coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record verified root reader admission and empty custody publication
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
This commit is contained in:
codex 2026-10-03 20:24:57 +02:00
parent 35d326f0cf
commit dff2d6e9f7
3 changed files with 106 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

32
workplans/RPF-WP-0049-platform-root-custody-record-delivery.md
View file

@ -70,18 +70,17 @@ Implemented silent attended provision/publish/restore-check executor with exact
reader admission, per-key required CAS, active-audit check, pinned canon, retained
high-water baseline, fsynced pending journal and immutable local history.
Readback is mandatory; replay is idempotent; conflicting existing role/policy,
missing state and rollback fail closed. Off-host history placement and actual
recovery evidence remain execution/acceptance dependencies in T04/T05.
missing state and rollback fail closed. Publisher state is independently retained on the operator workstation, outside
railiance01. Workstation receipt-holder backup/readback and actual isolated
OpenBao recovery evidence remain acceptance dependencies in T05.
## Execute authorized attended provisioning and establish initial baseline
```task
id: RPF-WP-0049-T04
status: wait
status: done
priority: high
depends_on: [RPF-WP-0049-T03]
needs_human: true
blocking_reason: "Go-forward covers the prepared no-grant empty baseline; founder terminal OIDC/MFA must execute reader admission and empty publication. Independent history backup owner/destination/readback receipt remain unresolved; no real ceremony or root grant is claimed."
state_hub_task_id: "88b932e8-1010-56c6-be27-ad46f47e1e80"
```
@ -94,8 +93,8 @@ examples/custody-record/initial-empty-record.json (entries=[]), with provenance
docs/evidence/2026-10-03-root-grant-delivery-progress.md. Concrete admission
and empty publication commands are in the packet; state is retained at
/home/worsch/.local/state/net-kingdom-root-custody. No root grant is seeded.
Independent history backup destination/owner/readback proof is still required
for T05 acceptance. Any later real grant requires genuine signed human ceremony.
The operator workstation already holds history independently of OpenBao;
receipt-holder backup/readback and isolated recovery proof remain T05 requirements. Any later real grant requires genuine signed human ceremony.
## Return producer delivery receipts
@ -104,7 +103,7 @@ id: RPF-WP-0049-T05
status: wait
priority: high
depends_on: [RPF-WP-0049-T04]
blocking_reason: "Live authenticated/denial/outage/revocation/restore/audit producer delivery receipts remain absent."
blocking_reason: "Admission and empty publication receipts verified; workload success/denial/outage/audit correlation and independent workstation receipt-holder backup/readback plus isolated OpenBao rollback/restore evidence remain. No new generic approval gate."
state_hub_task_id: "871e3236-61c0-58a1-a307-399cd662be6b"
```
@ -143,3 +142,20 @@ attended admission then empty publication handoff without a real root grant or
new generic approval gate. State directory is explicit outside Git; independent
off-host history receipt remains an acceptance dependency. No login or live
publication was executed by this agent.
## Verified attended execution — 2026-10-03
T04 done: founder executed reviewed reader admission and empty publication.
Verified fresh receipts platform-root-admission-20261003T181954Z-333977.json
and platform-root-publish-20261003T181954Z-333977.json. Initial source revision 1,
KV version 1, no entries/root grants, content digest
33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248.
Publisher baseline and immutable history match, mode 0600. The August operator
role configuration file is not evidence of this execution. No agent human
admin login was performed. Details and exact remaining acceptance requirements:
[delivery evidence](../docs/evidence/2026-10-03-platform-root-custody-delivery.md).
T05 remains wait for workload and independent recovery receipts; the source
workplan stays blocked on evidence, not another generic approval. The publisher
state holder is already independent/off-host relative to railiance01. No new
service dependency is introduced solely to duplicate that holder.