Separate Core Hub onboarding from archived apps-pg identities

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883

docs/evidence/RPF-WP-0021-collision-repair-proposal.json

@@ -1,5 +1,5 @@
 {
-  "status": "proposed-requires-exception-to-managed-uuid-rule",
+  "status": "applied-user-approved",
   "retain": "workplans/archived/260702-RPF-WP-0021-apps-pg-shared-cluster.md",
   "rename_from": "workplans/RPF-WP-0021-core-hub-platform-onboarding.md",
   "rename_to": "workplans/RPF-WP-0030-core-hub-platform-onboarding.md",
@@ -42,5 +42,7 @@
     "docs/evidence/core-hub-private-shadow-2026-08-21.md",
     "docs/evidence/core-hub-shadow-preflight-2026-08-20.md"
   ],
-  "hub_action": "Reconcile pushed source using rmgr sync; review further refusals without blindly acknowledging retirements."
+  "hub_action": "Reconcile pushed source using rmgr sync; review further refusals without blindly acknowledging retirements.",
+  "approved_at": "2026-09-05",
+  "archived_file_sha256": "4bed0cb17adf20fedb4cca79c3d4bfd3c252b8c3feead6927578ecd915aa23a3"
 }

docs/evidence/core-hub-postgres-capacity-admission-2026-08-20.md

@@ -1,6 +1,6 @@
 # Core Hub PostgreSQL capacity admission — 2026-08-20
 
-Workplan: `RPF-WP-0021-T02`
+Workplan: `RPF-WP-0030-T02`
 
 Target: railiance01 `databases/platform-pg`
 

docs/evidence/core-hub-postgres-capacity-preflight-2026-08-20.md

@@ -1,6 +1,6 @@
 # Core Hub PostgreSQL capacity preflight — 2026-08-20
 
-Workplan: `RPF-WP-0021-T02`
+Workplan: `RPF-WP-0030-T02`
 
 Target: railiance01 `databases/platform-pg`
 

docs/evidence/core-hub-private-shadow-2026-08-21.md

@@ -3,7 +3,7 @@
 ## Scope and safety boundary
 
 This record covers the private Core Hub relocation shadow on railiance01 for
-`RPF-WP-0021`. Public Ingress was absent throughout. The CoulombCore writer,
+`RPF-WP-0030`. Public Ingress was absent throughout. The CoulombCore writer,
 public routing, DNS, and source runtime were not changed or retired. No secret
 value is included in this record.
 

docs/evidence/core-hub-shadow-preflight-2026-08-20.md

@@ -1,7 +1,7 @@
 # Core Hub private-shadow preflight — 2026-08-20
 
 This records non-secret source/target metadata gathered for
-`RPF-WP-0021-T05`. It is preparation only: no source data was dumped or
+`RPF-WP-0030-T05`. It is preparation only: no source data was dumped or
 restored because the governed credential projections under T04 are not yet
 live.
 

workplans/RPF-WP-0030-core-hub-platform-onboarding.md

@@ -1,5 +1,5 @@
 ---
-id: RPF-WP-0021
+id: RPF-WP-0030
 type: workplan
 title: "Unblock rapp-core-hub publication and platform onboarding"
 domain: financials
@@ -8,17 +8,17 @@ status: finished
 owner: codex
 topic_slug: railiance
 created: "2026-08-20"
-updated: "2026-08-21"
+updated: "2026-09-05"
 related:
   - CORE-WP-0011
   - RAPPCOREHUB-WP-0001
   - RAPP-POSTGRES-WP-0003
 origin: request
 origin_ref: CORE-WP-0011
-state_hub_workstream_id: "aa7fe3ff-a76c-5f26-a1e0-a35e48b28d60"
+state_hub_workstream_id: "f7a13cc2-7b1f-5644-89a8-b4e9a934b018"
 ---
 
-# RPF-WP-0021 — Core Hub platform onboarding
+# RPF-WP-0030 — Core Hub platform onboarding
 
 ## Goal
 
@@ -67,10 +67,10 @@ retirement of the old runtime. Those remain explicit operator gates in
 ## T01 — Publish and register `rapp-core-hub`
 
 ```task
-id: RPF-WP-0021-T01
+id: RPF-WP-0030-T01
 status: done
 priority: high
-state_hub_task_id: "a7cd3fc0-4469-55a6-aed0-a8cacb34c033"
+state_hub_task_id: "b561e71e-213e-506f-8eaf-578eef54977f"
 ```
 
 Under an attended `net-kingdom-admins` OIDC login to
@@ -109,10 +109,10 @@ State Hub; workplan UUID assignment remains with the production registrar.
 ## T02 — Accept the Core Hub PostgreSQL consumer
 
 ```task
-id: RPF-WP-0021-T02
+id: RPF-WP-0030-T02
 status: done
 priority: high
-state_hub_task_id: "7cac453b-2e85-56d9-abae-d983e382246b"
+state_hub_task_id: "5ed30960-336c-5650-96c6-9395ea7f2584"
 ```
 
 Review `/home/worsch/rapp-core-hub/handoffs/postgres-consumer.yaml` in
@@ -156,10 +156,10 @@ deletion, and names `core_hub_owner` as owner.
 ## T03 — Correct the runtime credential delivery contract
 
 ```task
-id: RPF-WP-0021-T03
+id: RPF-WP-0030-T03
 status: done
 priority: high
-state_hub_task_id: "223d5a77-b7c3-5d1a-a93c-4cb9628b457a"
+state_hub_task_id: "ad022406-0ae5-58db-9b9d-2e958ab73237"
 ```
 
 Separate the two credential sources before shadow deployment:
@@ -200,10 +200,10 @@ refresh interval restored.
 ## T04 — Declare and apply the OpenBao/ESO lanes
 
 ```task
-id: RPF-WP-0021-T04
+id: RPF-WP-0030-T04
 status: done
 priority: high
-state_hub_task_id: "50713b54-38a8-543d-8c74-0e3fa186fbb8"
+state_hub_task_id: "d4c2d69d-186a-5d0d-9ab7-5a4a48cb1e8d"
 ```
 
 After T03 fixes the consuming contract:
@@ -258,10 +258,10 @@ all passed. `CCR-2026-0013` is verified.
 ## T05 — Support the private shadow restore and verification
 
 ```task
-id: RPF-WP-0021-T05
+id: RPF-WP-0030-T05
 status: done
 priority: high
-state_hub_task_id: "ba4984f9-c6c5-5eb2-b4c4-83cbec59298c"
+state_hub_task_id: "1b608d2e-d660-50dd-8765-c429afbcb14c"
 ```
 
 After T01-T04, support `CORE-WP-0011-T03`: label the namespace for

workplans/RPF-WP-0031-workplan-identity-collision.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Separate duplicated apps-pg and Core Hub workplan identities"
 domain: financials
 repo: railiance-platform
-status: blocked
+status: active
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-05"
@@ -37,7 +37,7 @@ updates. Existing source UUIDs have not been changed.
 
 ```task
 id: RPF-WP-0031-T02
-status: wait
+status: progress
 priority: high
 state_hub_task_id: "2990a940-634c-5d76-b74c-740de8c36b16"
 ```
@@ -49,3 +49,8 @@ After approval, apply the exact proposal, preserve the archived identity and
 all completion evidence, check uniqueness across root and archived workplans,
 commit/push, and run `rmgr sync`. Inspect any retirement refusal before proceeding;
 never blanket-acknowledge unrelated retirements.
+
+
+User approved the exact exception on 2026-09-05. Applied the six proposed UUIDs
+and four evidence-reference updates; the archived file is byte-for-byte unchanged.
+Source uniqueness and authoritative reconciliation are being verified.