Prepare tenant-zero OpenBao roles and review platform essentials
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0
This commit is contained in:
codex 2026-09-27 16:43:32 +02:00
parent 4f20e755c4
commit 5781d34b3b
10 changed files with 179 additions and 14 deletions

View file

@ -256,3 +256,12 @@ renumbered.
Six months, or on any of: a service moving placement level, a backup target
becoming available, or the framework reaching `accepted`. Next review due
**2027-02-17**.
## Platform ownership clarification — 2026-09-27
All infrastructure providers in this declaration belong to `tenant:platform`
(tenant zero), including OpenBao, shared PostgreSQL and Forgejo's database.
Coulomb is a workload tenant; DNS under `coulomb.social` does not assign these
providers to it. Provider ownership is separate from the measured tenancy
posture axes and from each credential or database consumer's resource tenant.
See [the source review and migration requirements](platform-tenant-essentials-review.md).