Include platform owner in WP-0024 receipts
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
This commit is contained in:
parent
d8c0cd38a7
commit
abf8855ae1
4 changed files with 51 additions and 12 deletions
|
|
@ -12,13 +12,15 @@
|
|||
"task_owners": {
|
||||
"RAILIANCE-WP-0024-T02": [
|
||||
"audit-core",
|
||||
"rapp-postgres"
|
||||
"rapp-postgres",
|
||||
"railiance-platform"
|
||||
],
|
||||
"RAILIANCE-WP-0024-T03": [
|
||||
"audit-core",
|
||||
"rapp-postgres",
|
||||
"railiance-cluster",
|
||||
"railiance-infra"
|
||||
"railiance-infra",
|
||||
"railiance-platform"
|
||||
]
|
||||
},
|
||||
"owners": {
|
||||
|
|
@ -106,6 +108,31 @@
|
|||
"focused-unit-tests",
|
||||
"node-reboot-preflight"
|
||||
]
|
||||
},
|
||||
"railiance-platform": {
|
||||
"tasks": [
|
||||
"RAILIANCE-WP-0024-T02",
|
||||
"RAILIANCE-WP-0024-T03"
|
||||
],
|
||||
"artifacts": [
|
||||
"docs/audit-core-database-lease-recovery.md",
|
||||
"docs/railiance01-coordinated-reboot.md",
|
||||
"scripts/audit-core-recovery-preflight.py",
|
||||
"scripts/audit-core-database-lease-recovery.py",
|
||||
"docs/audit-core-database-lease-approval.example.json",
|
||||
"docs/openbao-reboot-snapshot-receipt.example.json"
|
||||
],
|
||||
"assertions": [
|
||||
"T02 remains gated on a named window, abort operator, exact owner receipts and a revision-pinned synthetic-load driver; repository access alone cannot revoke a lease.",
|
||||
"T02 revokes only the selected runtime handle, forces only the database ExternalSecret and records no credential values or OpenBao response bodies.",
|
||||
"T03 remains gated on a verified encrypted off-host OpenBao snapshot receipt, 2-of-3 Shamir quorum, provider-console access, all owner receipts and a final attended go/no-go.",
|
||||
"The platform owner preserves the mutation freeze and ordered OpenBao/ESO recovery boundary and does not initialize OpenBao, restore in place or restart audit-core as a shortcut."
|
||||
],
|
||||
"checks": [
|
||||
"focused-unit-tests",
|
||||
"database-lease-preflight",
|
||||
"node-reboot-preflight"
|
||||
]
|
||||
}
|
||||
},
|
||||
"artifact_sha256": {
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue