coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RPF-WP-0015-T03: record drill PVC removal and founder backup waiver

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 680842@bnt-lap001
Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883
This commit is contained in:
codex 2026-10-14 18:44:39 +02:00
parent 02c8114568
commit 516bd2a49c
2 changed files with 16 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

10
.custodian-brief.md
View file

@ -2,17 +2,15 @@
# Custodian Brief — railiance-platform
**Domain:** financials
**Last synced:** 2026-10-14 10:58 UTC
**Last synced:** 2026-10-14 16:36 UTC
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
## Active Workstreams
### Coordinate audit-core temporary custody and recovery exercises
Progress: 2/4 done | workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
Progress: 3/4 done | workplan_id: `f4640325-e89c-591d-b58e-ec6b087900ac`
**Open tasks:**
- ! T02 — Define the runtime database lease recovery exercise `fda4262a`
*(wait: Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core.)*
- ! T03 — Define the coordinated railiance01 reboot exercise `ba729d18`
*(wait: Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner.)*
@ -26,13 +24,11 @@ Progress: 4/6 done | workplan_id: `b2c25a01-4a80-55c1-90cf-8538000f7e0e`
*(wait: Owner work first: the OpenBao owner confirms mount/path/fields and writer/reader authority and publishes the non-secret routing receipt; the handoff enters the attended window only when a command exists.)*
### Admit the Playwright pilot and establish scoped consumer group access
Progress: 4/6 done | workplan_id: `31933d08-c877-5fda-aff9-6220c3705c92`
Progress: 5/6 done | workplan_id: `31933d08-c877-5fda-aff9-6220c3705c92`
**Open tasks:**
- ! Connect platform identities and prove managed consumer operation `a82762eb`
*(wait: User admitted all identified platform humans and coding agents; their supported Kubernetes authentication/group-mapping route remains unimplemented.)*
- ! Obtain Custodian coordination of self-service consumer delivery `ef6c21bc`
*(wait: Await Custodian coordination acceptance, accountable coordinator and source task links for the existing cross-repository delivery.)*
### ArgoCD phase B: adopt the four existing Applications on railiance01
Progress: 5/8 done | workplan_id: `98140775-3b9a-5cf9-9af6-722502d487dc`

13
workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
View file

@ -471,3 +471,16 @@ Follow-ups (owners, not blocking T02): guard revocation on Secret refreshTime +
container startedAt (audit-core/rapp-postgres); ESO refresh interval equals role TTL
(audit-core/ESO); ops-warden strip OPENBAO_TOKEN; founder: revoke/remove the standing
shell-profile OPENBAO_TOKEN.
T03 pre-window gates cleared 2026-10-14 (founder GO in session):
- Stuck drill PVC `platform-pg-drill/platform-pg-drill-1` (rapp-postgres drill scratch,
deletion requested 2026-08-13, namespace and CNPG owner gone, no pod or attachment):
the API refused to patch an object in a missing namespace, so the empty namespace was
recreated, the pvc-protection finalizer removed, the claim and its local-path PV
(reclaim Delete) released, and the namespace deleted again. The node-reboot preflight
now passes its terminating-PVC check without `--accept-terminating-pvc`.
- Founder waiver: the fresh-backup recommendation for `state-hub-db`, `user-engine-pg`,
`net-kingdom-pg` and `target-revenue-pg` (no CNPG backup configured) is waived for the
T03 reboot window. A reboot keeps their local-path PVCs; the preflight's per-cluster
UID/PVC-UID/systemID comparison detects any re-bootstrap. platform-pg's fresh backup
remains required. Configuring backups for those clusters stays with their owners.