Record MAS evidence recovery as blocked on the email-connect ledger path.

RPF-WP-0070 waits until RPF-WP-0053-T05 accepts retention, capacity,
receipts, escrow, and the first ledger capture. The MAS volume is not
backed up by this change.

Assistant: grok
Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd
This commit is contained in:
codex 2026-11-01 23:13:14 +01:00
parent 7c43f547ad
commit f71a028903
3 changed files with 54 additions and 0 deletions

View file

@ -49,6 +49,7 @@
| workplan | RPF-WP-0067 | active | — | workplans/RPF-WP-0067-netkingdom-identity-receipt-and-metadata-answers.md |
| workplan | RPF-WP-0068 | active | — | workplans/RPF-WP-0068-email-connect-platform-smtp.md |
| workplan | RPF-WP-0069 | active | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
| workplan | RPF-WP-0070 | blocked | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
| task | RPF-WP-ADHOC-2026-10-10-T01 | done | — | workplans/ADHOC-2026-10-10.md |
| task | RPF-WP-ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md |
| task | RPF-WP-ADHOC-2026-10-11-T02 | done | — | workplans/ADHOC-2026-10-11.md |
@ -235,6 +236,7 @@
| task | RPF-WP-0069-T07 | todo | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
| task | RPF-WP-0069-T08 | done | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
| task | RPF-WP-0069-T09 | wait | — | workplans/RPF-WP-0069-bounded-executor-lanes.md |
| task | RPF-WP-0070-T01 | wait | — | workplans/RPF-WP-0070-mas-evidence-recovery.md |
| intake | RPF-IN-0001 | closed | — | intakes/intakes.md |
| intake | RPF-IN-0002 | open | — | intakes/intakes.md |
| intake | RPF-IN-0003 | open | — | intakes/intakes.md |

View file

@ -167,6 +167,10 @@ recovery and ledger growth/headroom, local/provider generation retention and
compatibility with existing 30-day lifecycle. Provisional daily 04:15 UTC, RPO 24h,
stale 26h, RTO 60min need owner acceptance; they are not measured promises.
The MAS evidence volume waits on this task. RPF-WP-0070 copies the accepted
ledger shape onto namespace `mas` once retention, capacity, receipts, escrow,
and the first capture are done. It does not start before that.
The SQLite snapshot preserves state only at capture. A later provider submission
or challenge consume/cancel can be lost by restoring an older point. Production
incident recovery must fence caller/outbox/challenge traffic and reconcile the

View file

@ -0,0 +1,48 @@
---
id: RPF-WP-0070
type: workplan
title: "Recover the MAS evidence volume the way the email-connect ledger is recovered"
domain: financials
repo: railiance-platform
status: blocked
owner: codex
topic_slug: coulomb-social
created: "2026-11-01"
updated: "2026-11-01"
origin: residual
origin_ref: MAS-WP-0007
related:
- RPF-WP-0053
- MAS-WP-0007
blocking_reason: "RPF-WP-0053-T05 has not accepted the email-connect ledger path. Retention, capacity, independent receipts, escrow, and the first capture are still open."
---
# Recover the MAS evidence volume
Platform duty for the MAS facility. The email-connect ledger already has a
separate archive profile, `platform-pg/application-archives/email-connect/`,
owned by RPF-WP-0053-T05. The MAS evidence volume is still only the
node-local PVC `mas-evidence` in namespace `mas`: `events.jsonl`,
`tickets.sqlite3`, and the outbox database. Give that volume the same kind
of recovery after the ledger path is accepted. Do not start it before then.
The MAS facility can be powered off without touching platform mail. This
backup must not scale it, roll its image, or delete the namespace. SMTP and
TEM credentials stay out of the backup worker.
## Wait for the ledger path
```task
id: RPF-WP-0070-T01
status: wait
priority: medium
depends_on: [RPF-WP-0053-T05]
blocking_reason: "The email-connect ledger archive is not an accepted platform path yet."
```
RPF-WP-0053-T05 remains progress. Its intervention note says retention,
capacity, independent receipts, escrow, and the first capture are open.
When that task is done, copy its accepted shape for the MAS evidence
files: prefix-scoped custody, a quiesced capture, an independent receipt,
and a restore rehearsal that does not resend mail. Until then this task
stays wait.