diff --git a/workplans/RPF-WP-0035-credential-lane-implementation.md b/workplans/RPF-WP-0035-credential-lane-implementation.md index 55fe943..ca2ba1e 100644 --- a/workplans/RPF-WP-0035-credential-lane-implementation.md +++ b/workplans/RPF-WP-0035-credential-lane-implementation.md @@ -356,13 +356,15 @@ Rotation is a distinct, version-guarded operation. ```task id: RPF-WP-0035-T07 status: wait -needs_human: true decision_id: 1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa -blocking_reason: "Founder HOLD (2026-09-21) on the legacy whynot-design npm pointer; custody disposition is an attended decision." +blocking_reason: "Hold kept by D3 until SECRETS-WP-0006-T06 moves publishing off the legacy whynot-design npm path; then rotate and prove a fresh publish." priority: high +depends_on: [SECRETS-WP-0006-T06] state_hub_task_id: "0dd7c9a5-65a0-53fc-b6c3-5ad96ee56f7b" ``` +2026-10-11: requalified after founder decision D3 (trust root, build-mode default) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + Found by the attended session on 2026-09-10 while settling the npm field question. `secret/coulomb/whynot-design/npm/publish` exists at version 1, created 2026-07-03T15:00:44Z and never updated — five days after the governed @@ -406,15 +408,15 @@ never record the value, fingerprint, length or shape. ```task id: RPF-WP-0035-T06 -status: wait -needs_human: true +status: done decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483 -blocking_reason: "INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays non-resolvable." priority: high intervention_note: "" state_hub_task_id: "68bff751-e48b-548b-8fb4-dfb3b16210c2" ``` +2026-10-11: requalified after founder decision D1 (attended window standing rule) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + **Current return, 2026-09-10:** CCR-2026-0020 is cancelled on the requesting Approval Engine owner's explicit withdrawal, source `849c75bb094613ff6ac1a1d4cda56a745520c5a1:docs/keycape-service-registrations.md`. diff --git a/workplans/RPF-WP-0036-platform-service-assurance.md b/workplans/RPF-WP-0036-platform-service-assurance.md index da17dda..d5a4c57 100644 --- a/workplans/RPF-WP-0036-platform-service-assurance.md +++ b/workplans/RPF-WP-0036-platform-service-assurance.md @@ -62,15 +62,15 @@ and package dependency rather than a blanket new-cluster project here. ```task id: RPF-WP-0036-T03 -status: wait -needs_human: true +status: todo decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e depends_on: [ACTIVITY-WP-0042] -blocking_reason: "activity-core replied (not accepted yet): role acceptance is the founder decision ACTIVITY-WP-0042-T01 (D2); then ACTIVITY-WP-0042 bounded operation, S3 OpenBao credential route, repaired openbao-activity-core store and per-run approval-engine approval." priority: high state_hub_task_id: "d64446fb-870b-5ae9-9628-f1fb9d06c5a4" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + Inventory authoritative CNPG backup/PITR, OpenBao snapshot/isolated restore, encrypted off-host copy and custody-recovery receipts. Reuse existing validators and package status commands. Define cadence/expiry from T02; return distinct diff --git a/workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md b/workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md index cd4e035..ea6c71e 100644 --- a/workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md +++ b/workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md @@ -172,14 +172,15 @@ render lacks but that carries the tracking label, or a digest mismatch. ```task id: RPF-WP-0043-T04 status: wait -needs_human: true decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e depends_on: [RPF-WP-0043-T03, RPF-WP-0044-T07] -blocking_reason: "Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED); also needs the root automation restored in RPF-WP-0044-T07." +blocking_reason: "Merge approved by D2; runs once T03 diff and root automation (RPF-WP-0044-T07) are proven." priority: high state_hub_task_id: "8638fa73-439d-5dcd-85c7-81aa125170e1" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + **Waits on the founder's go-ahead.** This is a `CONSTRUCT @ railiance-platform` change with `activation=APPROVED`. The merge is the gate, and it is a live production change. Do not take it on the basis of this plan alone. diff --git a/workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md b/workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md index 380b6d8..38a71c1 100644 --- a/workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md +++ b/workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md @@ -185,14 +185,14 @@ Rollback: ```task id: RPF-WP-0044-T03 -status: wait -needs_human: true +status: todo decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e -blocking_reason: "Adopted 2026-09-21; the follow-on step (issue-core adoption, then automation) waits on the founder's go-ahead." priority: high state_hub_task_id: "6d5fc801-e361-579b-bcd8-6fe719a82e94" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + **Adopted 2026-09-21** (founder go-ahead; custodian session): diff at `d2dbc19` rc=0; child merged in `182e788`; root synced at `182e788`; child manual sync (apply strategy, prune off) Succeeded at `d2dbc19`, Synced/Healthy, automated off. `ClusterSecretStore/openbao` Valid with tracking annotation; `issue-core-runtime` SecretSynced. Status `progress` = in the 24h proving period; `selfHeal` needs a second go-ahead. Evidence: `docs/evidence/2026-09-21-openbao-secretstore-argocd-adoption.json`. One object, @@ -237,15 +237,14 @@ Rollback (R1): `git revert` the merge commit and push, then ```task id: RPF-WP-0044-T04 -status: wait -needs_human: true +status: todo decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e -blocked_on: message-from:rapp-issue-core -blocking_reason: "Founder go-ahead plus rapp-issue-core's agreement (hub message) that ArgoCD owns production and make deploy stops being a production path." priority: high state_hub_task_id: "0e619658-0453-51ed-b9a0-bed28b5544fd" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + **Waits on the founder's go-ahead**, and on two preconditions: - `rapp-issue-core` agrees (hub message) that ArgoCD owns production and its @@ -267,14 +266,14 @@ whitelist. Live check: `rapp-issue-core make verify-live`. Workload restore: ```task id: RPF-WP-0044-T05 -status: wait -needs_human: true +status: todo decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e -blocking_reason: "Adopted 2026-09-21; remaining preconditions and the next step wait on the founder's go-ahead." priority: medium state_hub_task_id: "d418068a-6fb0-5416-aac5-d23c93924d9c" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + **Adopted 2026-09-21** (founder go-ahead; custodian session). The *server-side* diff at `f1109d5` conflicted on `resources.limits.cpu` (live `1` owned by `kubectl-client-side-apply` vs declared `1000m`: the same quantity); the *client-side* diff, which is what the apply strategy uses, was rc=0 for all five non-hook objects. Child merged in `6eeb826`; manual sync with the `apply` strategy, prune off: Succeeded, Synced/Healthy, **0 Jobs created**, same pod (36d, no restart), CNPG healthy 1/1, ExternalSecret SecretSynced, `https://revenue.coulomb.social/healthz` 200 (the live check path is `/healthz`, not `/health`). Status `progress` = proving period. Automated sync still needs target-revenue's confirmation on the two hook Jobs (asked 2026-09-21). Evidence: `docs/evidence/2026-09-21-target-revenue-argocd-adoption.json`. Original preconditions: T01 item 2 (CNPG @@ -295,14 +294,14 @@ target-revenue commit. ```task id: RPF-WP-0044-T06 -status: wait -needs_human: true +status: todo decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e -blocking_reason: "Founder go-ahead for the ESO adoption after adding CRD Prune=false,Delete=false and re-running the diff." priority: medium state_hub_task_id: "4ca54868-c31f-5e3d-b7d3-a15b84c15f80" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + **Waits on the founder's go-ahead.** Zero diff, but ESO serves every `ExternalSecret` on the cluster (25 ClusterSecretStores). Before the merge, add `crds.annotations: {argocd.argoproj.io/sync-options: "Prune=false,Delete=false"}` @@ -324,14 +323,15 @@ current `Valid` state (two, `openbao-activity-core` and ```task id: RPF-WP-0044-T07 status: wait -needs_human: true decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e depends_on: [RPF-WP-0044-T03, RPF-WP-0044-T04, RPF-WP-0044-T05, RPF-WP-0044-T06] -blocking_reason: "Founder go-ahead to restore automated prune/selfHeal on railiance-apps-root once T03-T06 are proven." +blocking_reason: "Restore prune/selfHeal once T03-T06 have automated proof; no further founder go-ahead (D2)." priority: medium state_hub_task_id: "844ff115-def2-55ca-ab01-413ba7e6857d" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + **Waits on the founder's go-ahead.** After T03–T06 are proven, restore `automated: {prune: true, selfHeal: true}` on `railiance-apps-root`, as the change-gate decision's production row expects. From then on a merge to the @@ -347,11 +347,13 @@ id: RPF-WP-0044-T08 status: wait needs_human: true decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e -blocking_reason: "Planning only; needs an operator read-only check of coulombcore's ArgoCD, outside agent session scope." +blocking_reason: "Operator read-only check of coulombcore ArgoCD; item on the attended-window checklist (D1 standing rule), not a decision." priority: low state_hub_task_id: "55d1382f-5862-5321-a1c9-96767764ba43" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + Planning only. Needs a read-only check of coulombcore's ArgoCD, outside this session's scope. Under Option A, retiring it also removes `argocd/applications/`. Also hand back to the cluster layer: the phase A install is not declared in diff --git a/workplans/RPF-WP-0048-activity-core-gitops-adoption.md b/workplans/RPF-WP-0048-activity-core-gitops-adoption.md index bf8e9c9..dfcedea 100644 --- a/workplans/RPF-WP-0048-activity-core-gitops-adoption.md +++ b/workplans/RPF-WP-0048-activity-core-gitops-adoption.md @@ -40,15 +40,15 @@ health, resource inventory, schedules and original deployment generations. ```task id: RPF-WP-0048-T02 -status: wait -needs_human: true +status: todo decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e depends_on: [ACTIVITY-WP-0041] -blocking_reason: "24h soak after adoption, then founder confirmation of the scoped identity and checks before automated sync; ACTIVITY-WP-0041 owns publication and the promotion guard." priority: high state_hub_task_id: "63b44949-39f8-52fd-ab63-e618b67ef992" ``` +2026-10-11: requalified after founder decision D2 (ArgoCD owns production) resolved — see the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. + Keep automated sync off for at least 24 hours after successful adoption. Record start and earliest eligibility in evidence. ACTIVITY-WP-0041 owns image publication, source validation and the promotion/rollback guard. Root-wide automation is outside