From 96d97d8fa09f2a6b9e9cad444dcb4ee070f27fc0 Mon Sep 17 00:00:00 2001 From: codex Date: Mon, 2 Nov 2026 02:08:34 +0100 Subject: [PATCH] Accept the email-connect ledger archive path. The live backup is fresh, the installed tools match the accepted hashes, and the credential file was not opened. RPF-WP-0053-T05 is done. RPF-WP-0070 is ready and has not started. Assistant: grok Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd --- WORK-RECORDS.md | 6 ++-- ...WP-0053-coulomb-paired-backup-admission.md | 31 ++++++++++++++----- .../RPF-WP-0070-mas-evidence-recovery.md | 22 ++++++------- 3 files changed, 36 insertions(+), 23 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index d25ec53..c6e3903 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -49,7 +49,7 @@ | workplan | RPF-WP-0067 | active | — | workplans/RPF-WP-0067-netkingdom-identity-receipt-and-metadata-answers.md | | workplan | RPF-WP-0068 | finished | — | workplans/RPF-WP-0068-email-connect-platform-smtp.md | | workplan | RPF-WP-0069 | active | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | -| workplan | RPF-WP-0070 | blocked | — | workplans/RPF-WP-0070-mas-evidence-recovery.md | +| workplan | RPF-WP-0070 | ready | — | workplans/RPF-WP-0070-mas-evidence-recovery.md | | task | RPF-WP-ADHOC-2026-10-10-T01 | done | — | workplans/ADHOC-2026-10-10.md | | task | RPF-WP-ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md | | task | RPF-WP-ADHOC-2026-10-11-T02 | done | — | workplans/ADHOC-2026-10-11.md | @@ -157,7 +157,7 @@ | task | RPF-WP-0053-T02 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md | | task | RPF-WP-0053-T03 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md | | task | RPF-WP-0053-T04 | todo | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md | -| task | RPF-WP-0053-T05 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md | +| task | RPF-WP-0053-T05 | done | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md | | task | RPF-WP-0053-T06 | done | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md | | task | RPF-WP-0054-T01 | done | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md | | task | RPF-WP-0054-T02 | done | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md | @@ -236,7 +236,7 @@ | task | RPF-WP-0069-T07 | todo | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | | task | RPF-WP-0069-T08 | done | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | | task | RPF-WP-0069-T09 | wait | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | -| task | RPF-WP-0070-T01 | wait | — | workplans/RPF-WP-0070-mas-evidence-recovery.md | +| task | RPF-WP-0070-T01 | todo | — | workplans/RPF-WP-0070-mas-evidence-recovery.md | | intake | RPF-IN-0001 | closed | — | intakes/intakes.md | | intake | RPF-IN-0002 | open | — | intakes/intakes.md | | intake | RPF-IN-0003 | open | — | intakes/intakes.md | diff --git a/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md b/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md index ff1fa35..9092e51 100644 --- a/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md +++ b/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md @@ -8,7 +8,7 @@ status: active owner: codex topic_slug: coulomb-social created: "2026-10-07" -updated: "2026-10-31" +updated: "2026-11-02" state_hub_workstream_id: "cb55e474-c7a5-5c6f-bd72-ce65f853e3e3" --- @@ -142,13 +142,28 @@ is not ledger capture/recovery coverage; CSOC-WP-0010-T04/T05 own that residual. ```task id: RPF-WP-0053-T05 -status: progress +status: done priority: high -needs_human: true -intervention_note: "email-connect primary.env is delivered from the accepted reader. Retention, capacity, independent receipts, escrow and the first capture remain open. Coulomb node delivery was not requested." state_hub_task_id: "3f744ce6-28e4-5496-8d21-7231271a7bc8" ``` +2026-11-02 close: the email-connect ledger archive is the accepted platform path. +No credential was read, no receiver was paused, and no new capture was started. +`/etc/email-connect-backup` is root mode 0700 and `primary.env` is root mode +0600. Both timers are enabled and active: backup next elapses 2026-11-02 +04:16:09 UTC, freshness next elapses 2026-11-02 02:00:00 UTC. Freshness returned +`fresh` at age 20.83 hours. The latest verified capture is 2026-11-01T04:17:28Z, +mirror bucket `railiance-email-connect-archives`, project +`1d37ea63-8c8f-44e1-80e1-2de862579ba7`, hash readback true. Local state is +2,576,544 bytes across 27 generations from 2026-10-09T09:21:20Z through that +capture. Free space is above the 8 GiB floor and the local total is inside the +8 GiB budget. Installed `backup-ledger.py`, `mirror-ledger.py`, and both unit +files match the 2026-10-10 accepted hashes. Age escrow and the retained kit +remain the 2026-10-10 custody acceptance; they were not opened again. Weekly +14-daily/4-weekly selection stays a platform-root operating review. The worker +still does not delete retained objects. Coulomb node delivery was not requested. +RPF-WP-0070 may now copy this shape. It was not started. + Consumer EMAIL-WP-0007 implements default-preview quiesced SQLite backup, stable age sealing, verified primary publication and attended isolated recovery. Its email-connect profile is separate from Coulomb/Barman: @@ -156,7 +171,7 @@ platform-pg/application-archives/email-connect/. Review packet: email-connect/docs/ledger-backup-review-2026-10-08.md. No SMTP or ingest credential belongs to the backup worker. Candidate delivery: root-owned mode 0600 /etc/email-connect-backup/primary.env (parent mode 0700), only owner-delivered -AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY. Metadata-only node check: file absent. +AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY. Metadata-only node check on 2026-10-08 found the file absent. That statement is historical; the 2026-11-02 close above records the delivered file. Do not copy the databases backup Secret or Coulomb caller, widen ESO admission, or give publisher retained-object/version-delete or age escrow authority. @@ -167,9 +182,9 @@ recovery and ledger growth/headroom, local/provider generation retention and compatibility with existing 30-day lifecycle. Provisional daily 04:15 UTC, RPO 24h, stale 26h, RTO 60min need owner acceptance; they are not measured promises. -The MAS evidence volume waits on this task. RPF-WP-0070 copies the accepted -ledger shape onto namespace `mas` once retention, capacity, receipts, escrow, -and the first capture are done. It does not start before that. +The paragraphs below are the original admission requirement. The 2026-11-02 +close above is the current result. RPF-WP-0070 is now ready to copy this +shape onto namespace `mas`. That copy has not started. The SQLite snapshot preserves state only at capture. A later provider submission or challenge consume/cancel can be lost by restoring an older point. Production diff --git a/workplans/RPF-WP-0070-mas-evidence-recovery.md b/workplans/RPF-WP-0070-mas-evidence-recovery.md index 4425cc5..d0759a2 100644 --- a/workplans/RPF-WP-0070-mas-evidence-recovery.md +++ b/workplans/RPF-WP-0070-mas-evidence-recovery.md @@ -4,17 +4,16 @@ type: workplan title: "Recover the MAS evidence volume the way the email-connect ledger is recovered" domain: financials repo: railiance-platform -status: blocked +status: ready owner: codex topic_slug: coulomb-social created: "2026-11-01" -updated: "2026-11-01" +updated: "2026-11-02" origin: residual origin_ref: MAS-WP-0007 related: - RPF-WP-0053 - MAS-WP-0007 -blocking_reason: "RPF-WP-0053-T05 has not accepted the email-connect ledger path. Retention, capacity, independent receipts, escrow, and the first capture are still open." state_hub_workstream_id: "bec07dd4-d9ea-527c-96a7-30edfe5a43ea" --- @@ -25,26 +24,25 @@ separate archive profile, `platform-pg/application-archives/email-connect/`, owned by RPF-WP-0053-T05. The MAS evidence volume is still only the node-local PVC `mas-evidence` in namespace `mas`: `events.jsonl`, `tickets.sqlite3`, and the outbox database. Give that volume the same kind -of recovery after the ledger path is accepted. Do not start it before then. +of recovery. RPF-WP-0053-T05 accepted that path on 2026-11-02. This workplan +is ready to copy the shape. The copy has not started. The MAS facility can be powered off without touching platform mail. This backup must not scale it, roll its image, or delete the namespace. SMTP and TEM credentials stay out of the backup worker. -## Wait for the ledger path +## Copy the accepted ledger shape onto the MAS evidence volume ```task id: RPF-WP-0070-T01 -status: wait +status: todo priority: medium depends_on: [RPF-WP-0053-T05] -blocking_reason: "The email-connect ledger archive is not an accepted platform path yet." state_hub_task_id: "4f6484fb-8303-5dd5-94cb-b2622e1322c8" ``` -RPF-WP-0053-T05 remains progress. Its intervention note says retention, -capacity, independent receipts, escrow, and the first capture are open. -When that task is done, copy its accepted shape for the MAS evidence +RPF-WP-0053-T05 is done. Copy its accepted shape for the MAS evidence files: prefix-scoped custody, a quiesced capture, an independent receipt, -and a restore rehearsal that does not resend mail. Until then this task -stays wait. +and a restore rehearsal that does not resend mail. Do not scale the MAS +facility, roll its image, or delete the namespace. SMTP and TEM credentials +stay out of the backup worker. The copy has not started.