From 8cfbf6410def0e8d5c78f8c5126e8d64e88879c8 Mon Sep 17 00:00:00 2001 From: codex Date: Wed, 14 Oct 2026 12:54:03 +0200 Subject: [PATCH] RPF-WP-0015-T02: document driver reachability and restart gaps Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883 --- docs/audit-core-database-lease-recovery.md | 8 ++++++++ interfaces/RAILIANCE-WP-0024-owner-reviews.json | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/docs/audit-core-database-lease-recovery.md b/docs/audit-core-database-lease-recovery.md index 661335a..251cee6 100644 --- a/docs/audit-core-database-lease-recovery.md +++ b/docs/audit-core-database-lease-recovery.md @@ -111,6 +111,14 @@ driver as `AUDIT_T02_SOURCE`/`AUDIT_T02_TENANT`; the confirm string is If cleanup is missed, audit-core's `expires_at` enforcement makes the identity inert at window end; the attended cleanup is still required to remove it. +The driver runs operator-side. audit-core's NetworkPolicies admit only named +namespaces, so reach the pod with `kubectl -n audit-core port-forward +deploy/audit-core :8080` and set `AUDIT_T02_BASE_URL` to that local +URL; record the base URL and the driver's source/tenant (which must equal the +receipt's `synthetic_sender` block) in the window notes. Projection and cleanup +each restart audit-core once (Recreate, no surge), so production senders see two +short retryable gaps per window; announce them with the window. + If `project` fails after the registry write may already have reached OpenBao (for example a transport error on the write itself), treat the identity as possibly present: run `cleanup --abort-reason ""` before leaving the window. diff --git a/interfaces/RAILIANCE-WP-0024-owner-reviews.json b/interfaces/RAILIANCE-WP-0024-owner-reviews.json index 2cdb404..00442ad 100644 --- a/interfaces/RAILIANCE-WP-0024-owner-reviews.json +++ b/interfaces/RAILIANCE-WP-0024-owner-reviews.json @@ -139,7 +139,7 @@ }, "artifact_sha256": { "docs/audit-core-database-lease-approval.example.json": "87e57e3290074508c6517938acf8c7fc1a75d977b8ff630f247a4ff5d2ee45c6", - "docs/audit-core-database-lease-recovery.md": "1c7643be1b97b56f5b5efb2c21803fbb0a8d3863953b61ebbfb85792932f7a4a", + "docs/audit-core-database-lease-recovery.md": "3544abde993505c1d84a5cfc882ce1619ca2e115b1cb74fdb1262a42984ee0be", "docs/openbao-reboot-snapshot-receipt.example.json": "b95903a3e1aacb607eecc3f0440f08e62480d09da47bd7ab96c3eb8814f2eaee", "docs/railiance01-coordinated-reboot.md": "6fd6301f808449ad6519764d994b05aee41a96be879b917ee1d18d8a65d5f6fd", "scripts/audit-core-database-lease-recovery.py": "1de02f13dcd4e87e65de1c97ae14567f2b8e4a51aa0423e3fca78a224cf374b3",