coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Requalify tasks after founder decisions D1/D2/D3 (2026-10-11)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1370019@bnt-lap001
Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
This commit is contained in:
codex 2026-10-11 20:32:42 +02:00
parent cda974e817
commit bf4c52a901
5 changed files with 34 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

12
workplans/RPF-WP-0035-credential-lane-implementation.md
View file

@ -356,13 +356,15 @@ Rotation is a distinct, version-guarded operation.
```task
id: RPF-WP-0035-T07
status: wait
needs_human: true
decision_id: 1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa
blocking_reason: "Founder HOLD (2026-09-21) on the legacy whynot-design npm pointer; custody disposition is an attended decision."
blocking_reason: "Hold kept by D3 until SECRETS-WP-0006-T06 moves publishing off the legacy whynot-design npm path; then rotate and prove a fresh publish."
priority: high
depends_on: [SECRETS-WP-0006-T06]
state_hub_task_id: "0dd7c9a5-65a0-53fc-b6c3-5ad96ee56f7b"
```
2026-10-11: requalified after founder decision D3 (trust root, build-mode default) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
Found by the attended session on 2026-09-10 while settling the npm field
question. `secret/coulomb/whynot-design/npm/publish` exists at version 1,
created 2026-07-03T15:00:44Z and never updated — five days after the governed
@ -406,15 +408,15 @@ never record the value, fingerprint, length or shape.
```task
id: RPF-WP-0035-T06
status: wait
needs_human: true
status: done
decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
blocking_reason: "INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays non-resolvable."
priority: high
intervention_note: ""
state_hub_task_id: "68bff751-e48b-548b-8fb4-dfb3b16210c2"
```
2026-10-11: requalified after founder decision D1 (attended window standing rule) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
**Current return, 2026-09-10:** CCR-2026-0020 is cancelled on the requesting
Approval Engine owner's explicit withdrawal, source
`849c75bb094613ff6ac1a1d4cda56a745520c5a1:docs/keycape-service-registrations.md`.

6
workplans/RPF-WP-0036-platform-service-assurance.md
View file

@ -62,15 +62,15 @@ and package dependency rather than a blanket new-cluster project here.
```task
id: RPF-WP-0036-T03
status: wait
needs_human: true
status: todo
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
depends_on: [ACTIVITY-WP-0042]
blocking_reason: "activity-core replied (not accepted yet): role acceptance is the founder decision ACTIVITY-WP-0042-T01 (D2); then ACTIVITY-WP-0042 bounded operation, S3 OpenBao credential route, repaired openbao-activity-core store and per-run approval-engine approval."
priority: high
state_hub_task_id: "d64446fb-870b-5ae9-9628-f1fb9d06c5a4"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
Inventory authoritative CNPG backup/PITR, OpenBao snapshot/isolated restore,
encrypted off-host copy and custody-recovery receipts. Reuse existing validators
and package status commands. Define cadence/expiry from T02; return distinct

5
workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md
View file

@ -172,14 +172,15 @@ render lacks but that carries the tracking label, or a digest mismatch.
```task
id: RPF-WP-0043-T04
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
depends_on: [RPF-WP-0043-T03, RPF-WP-0044-T07]
blocking_reason: "Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07."
blocking_reason: "Merge approved by D2; runs once T03 diff and root automation (RPF-WP-0044-T07) are proven."
priority: high
state_hub_task_id: "8638fa73-439d-5dcd-85c7-81aa125170e1"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
**Waits on the founder's go-ahead.** This is a `CONSTRUCT @ railiance-platform`
change with `activation=APPROVED`. The merge is the gate, and it is a live
production change. Do not take it on the basis of this plan alone.

34
workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md
View file

@ -185,14 +185,14 @@ Rollback:
```task
id: RPF-WP-0044-T03
status: wait
needs_human: true
status: todo
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Adopted 2026-09-21; the follow-on step (issue-core adoption, then automation) waits on the founder's go-ahead."
priority: high
state_hub_task_id: "6d5fc801-e361-579b-bcd8-6fe719a82e94"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
**Adopted 2026-09-21** (founder go-ahead; custodian session): diff at `d2dbc19` rc=0; child merged in `182e788`; root synced at `182e788`; child manual sync (apply strategy, prune off) Succeeded at `d2dbc19`, Synced/Healthy, automated off. `ClusterSecretStore/openbao` Valid with tracking annotation; `issue-core-runtime` SecretSynced. Status `progress` = in the 24h proving period; `selfHeal` needs a second go-ahead. Evidence: `docs/evidence/2026-09-21-openbao-secretstore-argocd-adoption.json`.
One object,
@ -237,15 +237,14 @@ Rollback (R1): `git revert` the merge commit and push, then
```task
id: RPF-WP-0044-T04
status: wait
needs_human: true
status: todo
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocked_on: message-from:rapp-issue-core
blocking_reason: "Founder go-ahead plus rapp-issue-core's agreement (hub message) that ArgoCD owns production and make deploy stops being a production path."
priority: high
state_hub_task_id: "0e619658-0453-51ed-b9a0-bed28b5544fd"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
**Waits on the founder's go-ahead**, and on two preconditions:
- `rapp-issue-core` agrees (hub message) that ArgoCD owns production and its
@ -267,14 +266,14 @@ whitelist. Live check: `rapp-issue-core make verify-live`. Workload restore:
```task
id: RPF-WP-0044-T05
status: wait
needs_human: true
status: todo
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Adopted 2026-09-21; remaining preconditions and the next step wait on the founder's go-ahead."
priority: medium
state_hub_task_id: "d418068a-6fb0-5416-aac5-d23c93924d9c"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
**Adopted 2026-09-21** (founder go-ahead; custodian session). The *server-side* diff at `f1109d5` conflicted on `resources.limits.cpu` (live `1` owned by `kubectl-client-side-apply` vs declared `1000m`: the same quantity); the *client-side* diff, which is what the apply strategy uses, was rc=0 for all five non-hook objects. Child merged in `6eeb826`; manual sync with the `apply` strategy, prune off: Succeeded, Synced/Healthy, **0 Jobs created**, same pod (36d, no restart), CNPG healthy 1/1, ExternalSecret SecretSynced, `https://revenue.coulomb.social/healthz` 200 (the live check path is `/healthz`, not `/health`). Status `progress` = proving period. Automated sync still needs target-revenue's confirmation on the two hook Jobs (asked 2026-09-21). Evidence: `docs/evidence/2026-09-21-target-revenue-argocd-adoption.json`.
Original preconditions: T01 item 2 (CNPG
@ -295,14 +294,14 @@ target-revenue commit.
```task
id: RPF-WP-0044-T06
status: wait
needs_human: true
status: todo
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Founder go-ahead for the ESO adoption after adding CRD Prune=false,Delete=false and re-running the diff."
priority: medium
state_hub_task_id: "4ca54868-c31f-5e3d-b7d3-a15b84c15f80"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
**Waits on the founder's go-ahead.** Zero diff, but ESO serves every
`ExternalSecret` on the cluster (25 ClusterSecretStores). Before the merge,
add `crds.annotations: {argocd.argoproj.io/sync-options: "Prune=false,Delete=false"}`
@ -324,14 +323,15 @@ current `Valid` state (two, `openbao-activity-core` and
```task
id: RPF-WP-0044-T07
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
depends_on: [RPF-WP-0044-T03, RPF-WP-0044-T04, RPF-WP-0044-T05, RPF-WP-0044-T06]
blocking_reason: "Founder go-ahead to restore automated prune/selfHeal on railiance-apps-root once T03-T06 are proven."
blocking_reason: "Restore prune/selfHeal once T03-T06 have automated proof; no further founder go-ahead (D2)."
priority: medium
state_hub_task_id: "844ff115-def2-55ca-ab01-413ba7e6857d"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
**Waits on the founder's go-ahead.** After T03–T06 are proven, restore
`automated: {prune: true, selfHeal: true}` on `railiance-apps-root`, as the
change-gate decision's production row expects. From then on a merge to the
@ -347,11 +347,13 @@ id: RPF-WP-0044-T08
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Planning only; needs an operator read-only check of coulombcore's ArgoCD, outside agent session scope."
blocking_reason: "Operator read-only check of coulombcore ArgoCD; item on the attended-window checklist (D1 standing rule), not a decision."
priority: low
state_hub_task_id: "55d1382f-5862-5321-a1c9-96767764ba43"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
Planning only. Needs a read-only check of coulombcore's ArgoCD, outside this
session's scope. Under Option A, retiring it also removes `argocd/applications/`.
Also hand back to the cluster layer: the phase A install is not declared in

6
workplans/RPF-WP-0048-activity-core-gitops-adoption.md
View file

@ -40,15 +40,15 @@ health, resource inventory, schedules and original deployment generations.
```task
id: RPF-WP-0048-T02
status: wait
needs_human: true
status: todo
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
depends_on: [ACTIVITY-WP-0041]
blocking_reason: "24h soak after adoption, then founder confirmation of the scoped identity and checks before automated sync; ACTIVITY-WP-0041 owns publication and the promotion guard."
priority: high
state_hub_task_id: "63b44949-39f8-52fd-ab63-e618b67ef992"
```
2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
Keep automated sync off for at least 24 hours after successful adoption. Record
start and earliest eligibility in evidence. ACTIVITY-WP-0041 owns image publication,
source validation and the promotion/rollback guard. Root-wide automation is outside