coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
147 commits 1 branch 0 tags 467 KiB
Commit graph

147 commits

This branch
This branch
All branches
Author SHA1 Message Date
tegwick
786d91eeba Fix default Nextcloud filesdrop WebDAV URL for backup lane.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Derive NC_WEBDAV_URL from token when unset; document filesdrop vs webdav.
 2026-07-07 18:05:13 +02:00
tegwick
074e7f8441 Add Forgejo daily backup automation (T04/T09 Option A)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details 
make forgejo-backup runs forgejo dump + pg_dump, age-encrypts, uploads to
Nextcloud forgejo/ prefix. Includes dry-run, status, and operator docs.
 2026-07-07 17:19:19 +02:00
tegwick
0055e8f3f7 Establish railiance backup credentials in OpenBao (CCR-2026-0004).
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details 
Add workload KV lane for Nextcloud WebDAV token, URL, and age recovery
escrow at platform/workloads/railiance/backup/offsite-lane. Apply read
policy and OIDC role railiance-backup-workload-kv-read; wire forgejo-backup
to load credentials from OpenBao when env is unset.
 2026-07-07 17:16:30 +02:00
tegwick
f428940da8 Point Forgejo ClusterSecretStore at live coulombcore OpenBao
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Use https://bao.coulomb.social with token auth until railiance01 OpenBao is
bootstrapped; the in-cluster railiance01 instance is not initialized.
 2026-07-07 14:35:46 +02:00
tegwick
0941d6e8f9 Add OpenBao External Secrets lane for Forgejo mailer on railiance01
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 6s
Details 
Introduce external-secrets-forgejo policy/role, ClusterSecretStore
openbao-forgejo (forgejo namespace), and make openbao-configure-external-secrets-forgejo.
 2026-07-07 14:30:02 +02:00
tegwick
7c598c2715 Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 3)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Honest first-pass maturity vector grounded in README/docs/tests present
in this repo; no invented evidence. Flagged for human review before
publish. See reuse-surface history/2026-07-06-coverage-classification.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-06 19:50:54 +02:00
tegwick
37d9b0e271 Added forgejo deployment
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-07-04 13:26:07 +02:00
tegwick
b78877b5f7 Add Forgejo CI smoke workflow (enablement template)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-07-04 12:49:59 +02:00
tegwick
06844c2669 NET-WP-0020 T4: prepared transit auto-unseal seal stanza (disabled by default) 
Commented seal "transit" stanza in the OpenBao server config plus an
'Auto-Unseal via Transit Seal' doc section covering provisioning, seal
migration, pod-restart proof, and the net-kingdom console evidence flags.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 22:08:47 +02:00
tegwick
8ac7314c43 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for railiance-platform
 2026-07-02 20:57:11 +02:00
tegwick
5b5e8616bf RAILIANCE-WP-0005 finished: T07 re-scoped and closed 
Helper-side preflight scope is complete and unit-tested; the live flex-auth
deny capability is re-scoped to flex-auth-side work (capability request
893ff109). Autonomous decision, documented in the task note for easy revert.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 20:56:57 +02:00
tegwick
5a5383eadb chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for railiance-platform
 2026-07-02 20:54:56 +02:00
tegwick
4936b8970b RAILIANCE-WP-0009/0010 finished: front doors active; WP-0005 T10 done 
- CCR-2026-0002/0003: frontdoor_activation evidence recorded, status active,
  readiness ready/resolvable (ops-warden catalog promotion commit 364eb7d)
- WP-0009/0010 T06 done; both workplans finished
- WP-0005 T10 closed on acceptance (fast path, break-glass, routing truth
  consistent); phase-2 readonly-diagnostics grant deferred as follow-up
- WP-0005 T07 stays wait: flex-auth lacks a credential-grant authorization
  surface (capability request sent, State Hub message 893ff109)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 20:54:29 +02:00
tegwick
d284fea400 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for railiance-platform
 2026-07-02 14:52:27 +02:00
tegwick
38c6b11103 RAILIANCE-WP-0009/0010 T07: credential lane lifecycle runbook 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 14:52:08 +02:00
tegwick
f803bf167b chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for railiance-platform
 2026-07-02 12:57:01 +02:00
tegwick
1a075cafd1 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - RAILIANCE-WP-0010-T06: progress → wait
 2026-07-02 12:56:59 +02:00
tegwick
b86001fe2b RAILIANCE-WP-0010: T04/T05 done — value provisioned, ES lane live, llm-connect verified 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 12:56:43 +02:00
tegwick
b1b9bc5474 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for railiance-platform
 2026-07-02 12:13:52 +02:00
tegwick
b26a04cab3 RAILIANCE-WP-0005-T09 done: audit references + unwrap-once evidence 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 12:13:38 +02:00
tegwick
7fc334f67d chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for railiance-platform
 2026-07-02 12:13:15 +02:00
tegwick
8327ce9fe3 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - RAILIANCE-WP-0009-T06: progress → wait
 2026-07-02 12:13:07 +02:00
tegwick
ddd916d71c CCR-2026-0002/0003 approved + applied via constrained applier; WP-0008 finished, WP-0009/0010 advanced 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 12:12:49 +02:00
tegwick
8395862760 Regenerate agent instructions: workstream -> workplan terminology 
Registration guidance now prescribes file-first + fix-consistency (C-06)
instead of manual create_workplan/create_workstream calls; progress-event
examples use workplan_id; legacy field names annotated.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 01:47:45 +02:00
tegwick
60814fc76a Archive closed workplans to workplans/archived/ (ADR-001) 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 00:25:41 +02:00
tegwick
5dc71fb6ff Repo hygiene: fill stack-and-commands, normalize workplan statuses 
- Fill .claude/rules/stack-and-commands.md (was an empty TODO template)
- Normalize workplan frontmatter statuses to canonical vocabulary
  (completed/done -> finished) per ADR-001

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 00:21:48 +02:00
tegwick
16020daf58 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for railiance-platform
 2026-07-02 00:09:49 +02:00
tegwick
ab08a21337 Align OpenRouter lane selector 2026-07-01 23:51:25 +02:00
tegwick
797a957e42 Record credential broker delivery proof 2026-07-01 23:42:17 +02:00
tegwick
38936d8fd6 Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
tegwick
2db4d1afe1 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-01:
  - update .custodian-brief.md for railiance-platform
 2026-07-01 23:12:51 +02:00
tegwick
268437a36d chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-01:
  - RAILIANCE-WP-0005-T10: progress → wait
 2026-07-01 23:12:47 +02:00
tegwick
0a24ab8475 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-01:
  - RAILIANCE-WP-0005-T09: progress → wait
 2026-07-01 23:12:47 +02:00
tegwick
6ed18ca709 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-01:
  - RAILIANCE-WP-0005-T05: progress → wait
 2026-07-01 23:12:47 +02:00
tegwick
8321e14b46 Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
tegwick
a95236d2e5 Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
tegwick
c626bfcf15 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-30:
  - update .custodian-brief.md for railiance-platform
 2026-06-30 11:34:38 +02:00
tegwick
3e28e9ae79 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-30:
  - update .custodian-brief.md for railiance-platform
 2026-06-30 11:21:43 +02:00
tegwick
aa4c9ac492 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-30:
  - update .custodian-brief.md for railiance-platform
 2026-06-30 11:13:20 +02:00
tegwick
b59718fc83 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-30:
  - update .custodian-brief.md for railiance-platform
 2026-06-30 01:32:29 +02:00
tegwick
51b85f802d chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-29:
  - update .custodian-brief.md for railiance-platform#
 2026-06-29 18:57:38 +02:00
tegwick
efb5432eb8 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-29:
  - update .custodian-brief.md for railiance-platform
 2026-06-29 17:36:07 +02:00
tegwick
5c6a3ce95e chore(consistency): renormalize lifecycle state [auto] 
Updated by fix-consistency on 2026-06-29:
  - workplan status: ready → active
 2026-06-29 17:36:01 +02:00
tegwick
a07f2d3d7f chore(consistency): renormalize lifecycle state [auto] 
Updated by fix-consistency on 2026-06-29:
  - workplan status: ready → active
 2026-06-29 17:35:59 +02:00
tegwick
481e64c3f4 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-29:
  - update .custodian-brief.md for railiance-platform
 2026-06-29 17:19:29 +02:00
tegwick
8f617fcbf4 Activate whynot npm credential lane 2026-06-29 00:13:09 +02:00
tegwick
e88c7829f3 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-29:
  - update .custodian-brief.md for railiance-platform
 2026-06-29 00:12:16 +02:00
tegwick
1e769c75a0 Record whynot positive fetch verification 2026-06-28 17:26:10 +02:00
tegwick
2c1e76efca Record whynot identity group evidence 2026-06-28 16:05:17 +02:00
tegwick
3527bc1cae Request groups scope for whynot OIDC role 2026-06-28 13:23:14 +02:00