Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults

- WP-0025-T03 done: public listener retracted 2026-09-15; bao.coulomb.social
  is retired, tunnel is the operator path; DNS withdrawal handed to S1.
- WP-0043-T01 done: ArgoCD Core reconciles railiance01 at main (evidence).
- WP-0043-T05 done: direct-apply gap inventory and founder proposal.
- WP-0045-T05 cancelled (no rollback needed); T06 preconditions recorded.
- Operator scripts default BAO_ADDR to the openbao-ui-railiance01 tunnel.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 150322@bnt-lap001
Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4

docs/evidence/2026-09-22-argocd-railiance01-status.json

@@ -0,0 +1,30 @@
+{
+  "schema": "railiance-platform.argocd-railiance01-status.v1",
+  "task": "RPF-WP-0043-T01",
+  "observed_at": "2026-09-22T20:40:00Z",
+  "method": "read-only `ssh railiance01 'kubectl get ...'`; nothing applied, patched or synced",
+  "node": {
+    "name": "239.62.205.92.host.secureserver.net",
+    "internal_ip": "92.205.62.239",
+    "roles": "control-plane,etcd",
+    "kubelet": "v1.35.1+k3s1",
+    "ready": true
+  },
+  "argocd_namespace_workloads": {
+    "deployment/argocd-applicationset-controller": "1/1",
+    "deployment/argocd-redis": "1/1",
+    "deployment/argocd-repo-server": "1/1",
+    "statefulset/argocd-application-controller": "1/1",
+    "age": "30h (Argo CD Core v3.5.3, phase A install 2026-09-21)"
+  },
+  "applications": {
+    "railiance-apps-root": {"sync": "Synced", "health": "Healthy", "revision": "8a7ebce5c600026cb9eb818e27538e5e8990faa8"},
+    "openbao-secretstore": {"sync": "Synced", "health": "Healthy", "revision": "d2dbc19c254247652c49fda8721c80d53bca206a"},
+    "target-revenue": {"sync": "Synced", "health": "Healthy", "revision": "f1109d54eeda9f187daa215cf1c7163610d35d0a"}
+  },
+  "forgejo_main_revision": "8a7ebce5c600026cb9eb818e27538e5e8990faa8",
+  "root_revision_matches_main": true,
+  "supersedes": "the-custodian message cc3acf71 (2026-09-21, 'ArgoCD is not on railiance01'): that check predates the phase A install and ran before the workstation kubeconfig fix recorded in the-custodian/docs/agent-environment-orientation.md section 1",
+  "conclusion": "ArgoCD is installed on railiance01 and reconciles the root application at Forgejo main. The production row of the change gate has a working path; RPF-WP-0043 continues.",
+  "credential_values_emitted": false
+}