coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/workplans
History
codex 0e98465c6e
All checks were successful
CCR intake gate / gate (push) Successful in 2m13s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
ADHOC-2026-11-03-T05: ESO recovery policy test admits approved CCR extensions. 
The reuse-surface recovery lane policy carries the exact extra data path
approved under CCR-2026-0046; the test predated it and required exactly three
paths. It now allows one exact data path per approved CCR naming the same
policy file and keeps the wildcard, metadata and list bans.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 509845@bnt-lap001
Assistant-Session: ed7a7d95-d8eb-455c-b594-963fb1830f76
2026-11-03 23:02:07 +01:00
..
archived Review blocked platform obligations and archive completed ESO recovery 2026-09-05 21:16:53 +02:00
.gitkeep chore(init): scaffold railiance-platform (S3 Platform Services) 2026-03-10 00:36:06 +01:00
ADHOC-2026-10-10.md ADHOC-2026-10-10: operators/nextcloud retired 2026-10-10 15:37:52 +02:00
ADHOC-2026-10-11.md repo.work.assign_missing_identifiers 2026-10-11 21:30:57 +02:00
ADHOC-2026-10-19.md repo.work.assign_missing_identifiers 2026-10-27 22:22:58 +01:00
ADHOC-2026-11-03.md ADHOC-2026-11-03-T05: ESO recovery policy test admits approved CCR extensions. 2026-11-03 23:02:07 +01:00
README.md Finish RPF-WP-0058 and hand its reader rotation to backlog RPF-WP-0071. 2026-11-03 14:16:15 +01:00
RPF-WP-0015-audit-core-custody-and-recovery-coordination.md Record round 14: audit-core 5f3d01c8 pin reviewed by all five owners. 2026-11-03 22:22:52 +01:00
RPF-WP-0025-openbao-operator-only-access.md Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
RPF-WP-0027-keycape-live-secret-exposure-recovery.md Return not-yet-ready attended items to owners (2026-10-11) 2026-10-11 21:08:43 +02:00
RPF-WP-0029-backup-credential-default-removal.md Close RPF-WP-0029-T02 on operator-attested predecessor unshare. 2026-09-15 02:48:15 +02:00
RPF-WP-0035-credential-lane-implementation.md CCR-2026-0050: record access-engine-owner approval; runbook uses Access public-receipt tool and pin 2026-10-21 01:35:14 +02:00
RPF-WP-0036-platform-service-assurance.md RPF-WP-0066: OpenBao durable audit shipping, scheduled snapshots, live conformance (NK-WP-0055-T11/T12) 2026-10-27 22:31:57 +01:00
RPF-WP-0038-forgejo-scaleway-primary-coverage.md Activate Playwright pilot with scoped consumer group and native evidence 2026-10-13 20:55:31 +02:00
RPF-WP-0039-vergabe-demo-company-database.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
RPF-WP-0040-keycape-factor-credential-custody.md Close factor credential expiry and recovery acceptance for P05 2026-09-13 22:20:14 +02:00
RPF-WP-0041-state-hub-105m-not-provisioning.md Confirm no platform provisioning from the 105m remainder. 2026-09-14 10:34:27 +02:00
RPF-WP-0042-informed-decision-sitting-requester.md Close RPF-WP-0042 after sitting-requester exchange proof. 2026-09-15 20:57:50 +02:00
RPF-WP-0043-policy-nexus-argocd-onboarding.md RPF-WP-0043-T03: record read-only policy-nexus adoption precheck (steps 1 and 3) 2026-10-11 21:08:20 +02:00
RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md RPF-WP-0046-T04: adopt eso-token-renewer Application (pinned b2ebe10); close RPF-WP-0045 2026-09-23 20:17:42 +02:00
RPF-WP-0046-eso-database-token-renewal.md RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished 2026-09-24 00:48:24 +02:00
RPF-WP-0047-bao-coulomb-social-notice-page.md Point bao-notice at the rapp-openbao copy of the page. 2026-10-23 17:42:39 +02:00
RPF-WP-0048-activity-core-gitops-adoption.md Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
RPF-WP-0049-platform-root-custody-record-delivery.md docs(custody): reference owned backup runtime refresh task 2026-10-03 22:00:53 +02:00
RPF-WP-0050-attended-provisioning-preparation.md retire historical preparation window 2026-10-11 18:46:20 +02:00
RPF-WP-0051-informed-decision-requester-workload-delivery.md Accept requester workload delivery and retain separate rotation residual 2026-10-05 00:13:30 +02:00
RPF-WP-0052-authelia-platform-smtp-admission.md Complete scoped Authelia SMTP admission and record rotation consumers 2026-10-06 20:38:28 +02:00
RPF-WP-0053-coulomb-paired-backup-admission.md Accept the email-connect ledger archive path. 2026-11-02 02:08:34 +01:00
RPF-WP-0054-keycape-client-secret-generate-lane.md close first-generation lane and retain rotation residual atomically 2026-10-11 18:46:21 +02:00
RPF-WP-0055-keycape-client-secret-rotation-residual.md close first-generation lane and retain rotation residual atomically 2026-10-11 18:46:21 +02:00
RPF-WP-0056-playwright-consumer-admission.md RPF-WP-0056: record KeyCape source acceptance of the public client 2026-10-14 18:35:34 +02:00
RPF-WP-0057-sign-in-diagnosis-caller-proof.md Record the OpenBao UI role clickthrough and finish RPF-WP-0057. 2026-11-03 13:13:14 +01:00
RPF-WP-0058-reuse-private-source-reader.md Finish RPF-WP-0058 and hand its reader rotation to backlog RPF-WP-0071. 2026-11-03 14:16:15 +01:00
RPF-WP-0059-hourly-cadence-receiver-custody.md Finish RPF-WP-0059: independent Qonto readback captured; collector silent since 2026-10-15 20:36Z. 2026-11-03 22:01:07 +01:00
RPF-WP-0060-browser-case-platform-bindings.md Block RPF-WP-0060 on the unacknowledged 1.3 SecurityCase type (NK-WP-0048-T16). 2026-11-03 21:27:47 +01:00
RPF-WP-0061-self-service-ccr-intake.md CCR-2026-0051: binding confirmed on native evidence, status applied; RPF-WP-0061 follow-up D 2026-10-18 12:58:39 +02:00
RPF-WP-0062-custodian-agent-observer-identity.md Workplan finished: all tasks done after the attended cutover 2026-10-21 00:02:31 +02:00
RPF-WP-0063-wave2-resource-right-sizing.md Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071) 2026-10-22 01:00:57 +02:00
RPF-WP-0064-isolated-original-openbao-restore.md RPF-WP-0064-T10: done; production SSO-down walk passed 2026-10-28 01:02:50 +01:00
RPF-WP-0065-netkingdom-role-claim-bindings.md RPF-WP-0065-T04: done; founder applied and verified the platform-admin aal2 binding 2026-10-27 23:23:11 +01:00
RPF-WP-0066-openbao-durable-audit-snapshots-conformance.md RPF-WP-0064, RPF-WP-0066: record hub ids 2026-10-27 23:33:59 +01:00
RPF-WP-0067-netkingdom-identity-receipt-and-metadata-answers.md Close RPF-WP-0067: value-safe OpenBao and PostgreSQL identity metadata for NK-WP-0054-T04. 2026-11-03 21:19:54 +01:00
RPF-WP-0068-email-connect-platform-smtp.md Return the admitted email-connect SMTP reader to the consumer. 2026-11-01 23:43:29 +01:00
RPF-WP-0069-bounded-executor-lanes.md RPF-WP-0069-T07: approve sets approved only once every required role approves. 2026-11-03 22:41:22 +01:00
RPF-WP-0070-mas-evidence-recovery.md Close RPF-WP-0070: owners accept the MAS evidence recovery terms with 30-day local pruning. 2026-11-03 08:38:39 +01:00
RPF-WP-0071-attended-credential-rotation-lane.md Keep RPF-WP-0071 in the backlog: T02 is todo behind T01, not wait. 2026-11-03 14:32:50 +01:00
RPF-WP-0072-audit-core-recovery-compatibility.md Record State Hub ids for RPF-WP-0072. 2026-11-03 22:31:58 +01:00

README.md

Current platform work

Reviewed October 13, 2026 against source workplans and the live inbox. Source files remain authoritative; the generated brief contains historical aliases. Completed plans retain their IDs and managed UUIDs, including archived plans.

Workplan Open tasks Next work or dependency
RPF-WP-0015 (active) T02, T03 Recovery windows, sender/abort owner and snapshot/quorum/access evidence
RPF-WP-0027 (blocked) T03, T06 Resolver and custody owner contracts
RPF-WP-0035 (blocked) T02, T03, T07, T08, T10, T12 Execution integration and owner acceptance; verified-source compiler correction tested October 13
RPF-WP-0036 (blocked) T03, T04, T06 Bounded scheduler, telemetry receiving contract and ownership returns
RPF-WP-0038 (blocked) T04 Durable caller, verified inventory and quota/retention; expiration/cutover hold persists
RPF-WP-0043 (blocked) T03, T04 Owner values/render diff, then root automation before adoption
RPF-WP-0044 (blocked) T04, T06, T07 Attended issue-core issuer login, ordered ESO adoption and root automation
RPF-WP-0048 (blocked) T02 Activity-core promotion evidence
RPF-WP-0053 (proposed) T01, T02, T03, T04, T05 Paired archive execution/custody, retrieval/recovery and monitoring admission
RPF-WP-0055 (backlog) T01 Unpromoted rotation residual; do not implement without demand/risk promotion
RPF-WP-0056 (blocked) T03, T06 Pilot/setup implemented; Custodian coordination requested for identity, transport and real human/agent proof
RPF-WP-0071 (backlog) T01, T02 Build a cheap attended rotation lane first; T02 rotates or revokes the reuse-surface reader by 2027-01-13 (from RPF-WP-0058-T05)

October 13 review corrected WP-0038-T04's stale todo state to the documented wait. RPF-IN-0012 remains an open independent execution/wrapped-delivery review; the compiler fix does not close it. Playwright publication is resolved; its new Platform workplan records the user-requested group and actual activation evidence.

Routine synchronization uses the exact-commit Repo Manager receipt described in AGENTS.md. Legacy alias repair remains the scoped WP-0036-T06 dependency.