RPF-WP-0044-T04: attended executor done (delivered_not_adopted), retain journal
All checks were successful
CCR intake gate / gate (push) Successful in 1m18s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 527080@bnt-lap001
Assistant-Session: 5a0e864a-67be-4605-a77a-16635f7dd292
This commit is contained in:
codex 2026-10-20 12:39:22 +02:00
parent 918656f9f4
commit 72bba8e6b4
2 changed files with 3 additions and 0 deletions

View file

@ -0,0 +1 @@
{"approval_ref": "89f1058f-33bc-47a8-8a49-0b44d426c67e", "audit_device_count": 1, "audit_enabled_metadata": true, "consumed_wrap_replay_denied_400": true, "contract_sha256": "0fd6d6fa0aeeffbdbfb7216b05be2c1aeae8719c606c18c70bc8d17a552b0970", "custody_version": 1, "custody_write_request_id": "8143b728-e58f-6a3f-5641-676b0215cf90", "destination": "argocd/rapp-issue-core-repository", "execution_mode": "attended-founder-bounded", "operatorpath_capability_mode": "scoped", "private_key_rotation_max_days": 180, "provider_key_id": 3, "public_key_sha256": "b3a1d8a1e476b98b9a5ce9b0664c669d7e2d493636695a979fff252456873003", "schema": "argocd-issue-core-credential/v1", "secret_values_observed_by_agent": false, "state": "delivered_not_adopted", "task": "RPF-WP-0044-T04", "unwrap_request_id": "94feaf03-8299-21c9-85ea-571ac90f5af3", "updated_at": "2026-10-20T10:37:03.699952+00:00", "wrap_accessor": "ATJnD2dxd9QI5BNCbzt2pxLV", "wrap_creation_path": "platform/data/operators/argocd/repositories/rapp-issue-core", "wrap_ttl_seconds": 60}

View file

@ -285,6 +285,8 @@ Public host trust and exact project admission are prepared in owner source and t
2026-10-20 (CUST-WP-0079-T06 attended-window prep, agent): prerequisites done. Host trust and exact project admission were executed 2026-10-11 (the-custodian `docs/evidence/2026-10-11-issue-core-public-transport/execution.json`); a fresh dry-run refused with `target_preimage_changed` (already applied, kept as `docs/evidence/2026-10-11-issue-core-transport/2026-10-20-dry-run-r1.json`) and `--action verify` passed (`2026-10-20-verify-r1.json`). ssh-keyscan from railiance01 matches the pinned provider key. Sealed contract `docs/evidence/2026-10-11-issue-core-credential/contract-sealed-2026-10-20.json` (sha256 `1ce9d2fdc39395407a01e358bfd0179f83f35c0a448e6658eb8f5aab351d3d3a`, expires 2026-10-27) passes the executor's `validate_contract`; 17 executor/transport tests pass. Wrapper pin target is rapp-issue-core `186c817b67d3919a64acdddbd3889e539841f946`. The only remaining step is the founder's attended login running the executor; exact commands and the agent follow-on (pin, diff, manual sync, verifier) are in `docs/runbooks/rpf-wp-0044-t04-attended.md`. No secret, credential or OpenBao call was made.
2026-10-20 (attended window, CUST-WP-0079-T06): founder completed the Platform OpenBao OIDC/MFA login and the fixed executor at 10:37Z. Journal `docs/evidence/2026-10-11-issue-core-credential/execution-journal-r1.json`: state `delivered_not_adopted`, consumed-wrap replay denied (400), no secret values observed by the agent, custody version 1, destination `argocd/rapp-issue-core-repository`. The human gate is cleared. Remaining agent steps per `docs/runbooks/rpf-wp-0044-t04-attended.md`: pin the Application, client-side diff, manual sync (prune/force off), bounded verifier. The journal's `contract_sha256` (`0fd6d6fa…`) differs from the sealed file's sha256 (`1ce9d2fd…`). Reconcile this before the adoption sync.
## Adopt target-revenue
```task