Report WP-0024 approvals by task
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
This commit is contained in:
codex 2026-08-22 14:57:52 +02:00
parent defb2a556d
commit d8c0cd38a7
5 changed files with 80 additions and 9 deletions

View file

@ -9,6 +9,18 @@
"approve",
"request-changes"
],
"task_owners": {
"RAILIANCE-WP-0024-T02": [
"audit-core",
"rapp-postgres"
],
"RAILIANCE-WP-0024-T03": [
"audit-core",
"rapp-postgres",
"railiance-cluster",
"railiance-infra"
]
},
"owners": {
"audit-core": {
"tasks": [
@ -34,10 +46,12 @@
},
"rapp-postgres": {
"tasks": [
"RAILIANCE-WP-0024-T02"
"RAILIANCE-WP-0024-T02",
"RAILIANCE-WP-0024-T03"
],
"artifacts": [
"docs/audit-core-database-lease-recovery.md",
"docs/railiance01-coordinated-reboot.md",
"scripts/audit-core-recovery-preflight.py",
"scripts/audit-core-database-lease-recovery.py",
"docs/audit-core-database-lease-approval.example.json"
@ -45,11 +59,14 @@
"assertions": [
"Lease selection aborts unless exactly one live handle exists below database/creds/audit-core-runtime and its issue time coheres with the ExternalSecret refresh.",
"The action revokes only that exact lease handle; it never revokes the role prefix, an External Secrets parent lease, or another database consumer.",
"Recovery uses ordinary ExternalSecret refresh and mounted-file reread, with no pod restart, database restore or credential value in evidence."
"Recovery uses ordinary ExternalSecret refresh and mounted-file reread, with no pod restart, database restore or credential value in evidence.",
"After the coordinated reboot, the same platform-pg PVC and cluster identity return 1/1 Ready with ContinuousArchiving true and no re-bootstrap or in-place restore shortcut.",
"The reboot hold point requires a fresh completed Barman backup and healthy WAL archiving before the host action."
],
"checks": [
"focused-unit-tests",
"database-lease-preflight"
"database-lease-preflight",
"node-reboot-preflight"
]
},
"railiance-cluster": {