coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
railiance-platform/workplans
History
codex 567d2c671b RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 
Namespace custodian-agents, ServiceAccount custodian-agent (no automount, no
token Secret), curated read-only ClusterRole custodian-supervised-observer and
its binding, per the founder decision of 2026-10-20. Offline pytest guard
asserts no forbidden resource, no write verb, no wildcard.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
2026-10-20 13:38:05 +02:00
..
archived Review blocked platform obligations and archive completed ESO recovery 2026-09-05 21:16:53 +02:00
.gitkeep chore(init): scaffold railiance-platform (S3 Platform Services) 2026-03-10 00:36:06 +01:00
ADHOC-2026-10-10.md ADHOC-2026-10-10: operators/nextcloud retired 2026-10-10 15:37:52 +02:00
ADHOC-2026-10-11.md repo.work.assign_missing_identifiers 2026-10-11 21:30:57 +02:00
ADHOC-2026-10-19.md fix(argocd): pin informed-decision child to approved live 312ab97e 2026-10-20 00:22:58 +02:00
README.md Request Custodian coordination of self-service Playwright access 2026-10-13 21:31:32 +02:00
RPF-WP-0015-audit-core-custody-and-recovery-coordination.md RPF-WP-0015-T03: record E2 attempts blocked by aal1 login (no run, nothing changed) 2026-10-15 04:22:19 +02:00
RPF-WP-0025-openbao-operator-only-access.md Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
RPF-WP-0027-keycape-live-secret-exposure-recovery.md Return not-yet-ready attended items to owners (2026-10-11) 2026-10-11 21:08:43 +02:00
RPF-WP-0029-backup-credential-default-removal.md Close RPF-WP-0029-T02 on operator-attested predecessor unshare. 2026-09-15 02:48:15 +02:00
RPF-WP-0035-credential-lane-implementation.md Prepare source-only KEY-WP-0039-T02 owner returns 2026-10-17 04:31:07 +02:00
RPF-WP-0036-platform-service-assurance.md RPF-WP-0044-T08: old coulombcore ArgoCD is frozen (expired k3s certs); retirement moves to NK-WP-0022 2026-10-11 23:23:29 +02:00
RPF-WP-0038-forgejo-scaleway-primary-coverage.md Activate Playwright pilot with scoped consumer group and native evidence 2026-10-13 20:55:31 +02:00
RPF-WP-0039-vergabe-demo-company-database.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
RPF-WP-0040-keycape-factor-credential-custody.md Close factor credential expiry and recovery acceptance for P05 2026-09-13 22:20:14 +02:00
RPF-WP-0041-state-hub-105m-not-provisioning.md Confirm no platform provisioning from the 105m remainder. 2026-09-14 10:34:27 +02:00
RPF-WP-0042-informed-decision-sitting-requester.md Close RPF-WP-0042 after sitting-requester exchange proof. 2026-09-15 20:57:50 +02:00
RPF-WP-0043-policy-nexus-argocd-onboarding.md RPF-WP-0043-T03: record read-only policy-nexus adoption precheck (steps 1 and 3) 2026-10-11 21:08:20 +02:00
RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md RPF-WP-0044-T04: issue-core adopted by Argo, verifier passed 2026-10-20 13:36:08 +02:00
RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md RPF-WP-0046-T04: adopt eso-token-renewer Application (pinned b2ebe10); close RPF-WP-0045 2026-09-23 20:17:42 +02:00
RPF-WP-0046-eso-database-token-renewal.md RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished 2026-09-24 00:48:24 +02:00
RPF-WP-0047-bao-coulomb-social-notice-page.md RPF-WP-0047 done: bao.coulomb.social serves a trusted static notice 2026-09-24 00:57:34 +02:00
RPF-WP-0048-activity-core-gitops-adoption.md Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
RPF-WP-0049-platform-root-custody-record-delivery.md docs(custody): reference owned backup runtime refresh task 2026-10-03 22:00:53 +02:00
RPF-WP-0050-attended-provisioning-preparation.md retire historical preparation window 2026-10-11 18:46:20 +02:00
RPF-WP-0051-informed-decision-requester-workload-delivery.md Accept requester workload delivery and retain separate rotation residual 2026-10-05 00:13:30 +02:00
RPF-WP-0052-authelia-platform-smtp-admission.md Complete scoped Authelia SMTP admission and record rotation consumers 2026-10-06 20:38:28 +02:00
RPF-WP-0053-coulomb-paired-backup-admission.md Requalify tasks after founder attended-window choices (2026-10-11, round 3) 2026-10-11 21:06:41 +02:00
RPF-WP-0054-keycape-client-secret-generate-lane.md close first-generation lane and retain rotation residual atomically 2026-10-11 18:46:21 +02:00
RPF-WP-0055-keycape-client-secret-rotation-residual.md close first-generation lane and retain rotation residual atomically 2026-10-11 18:46:21 +02:00
RPF-WP-0056-playwright-consumer-admission.md RPF-WP-0056: record KeyCape source acceptance of the public client 2026-10-14 18:35:34 +02:00
RPF-WP-0057-sign-in-diagnosis-caller-proof.md Record approved capabilities-self apply and attended caller proofs 2026-10-15 19:23:28 +02:00
RPF-WP-0058-reuse-private-source-reader.md Close hosted seven-source reader establishment 2026-10-15 05:42:23 +02:00
RPF-WP-0059-hourly-cadence-receiver-custody.md Record native receiver custody and prepare actual Approval lifecycle readback 2026-10-15 21:40:48 +02:00
RPF-WP-0060-browser-case-platform-bindings.md Bind mint broker validation to exact reviewed sources and track successor obligations 2026-10-17 22:55:51 +02:00
RPF-WP-0061-self-service-ccr-intake.md CCR-2026-0051: binding confirmed on native evidence, status applied; RPF-WP-0061 follow-up D 2026-10-18 12:58:39 +02:00
RPF-WP-0062-custodian-agent-observer-identity.md RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00

README.md

Current platform work

Reviewed October 13, 2026 against source workplans and the live inbox. Source files remain authoritative; the generated brief contains historical aliases. Completed plans retain their IDs and managed UUIDs, including archived plans.

Workplan Open tasks Next work or dependency
RPF-WP-0015 (active) T02, T03 Recovery windows, sender/abort owner and snapshot/quorum/access evidence
RPF-WP-0027 (blocked) T03, T06 Resolver and custody owner contracts
RPF-WP-0035 (blocked) T02, T03, T07, T08, T10, T12 Execution integration and owner acceptance; verified-source compiler correction tested October 13
RPF-WP-0036 (blocked) T03, T04, T06 Bounded scheduler, telemetry receiving contract and ownership returns
RPF-WP-0038 (blocked) T04 Durable caller, verified inventory and quota/retention; expiration/cutover hold persists
RPF-WP-0043 (blocked) T03, T04 Owner values/render diff, then root automation before adoption
RPF-WP-0044 (blocked) T04, T06, T07 Attended issue-core issuer login, ordered ESO adoption and root automation
RPF-WP-0048 (blocked) T02 Activity-core promotion evidence
RPF-WP-0053 (proposed) T01, T02, T03, T04, T05 Paired archive execution/custody, retrieval/recovery and monitoring admission
RPF-WP-0055 (backlog) T01 Unpromoted rotation residual; do not implement without demand/risk promotion
RPF-WP-0056 (blocked) T03, T06 Pilot/setup implemented; Custodian coordination requested for identity, transport and real human/agent proof

October 13 review corrected WP-0038-T04's stale todo state to the documented wait. RPF-IN-0012 remains an open independent execution/wrapped-delivery review; the compiler fix does not close it. Playwright publication is resolved; its new Platform workplan records the user-requested group and actual activation evidence.

Routine synchronization uses the exact-commit Repo Manager receipt described in AGENTS.md. Legacy alias repair remains the scoped WP-0036-T06 dependency.