coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record verified Forgejo Scaleway backup and recovery
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-06 01:03:02 +02:00
parent be45c4e3fd
commit 4a9d6e6c7f
8 changed files with 114 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
workplans/README.md
View file

@ -1,6 +1,6 @@
# Current platform work
Reviewed 2026-09-05. Six open workplans: six blocked on explicit owner/live
Reviewed 2026-09-06. Seven open workplans: seven blocked on explicit owner/live
gates; RPF-WP-0036 now has its repository implementation. Completed designs and implementations are
under `archived/`; their IDs and UUIDs are preserved. The number of blocked
plans is not a count of missing implementations or independent incidents.
@ -13,6 +13,7 @@ plans is not a count of missing implementations or independent incidents.
| [RPF-WP-0015](RPF-WP-0015-audit-core-custody-and-recovery-coordination.md) | Two prepared recovery exercises; registered load driver exists; fresh sender/window/abort approvals and custody readiness remain | S3 contributes lease/ESO and snapshot/unseal proof; S1/S2 and audit-core execute their parts. |
| [RPF-WP-0035](RPF-WP-0035-credential-lane-implementation.md) | Two remaining lanes: secrets-engine JWT and Fluid operator KV | Signing T04 is complete; JWT and Fluid retain separate issuer/consumer gates. |
| [RPF-WP-0036](RPF-WP-0036-platform-service-assurance.md) | Implemented local assurance/admission; waits for recurring restore evidence, Q2 reception and owner handoff | Run the assurance commands; live acceptance and external ownership remain gated. |
| [RPF-WP-0038](RPF-WP-0038-forgejo-scaleway-primary-coverage.md) | Forgejo native Scaleway backup and isolated database recovery complete; full archive delivery remains | Separate archive prefix, runtime delivery and application recovery contract required. |
RPF-WP-0036-T02/T05/T07 are complete; T03/T04/T06 retain the remaining
acceptance gates. Treat credential exposure closure as the highest-priority attended
@ -27,7 +28,8 @@ still shows them active. Use source IDs, and follow AGENTS.md for verified sync.
## Latest closure review
[2026-09-05 blocker review](../history/2026-09-05-blocked-workplan-closure-review.md):
12 unfinished tasks across six genuine blocked plans. All terminal plans have
At that review: 12 unfinished tasks across six genuine blocked plans.
The September 6 follow-up adds WP-0038 with one remaining full-archive task. All terminal plans have
only done/cancel tasks. Completed ESO recovery RPF-WP-0037 is archived.
Three retired Hub aliases still appear open; they are a derived-view defect,
not three more workplans. Use this file before the dated generated brief.

14
workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Close Forgejo primary backup coverage on Scaleway"
domain: financials
repo: railiance-platform
status: active
status: blocked
owner: codex
created: "2026-09-06"
updated: "2026-09-06"
@ -35,7 +35,7 @@ server directory. Retention follows the existing 30-day primary contract.
```task
id: RPF-WP-0038-T02
status: progress
status: done
priority: high
state_hub_task_id: "b6960c2e-1ad3-5c23-bfb6-9f1f16d0f0c2"
```
@ -45,11 +45,15 @@ base backup. Apply only the reviewed backup field with a resource-version
guard, preserving unrelated live settings. Require a completed fresh Backup,
continuous archiving and source readiness; record metadata only.
Completed: fresh backup `forgejo-db-daily-20260905225013`, backup ID
`20260905T225115`, source Ready and continuous archiving healthy. Evidence:
`docs/evidence/forgejo-scaleway-activation-2026-09-06.json`.
## Prove isolated primary database recovery
```task
id: RPF-WP-0038-T03
status: todo
status: done
priority: high
state_hub_task_id: "b47b5905-83c8-5da8-9951-e8cb7b7459f9"
```
@ -59,6 +63,10 @@ Verify expected Forgejo database and nonempty repository/user/package metadata,
source readiness and scratch cleanup. This is database recovery, not combined
Forgejo blob/application recovery.
Completed: restored in 45.08 seconds, 142 repository records, six users and
2,040 package blob records. Production remained Ready; scratch namespace
removed. Evidence: `docs/evidence/forgejo-scaleway-restore-2026-09-06.json`.
## Establish primary full-archive delivery and application recovery
```task