Accept the email-connect ledger archive path.
The live backup is fresh, the installed tools match the accepted hashes, and the credential file was not opened. RPF-WP-0053-T05 is done. RPF-WP-0070 is ready and has not started. Assistant: grok Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd
This commit is contained in:
codex
parent
30e8b5f321
commit
96d97d8fa0
3 changed files with 36 additions and 23 deletions
|
|
@ -49,7 +49,7 @@
|
|||
| workplan | RPF-WP-0067 | active | — | workplans/RPF-WP-0067-netkingdom-identity-receipt-and-metadata-answers.md |
|
||||
| workplan | RPF-WP-0068 | finished | — | workplans/RPF-WP-0068-email-connect-platform-smtp.md |
|
||||
| workplan | RPF-WP-0069 | active | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
|
||||
| workplan | RPF-WP-0070 | blocked | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
|
||||
| workplan | RPF-WP-0070 | ready | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
|
||||
| task | RPF-WP-ADHOC-2026-10-10-T01 | done | — | workplans/ADHOC-2026-10-10.md |
|
||||
| task | RPF-WP-ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md |
|
||||
| task | RPF-WP-ADHOC-2026-10-11-T02 | done | — | workplans/ADHOC-2026-10-11.md |
|
||||
|
|
@ -157,7 +157,7 @@
|
|||
| task | RPF-WP-0053-T02 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
|
||||
| task | RPF-WP-0053-T03 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
|
||||
| task | RPF-WP-0053-T04 | todo | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
|
||||
| task | RPF-WP-0053-T05 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
|
||||
| task | RPF-WP-0053-T05 | done | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
|
||||
| task | RPF-WP-0053-T06 | done | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
|
||||
| task | RPF-WP-0054-T01 | done | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
|
||||
| task | RPF-WP-0054-T02 | done | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
|
||||
|
|
@ -236,7 +236,7 @@
|
|||
| task | RPF-WP-0069-T07 | todo | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
|
||||
| task | RPF-WP-0069-T08 | done | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
|
||||
| task | RPF-WP-0069-T09 | wait | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
|
||||
| task | RPF-WP-0070-T01 | wait | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
|
||||
| task | RPF-WP-0070-T01 | todo | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
|
||||
| intake | RPF-IN-0001 | closed | — | intakes/intakes.md |
|
||||
| intake | RPF-IN-0002 | open | — | intakes/intakes.md |
|
||||
| intake | RPF-IN-0003 | open | — | intakes/intakes.md |
|
||||
|
|
|
|||
|
|
@ -8,7 +8,7 @@ status: active
|
|||
owner: codex
|
||||
topic_slug: coulomb-social
|
||||
created: "2026-10-07"
|
||||
updated: "2026-10-31"
|
||||
updated: "2026-11-02"
|
||||
state_hub_workstream_id: "cb55e474-c7a5-5c6f-bd72-ce65f853e3e3"
|
||||
---
|
||||
|
||||
|
|
@ -142,13 +142,28 @@ is not ledger capture/recovery coverage; CSOC-WP-0010-T04/T05 own that residual.
|
|||
|
||||
```task
|
||||
id: RPF-WP-0053-T05
|
||||
status: progress
|
||||
status: done
|
||||
priority: high
|
||||
needs_human: true
|
||||
intervention_note: "email-connect primary.env is delivered from the accepted reader. Retention, capacity, independent receipts, escrow and the first capture remain open. Coulomb node delivery was not requested."
|
||||
state_hub_task_id: "3f744ce6-28e4-5496-8d21-7231271a7bc8"
|
||||
```
|
||||
|
||||
2026-11-02 close: the email-connect ledger archive is the accepted platform path.
|
||||
No credential was read, no receiver was paused, and no new capture was started.
|
||||
`/etc/email-connect-backup` is root mode 0700 and `primary.env` is root mode
|
||||
0600. Both timers are enabled and active: backup next elapses 2026-11-02
|
||||
04:16:09 UTC, freshness next elapses 2026-11-02 02:00:00 UTC. Freshness returned
|
||||
`fresh` at age 20.83 hours. The latest verified capture is 2026-11-01T04:17:28Z,
|
||||
mirror bucket `railiance-email-connect-archives`, project
|
||||
`1d37ea63-8c8f-44e1-80e1-2de862579ba7`, hash readback true. Local state is
|
||||
2,576,544 bytes across 27 generations from 2026-10-09T09:21:20Z through that
|
||||
capture. Free space is above the 8 GiB floor and the local total is inside the
|
||||
8 GiB budget. Installed `backup-ledger.py`, `mirror-ledger.py`, and both unit
|
||||
files match the 2026-10-10 accepted hashes. Age escrow and the retained kit
|
||||
remain the 2026-10-10 custody acceptance; they were not opened again. Weekly
|
||||
14-daily/4-weekly selection stays a platform-root operating review. The worker
|
||||
still does not delete retained objects. Coulomb node delivery was not requested.
|
||||
RPF-WP-0070 may now copy this shape. It was not started.
|
||||
|
||||
Consumer EMAIL-WP-0007 implements default-preview quiesced SQLite backup, stable
|
||||
age sealing, verified primary publication and attended isolated recovery. Its
|
||||
email-connect profile is separate from Coulomb/Barman:
|
||||
|
|
@ -156,7 +171,7 @@ platform-pg/application-archives/email-connect/. Review packet:
|
|||
email-connect/docs/ledger-backup-review-2026-10-08.md. No SMTP or ingest credential
|
||||
belongs to the backup worker. Candidate delivery: root-owned mode 0600
|
||||
/etc/email-connect-backup/primary.env (parent mode 0700), only owner-delivered
|
||||
AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY. Metadata-only node check: file absent.
|
||||
AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY. Metadata-only node check on 2026-10-08 found the file absent. That statement is historical; the 2026-11-02 close above records the delivered file.
|
||||
Do not copy the databases backup Secret or Coulomb caller, widen ESO admission,
|
||||
or give publisher retained-object/version-delete or age escrow authority.
|
||||
|
||||
|
|
@ -167,9 +182,9 @@ recovery and ledger growth/headroom, local/provider generation retention and
|
|||
compatibility with existing 30-day lifecycle. Provisional daily 04:15 UTC, RPO 24h,
|
||||
stale 26h, RTO 60min need owner acceptance; they are not measured promises.
|
||||
|
||||
The MAS evidence volume waits on this task. RPF-WP-0070 copies the accepted
|
||||
ledger shape onto namespace `mas` once retention, capacity, receipts, escrow,
|
||||
and the first capture are done. It does not start before that.
|
||||
The paragraphs below are the original admission requirement. The 2026-11-02
|
||||
close above is the current result. RPF-WP-0070 is now ready to copy this
|
||||
shape onto namespace `mas`. That copy has not started.
|
||||
|
||||
The SQLite snapshot preserves state only at capture. A later provider submission
|
||||
or challenge consume/cancel can be lost by restoring an older point. Production
|
||||
|
|
|
|||
|
|
@ -4,17 +4,16 @@ type: workplan
|
|||
title: "Recover the MAS evidence volume the way the email-connect ledger is recovered"
|
||||
domain: financials
|
||||
repo: railiance-platform
|
||||
status: blocked
|
||||
status: ready
|
||||
owner: codex
|
||||
topic_slug: coulomb-social
|
||||
created: "2026-11-01"
|
||||
updated: "2026-11-01"
|
||||
updated: "2026-11-02"
|
||||
origin: residual
|
||||
origin_ref: MAS-WP-0007
|
||||
related:
|
||||
- RPF-WP-0053
|
||||
- MAS-WP-0007
|
||||
blocking_reason: "RPF-WP-0053-T05 has not accepted the email-connect ledger path. Retention, capacity, independent receipts, escrow, and the first capture are still open."
|
||||
state_hub_workstream_id: "bec07dd4-d9ea-527c-96a7-30edfe5a43ea"
|
||||
---
|
||||
|
||||
|
|
@ -25,26 +24,25 @@ separate archive profile, `platform-pg/application-archives/email-connect/`,
|
|||
owned by RPF-WP-0053-T05. The MAS evidence volume is still only the
|
||||
node-local PVC `mas-evidence` in namespace `mas`: `events.jsonl`,
|
||||
`tickets.sqlite3`, and the outbox database. Give that volume the same kind
|
||||
of recovery after the ledger path is accepted. Do not start it before then.
|
||||
of recovery. RPF-WP-0053-T05 accepted that path on 2026-11-02. This workplan
|
||||
is ready to copy the shape. The copy has not started.
|
||||
|
||||
The MAS facility can be powered off without touching platform mail. This
|
||||
backup must not scale it, roll its image, or delete the namespace. SMTP and
|
||||
TEM credentials stay out of the backup worker.
|
||||
|
||||
## Wait for the ledger path
|
||||
## Copy the accepted ledger shape onto the MAS evidence volume
|
||||
|
||||
```task
|
||||
id: RPF-WP-0070-T01
|
||||
status: wait
|
||||
status: todo
|
||||
priority: medium
|
||||
depends_on: [RPF-WP-0053-T05]
|
||||
blocking_reason: "The email-connect ledger archive is not an accepted platform path yet."
|
||||
state_hub_task_id: "4f6484fb-8303-5dd5-94cb-b2622e1322c8"
|
||||
```
|
||||
|
||||
RPF-WP-0053-T05 remains progress. Its intervention note says retention,
|
||||
capacity, independent receipts, escrow, and the first capture are open.
|
||||
When that task is done, copy its accepted shape for the MAS evidence
|
||||
RPF-WP-0053-T05 is done. Copy its accepted shape for the MAS evidence
|
||||
files: prefix-scoped custody, a quiesced capture, an independent receipt,
|
||||
and a restore rehearsal that does not resend mail. Until then this task
|
||||
stays wait.
|
||||
and a restore rehearsal that does not resend mail. Do not scale the MAS
|
||||
facility, roll its image, or delete the namespace. SMTP and TEM credentials
|
||||
stay out of the backup worker. The copy has not started.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue