priority: high -needs_human: true intervention_note: "Platform must admit the exact Scaleway primary archive caller/prefix, reconcile its current custody front door and retention/capacity, and deliver bounded credentials before activation." state_hub_task_id: "b06f1a44-1a55-588c-9c6c-3c1e290544df" ``` +2026-10-11: requalified — founder approved the prefix-scoped IAM credential and delivery path. If issuing it needs the founder's Scaleway console, add one exact command to the attended-window checklist. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md (Round 3). + The original Nextcloud overwrite-slot proposal is withdrawn; its current workload uploader is create-only and secondary. Reuse the platform primary contract: s3://railiance-platform-pg-backup/platform-pg/application-archives/coulomb-social/, @@ -88,13 +89,14 @@ activation. No retained-object/version-delete rights belong in the publisher. ```task id: RPF-WP-0053-T03 -status: wait +status: todo priority: high -needs_human: true intervention_note: "Needs T01/T02 owner admission and founder go for the exact first quiescence/upload and schedule; independent offsite retrieval and recovery proof remain required." state_hub_task_id: "871c14da-2940-5be6-8ce8-953973422064" ``` +2026-10-11: requalified — founder approved the schedule (daily 03:15 UTC, RPO 24 h, stale 26 h, RTO 60 min). Activation follows T02 under the standing change rule. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md (Round 3). + Founder ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED, plus explicit primary archive creation/version-read authority. Proposed UTC daily03:15 (+up to 5min jitter), RPO target24h, hourly stale threshold 26h, provisional