diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index e72fb0f..232eb9d 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -49,6 +49,7 @@ | workplan | RPF-WP-0067 | active | — | workplans/RPF-WP-0067-netkingdom-identity-receipt-and-metadata-answers.md | | workplan | RPF-WP-0068 | active | — | workplans/RPF-WP-0068-email-connect-platform-smtp.md | | workplan | RPF-WP-0069 | active | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | +| workplan | RPF-WP-0070 | blocked | — | workplans/RPF-WP-0070-mas-evidence-recovery.md | | task | RPF-WP-ADHOC-2026-10-10-T01 | done | — | workplans/ADHOC-2026-10-10.md | | task | RPF-WP-ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md | | task | RPF-WP-ADHOC-2026-10-11-T02 | done | — | workplans/ADHOC-2026-10-11.md | @@ -235,6 +236,7 @@ | task | RPF-WP-0069-T07 | todo | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | | task | RPF-WP-0069-T08 | done | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | | task | RPF-WP-0069-T09 | wait | — | workplans/RPF-WP-0069-bounded-executor-lanes.md | +| task | RPF-WP-0070-T01 | wait | — | workplans/RPF-WP-0070-mas-evidence-recovery.md | | intake | RPF-IN-0001 | closed | — | intakes/intakes.md | | intake | RPF-IN-0002 | open | — | intakes/intakes.md | | intake | RPF-IN-0003 | open | — | intakes/intakes.md | diff --git a/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md b/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md index 22d62e0..ff1fa35 100644 --- a/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md +++ b/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md @@ -167,6 +167,10 @@ recovery and ledger growth/headroom, local/provider generation retention and compatibility with existing 30-day lifecycle. Provisional daily 04:15 UTC, RPO 24h, stale 26h, RTO 60min need owner acceptance; they are not measured promises. +The MAS evidence volume waits on this task. RPF-WP-0070 copies the accepted +ledger shape onto namespace `mas` once retention, capacity, receipts, escrow, +and the first capture are done. It does not start before that. + The SQLite snapshot preserves state only at capture. A later provider submission or challenge consume/cancel can be lost by restoring an older point. Production incident recovery must fence caller/outbox/challenge traffic and reconcile the diff --git a/workplans/RPF-WP-0070-mas-evidence-recovery.md b/workplans/RPF-WP-0070-mas-evidence-recovery.md new file mode 100644 index 0000000..abd02c9 --- /dev/null +++ b/workplans/RPF-WP-0070-mas-evidence-recovery.md @@ -0,0 +1,48 @@ +--- +id: RPF-WP-0070 +type: workplan +title: "Recover the MAS evidence volume the way the email-connect ledger is recovered" +domain: financials +repo: railiance-platform +status: blocked +owner: codex +topic_slug: coulomb-social +created: "2026-11-01" +updated: "2026-11-01" +origin: residual +origin_ref: MAS-WP-0007 +related: + - RPF-WP-0053 + - MAS-WP-0007 +blocking_reason: "RPF-WP-0053-T05 has not accepted the email-connect ledger path. Retention, capacity, independent receipts, escrow, and the first capture are still open." +--- + +# Recover the MAS evidence volume + +Platform duty for the MAS facility. The email-connect ledger already has a +separate archive profile, `platform-pg/application-archives/email-connect/`, +owned by RPF-WP-0053-T05. The MAS evidence volume is still only the +node-local PVC `mas-evidence` in namespace `mas`: `events.jsonl`, +`tickets.sqlite3`, and the outbox database. Give that volume the same kind +of recovery after the ledger path is accepted. Do not start it before then. + +The MAS facility can be powered off without touching platform mail. This +backup must not scale it, roll its image, or delete the namespace. SMTP and +TEM credentials stay out of the backup worker. + +## Wait for the ledger path + +```task +id: RPF-WP-0070-T01 +status: wait +priority: medium +depends_on: [RPF-WP-0053-T05] +blocking_reason: "The email-connect ledger archive is not an accepted platform path yet." +``` + +RPF-WP-0053-T05 remains progress. Its intervention note says retention, +capacity, independent receipts, escrow, and the first capture are open. +When that task is done, copy its accepted shape for the MAS evidence +files: prefix-scoped custody, a quiesced capture, an independent receipt, +and a restore rehearsal that does not resend mail. Until then this task +stays wait.