Include platform owner in WP-0024 receipts
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
This commit is contained in:
codex 2026-08-22 14:59:59 +02:00
parent d8c0cd38a7
commit abf8855ae1
4 changed files with 51 additions and 12 deletions

View file

@ -12,13 +12,15 @@
"task_owners": {
"RAILIANCE-WP-0024-T02": [
"audit-core",
"rapp-postgres"
"rapp-postgres",
"railiance-platform"
],
"RAILIANCE-WP-0024-T03": [
"audit-core",
"rapp-postgres",
"railiance-cluster",
"railiance-infra"
"railiance-infra",
"railiance-platform"
]
},
"owners": {
@ -106,6 +108,31 @@
"focused-unit-tests",
"node-reboot-preflight"
]
},
"railiance-platform": {
"tasks": [
"RAILIANCE-WP-0024-T02",
"RAILIANCE-WP-0024-T03"
],
"artifacts": [
"docs/audit-core-database-lease-recovery.md",
"docs/railiance01-coordinated-reboot.md",
"scripts/audit-core-recovery-preflight.py",
"scripts/audit-core-database-lease-recovery.py",
"docs/audit-core-database-lease-approval.example.json",
"docs/openbao-reboot-snapshot-receipt.example.json"
],
"assertions": [
"T02 remains gated on a named window, abort operator, exact owner receipts and a revision-pinned synthetic-load driver; repository access alone cannot revoke a lease.",
"T02 revokes only the selected runtime handle, forces only the database ExternalSecret and records no credential values or OpenBao response bodies.",
"T03 remains gated on a verified encrypted off-host OpenBao snapshot receipt, 2-of-3 Shamir quorum, provider-console access, all owner receipts and a final attended go/no-go.",
"The platform owner preserves the mutation freeze and ordered OpenBao/ESO recovery boundary and does not initialize OpenBao, restore in place or restart audit-core as a shortcut."
],
"checks": [
"focused-unit-tests",
"database-lease-preflight",
"node-reboot-preflight"
]
}
},
"artifact_sha256": {