coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Repair platform workplan links
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source
This commit is contained in:
codex 2026-07-25 10:54:35 +02:00
parent 52a1e3bf96
commit dbabac3b85
2 changed files with 16 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

10
WORK-RECORDS.md
View file

@ -13,6 +13,8 @@
| workplan | RAILIANCE-WP-0009 | finished | — | workplans/RAILIANCE-WP-0009-issue-core-runtime-ingestion-key-lane.md |
| workplan | RAILIANCE-WP-0010 | finished | — | workplans/RAILIANCE-WP-0010-llm-connect-openrouter-provider-key-lane.md |
| workplan | RAILIANCE-WP-0011 | finished | — | workplans/RAILIANCE-WP-0011-reuse-surface-runtime-secrets-openbao-lane.md |
| workplan | RAILIANCE-WP-0012 | active | — | workplans/RAILIANCE-WP-0012-rapp-openbao-extraction-boundary.md |
| workplan | RAILIANCE-WP-0013 | active | — | workplans/RAILIANCE-WP-0013-forgejo-admin-pat-openbao-cutover.md |
| task | RAILIANCE-WP-0005-T01 | done | — | workplans/RAILIANCE-WP-0005-credential-request-and-lease-broker.md |
| task | RAILIANCE-WP-0005-T02 | done | — | workplans/RAILIANCE-WP-0005-credential-request-and-lease-broker.md |
| task | RAILIANCE-WP-0005-T03 | done | — | workplans/RAILIANCE-WP-0005-credential-request-and-lease-broker.md |
@ -46,3 +48,11 @@
| task | RAILIANCE-WP-0011-T02 | done | — | workplans/RAILIANCE-WP-0011-reuse-surface-runtime-secrets-openbao-lane.md |
| task | RAILIANCE-WP-0011-T03 | done | — | workplans/RAILIANCE-WP-0011-reuse-surface-runtime-secrets-openbao-lane.md |
| task | RAILIANCE-WP-0011-T04 | done | — | workplans/RAILIANCE-WP-0011-reuse-surface-runtime-secrets-openbao-lane.md |
| task | RAILIANCE-WP-0012-T01 | todo | — | workplans/RAILIANCE-WP-0012-rapp-openbao-extraction-boundary.md |
| task | RAILIANCE-WP-0012-T02 | todo | — | workplans/RAILIANCE-WP-0012-rapp-openbao-extraction-boundary.md |
| task | RAILIANCE-WP-0012-T03 | todo | — | workplans/RAILIANCE-WP-0012-rapp-openbao-extraction-boundary.md |
| task | RAILIANCE-WP-0012-T04 | wait | — | workplans/RAILIANCE-WP-0012-rapp-openbao-extraction-boundary.md |
| task | RAILIANCE-WP-0013-T01 | todo | — | workplans/RAILIANCE-WP-0013-forgejo-admin-pat-openbao-cutover.md |
| task | RAILIANCE-WP-0013-T02 | todo | — | workplans/RAILIANCE-WP-0013-forgejo-admin-pat-openbao-cutover.md |
| task | RAILIANCE-WP-0013-T03 | todo | — | workplans/RAILIANCE-WP-0013-forgejo-admin-pat-openbao-cutover.md |
| task | RAILIANCE-WP-0013-T04 | wait | — | workplans/RAILIANCE-WP-0013-forgejo-admin-pat-openbao-cutover.md |

12
workplans/RAILIANCE-WP-0011-reuse-surface-runtime-secrets-openbao-lane.md
View file

@ -16,7 +16,7 @@ related_repos:
- railiance-apps
- reuse-surface
- ops-warden
state_hub_workstream_id: "3f9fd8de-7235-4486-aaa7-634dba2bb6fa"
state_hub_workstream_id: "46760f03-a08d-490b-b14b-b16012ccc6e7"
---
# RAILIANCE-WP-0011 — reuse-surface Runtime Secrets OpenBao Lane
@ -66,7 +66,7 @@ and keep `make reuse-forgejo-webhook` idempotent.
id: RAILIANCE-WP-0011-T01
status: done
priority: medium
state_hub_task_id: "8a89c5a0-6ed5-4240-9ce1-1d529ac13b11"
state_hub_task_id: "ed5d785d-aef9-4afc-a22f-64d8c5db10f9"
```
- Draft CCR for the lane (path, fields, policy, k8s role, ESO target)
@ -86,7 +86,7 @@ T02 blocked on platform-operator and reuse-surface-owner approval.
id: RAILIANCE-WP-0011-T02
status: done
priority: medium
state_hub_task_id: "69cf1728-8034-4309-b8ad-eb14184af6b6"
state_hub_task_id: "5c27ccc2-222a-4b2c-a3b6-5a72ded18dfd"
```
Blocked on CCR-2026-0005 approval.
@ -109,7 +109,7 @@ path. CCR status `verified`. T03 catalog migration remains open.
id: RAILIANCE-WP-0011-T03
status: done
priority: low
state_hub_task_id: "52fc7baf-5257-44cd-ae2c-298ef7edbe96"
state_hub_task_id: "096fae4b-00f2-452c-ab36-8777329e273c"
```
Blocked on T02 verification.
@ -132,7 +132,7 @@ documented as break-glass only. CCR-2026-0005 front door `ready`/`resolvable=tru
id: RAILIANCE-WP-0011-T04
status: done
priority: low
state_hub_task_id: "eafc4011-69cf-473f-842c-c58d6a2bece7"
state_hub_task_id: "2ac325df-4882-478b-9ac8-aa4b1e9fa541"
```
Blocked on T03.
@ -151,4 +151,4 @@ ESO Ready, `/v1/federated`). Live smoke passed on production.
- [x] Both fields readable from `platform/workloads/reuse/reuse-surface/runtime-secrets`
- [x] ESO owns `reuse-surface-env`; manual `kubectl create secret` no longer required for steady state
- [x] `warden access reuse-surface-hub-write-token --fetch` uses OpenBao path
- [x] Forgejo org webhook and hub HMAC aligned (smoke verifies signed/unsigned paths; rotation runbook documents reconcile step)
- [x] Forgejo org webhook and hub HMAC aligned (smoke verifies signed/unsigned paths; rotation runbook documents reconcile step)