coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/scripts
History
codex c20bf329fd
All checks were successful
CCR intake gate / gate (push) Successful in 1m11s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
CCR-2026-0058: drop required_parameters from the write policy; back to proposed for re-approval 
OpenBao 2.5.4 applies required_parameters to reads, so the executor could not
read the version it must name for CAS (net-kingdom NK-WP-0056-T12 synthetic
pilot). cas_required on the key still refuses writes without options.cas;
metadata, delete, sibling and new paths stay denied (tested). Renderer, test
and policy file corrected.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 994874@bnt-lap001
Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87
2026-10-31 16:24:47 +01:00
..
native_factory_probe Exercise fsGroup startup through the corrected producer helper 2026-09-11 12:41:50 +02:00
openbao-isolated-restore RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter 2026-10-28 00:02:10 +01:00
operator-browser Restore contained attended browser launch on WSL without xdg-utils 2026-09-06 00:44:08 +02:00
activate_forgejo_primary_backup.py Define scoped Forgejo native backup on the Scaleway primary 2026-09-06 00:48:25 +02:00
activity_promotion_readiness.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
agent_high_risk_boundary.py Finish coding-agent high-risk boundary coverage 2026-08-22 10:03:54 +02:00
application_archive_retention_plan.py Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
application_backup_credentials.py Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
application_backup_pair_custody.py Admit and install the backup pair writer. 2026-10-08 22:41:20 +02:00
application_recovery_access.py Establish Coulomb scoped recovery API custody and native boundaries 2026-10-29 22:15:27 +01:00
application_recovery_drill.py Retain verified recovery proof independently and bind the protected point 2026-10-29 22:49:33 +01:00
application_recovery_identities.py Prepare scoped recovery resources and bounded construction renewal 2026-10-29 21:52:55 +01:00
application_recovery_kit.py Retain verified recovery proof independently and bind the protected point 2026-10-29 22:49:33 +01:00
application_recovery_mirror.py Add immutable Coulomb recovery mirroring through scoped APIs 2026-10-29 22:25:41 +01:00
application_recovery_resources.py Establish Coulomb scoped recovery API custody and native boundaries 2026-10-29 22:15:27 +01:00
apply-backup-publisher-bucket-policy.py Add the two publisher prefixes to the backup bucket policy. 2026-10-08 23:42:25 +02:00
apply-ccr0019-binding.py Bind secrets-engine approval reader to confirmed operator group 2026-09-14 01:30:23 +02:00
apply-reuse-surface-reader-custody.py Prepare reviewed attended reuse-reader custody execution 2026-10-15 01:57:25 +02:00
approval-client-delivery-check.py Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
approval-client-reader-preflight.py Verify scoped approval client delivery through attended reader session 2026-09-14 01:46:45 +02:00
argocd_adoption_proof.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
argocd_child_pin_drift.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
argocd_public_transport.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
attended_service_delivery.py CCR-2026-0055: state the gate precisely (attended pi-admin, MFA login proves the write) 2026-10-31 11:07:05 +01:00
audit-core-database-lease-recovery.py RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note 2026-10-15 00:24:15 +02:00
audit-core-recovery-preflight.py RPF-WP-0015-T03: attended OpenBao reboot snapshot lane with mandatory off-OpenBao escrow 2026-10-14 19:49:02 +02:00
audit-core-whitehat-e2-credentials-02.py Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
audit-core-whitehat-e2-credentials.py Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
audit_core_synthetic_sender_lane.py RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane 2026-10-14 20:30:11 +02:00
authelia_smtp_delivery.py Prepare attended scoped platform mailbox admission for Authelia 2026-10-06 19:30:59 +02:00
backup_retention_plan.py Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
bootstrap_coulomb_recovery_session.mjs Prepare bounded Coulomb API identity bootstrap with private restartable custody 2026-10-28 12:43:05 +01:00
broker_grant_lane.py RPF-WP-0054-T05: fix issuer binding after the first probe 2026-10-10 11:12:19 +02:00
cadence_observer_readback.py Record native receiver custody and prepare actual Approval lifecycle readback 2026-10-15 21:40:48 +02:00
cadence_receiver_custody.py Prepare exact Qonto audit custody and hourly receiver admission packet 2026-10-15 21:26:11 +02:00
capture-apps-pg-evidence.py Finish RAILIANCE-WP-0016 apps-pg resource evidence 2026-08-14 02:05:25 +02:00
capture-reef-deployables.py Close RAILIANCE-WP-0015-T02 platform rapp schema convergence 2026-08-14 00:39:06 +02:00
capture_forgejo_archive.py Bind essentials recovery to explicit manifest and verified offsite provenance 2026-09-06 09:25:26 +02:00
capture_service_observation.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
catalog_lane_scaffold.py Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
ccr_intake.py RPF-WP-0061: render-policy and plan_ref for ops-mason submissions; approvals only via sync-decision 2026-10-18 12:53:19 +02:00
cleanup_nextcloud_recovery_fixture.py Bound rejected backup fixture cleanup to successful replacement recovery 2026-09-06 01:05:27 +02:00
consumption_mode.py Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
create-metered-approval-requests.py Prepare exact metered requester extension with scope refusal tests 2026-09-27 20:34:52 +02:00
create-metered-approval-requests.sh Record approved metered requester extension and six native creates 2026-09-27 21:08:43 +02:00
create-t03-approval-requests.py Repoint live flex-auth repository path to access-engine (FLEX-WP-0020) 2026-09-30 18:52:08 +02:00
credential-change.py RPF-WP-0069: answer NK-WP-0056-T02; add workload-kv-write-next-version; CCR-2026-0058 (proposed) 2026-10-31 14:21:35 +01:00
credential-grants-validate.py Close RAILIANCE-WP-0015-T06 rapp credential-lane binding 2026-08-14 00:47:28 +02:00
credential.py RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 2026-10-09 20:12:44 +02:00
custody-projection.py Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
custody_contract.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
decrypt_primary_forgejo_archive.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
deploy_verified_backup_bundle.py Deliver validated backup capture to worker via immutable runtime bundle 2026-09-05 22:32:30 +02:00
email_connect_smtp_delivery.py Prepare guarded email-connect platform SMTP reader admission 2026-10-31 11:54:53 +01:00
email_connect_smtp_foundation.py Prepare supervised email-connect SMTP foundation and projection 2026-10-31 12:00:57 +01:00
eso_adoption_readiness.py Gate ESO adoption on verified predecessors and receive release custody handoff 2026-10-11 23:25:20 +02:00
eso_attended_checks.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
execute_nextcloud_retention.py Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
factory_audit_custody.py Record live receiver gate and isolate readiness from attestation jobs 2026-09-11 07:26:16 +02:00
factory_audit_delivery.py feat: deliver approved factory audit sender custody 2026-09-11 09:38:27 +02:00
flex_auth_signer_custody.py Add attended signer adapter with phase-aware read-only recovery 2026-10-16 18:44:07 +02:00
flex_auth_signer_native.py RPF-WP-0035-T14: flex-auth signer custody founder gate, runbook and review dispositions 2026-10-21 01:24:45 +02:00
fluid_telegram_custody_move.py RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 2026-10-09 12:10:21 +02:00
forgejo-admin-pat-provision.sh Apply CCR-2026-0006 Forgejo admin PAT lane metadata 2026-07-12 16:07:32 +02:00
forgejo_essentials_profile.py Bind essentials recovery to explicit manifest and verified offsite provenance 2026-09-06 09:25:26 +02:00
forgejo_package_prune.py Protect digest-pinned packages and refuse partial-inventory pruning 2026-09-27 16:00:51 +02:00
inbound_library_imap_entry.py Prepare password-free inbound-library IMAP entry for attended custody 2026-10-05 11:14:54 +02:00
informed_decision_requester_metadata.py Record native ESO result and prepare scoped self-token amendment 2026-10-04 23:21:55 +02:00
install-backup-pair-writer.sh Admit and install the backup pair writer. 2026-10-08 22:41:20 +02:00
install-backup-primary-readers.sh Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
issuer_binding_lane.py RPF-WP-0054-T05: fix issuer binding after the first probe 2026-10-10 11:12:19 +02:00
keycape-approval-custody-preflight.py docs(custody): record attended KeyCape first-provision authority proof 2026-09-08 22:40:04 +02:00
keycape_approval_custody.py feat: verify live KeyCape custody and preserve versions on resume 2026-09-09 02:18:12 +02:00
keycape_client_secret_generate.py Bind mint broker validation to exact reviewed sources and track successor obligations 2026-10-17 22:55:51 +02:00
keycape_factor_acceptance.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_activate.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_bootstrap.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_delivery_probe.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_eso_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_provider.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_recovery.py Implement audited lost-factor recovery and track remaining P04 acceptance 2026-09-13 17:28:45 +02:00
keycape_factor_renew.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_renewal_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_issuer_eso.py feat: declare proposed fixed KeyCape issuer ESO source contract 2026-10-17 20:36:52 +02:00
keycape_secrets_engine_openbao_custody.py Revise KeyCape secrets-engine-openbao custody: OpenBao-only, operator reader CCR-2026-0034 (source only) 2026-10-06 14:26:42 +02:00
kube_route.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
kv_duplicate_retire.py kv_duplicate_retire: block only on data-path grants 2026-10-09 12:27:43 +02:00
migrate_nextcloud_backup_account.py fix(backup): send required public DAV upload marker 2026-10-03 21:20:21 +02:00
native_factory_acceptance.py Exercise fsGroup startup through the corrected producer helper 2026-09-11 12:41:50 +02:00
openbao-apply-credential-change-appliers.py Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
openbao-apply-external-secrets-issue-core.sh Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
openbao-apply-initial-config.sh Add ESO OpenBao GitOps add-ons 2026-06-25 20:08:36 +02:00
openbao-apply-operator-loopback-callback.sh Advance blocked assurance and operator callback work 2026-09-06 14:16:49 +02:00
openbao-apply-policy-nexus-source-ccr.sh Add contained Policy Nexus CCR apply wrapper 2026-08-31 23:12:16 +02:00
openbao-apply-ssh-engine.sh openbao-apply-ssh-engine: role writer passed 'bao' twice (exit 127) 2026-10-20 23:21:40 +02:00
openbao-apply-token-grants.py Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
openbao-apply-workload-kv-lanes.sh Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00
openbao-attended-exec.py Add sitting-requester create-only token-exchange proof. 2026-09-15 20:38:47 +02:00
openbao-bootstrap-core-hub-source.sh CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft 2026-10-03 08:27:56 +02:00
openbao-bootstrap-policy-nexus-source.sh Add attended Policy Nexus source bootstrap 2026-08-31 23:24:05 +02:00
openbao-eso-db-token-periodic-attended.sh RPF-WP-0046: periodic ESO database tokens and a daily renewer 2026-09-23 19:53:12 +02:00
openbao-platform-admin-aal2.sh RPF-WP-0065-T04: rebuild founder runbook for the silent warden lane 2026-10-27 22:46:31 +01:00
openbao-platform-admin-callback-prune.sh Add attended prune of retired bao.coulomb.social callbacks from platform-admin 2026-09-24 00:49:39 +02:00
openbao-platform-admin-check.sh Declare live platform-admin role and policies; add attended admin check 2026-09-23 19:27:25 +02:00
openbao-policy-sync.sh CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) 2026-09-23 20:00:40 +02:00
openbao-public-listener-transition.sh feat(RAILIANCE-WP-0027): prepare operator-only OpenBao access 2026-08-23 12:50:23 +02:00
openbao-reboot-snapshot.py RPF-WP-0015-T03: snapshot lane accepts the escrow key in age identity-file format 2026-10-14 20:04:25 +02:00
openbao-tenant-engine-audit-core-sender-eso-attended.sh RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test 2026-10-03 00:16:49 +02:00
openbao-tune-auth-listing.sh Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
openbao-ui-overlay-apply.sh feat(RAILIANCE-WP-0027): prepare operator-only OpenBao access 2026-08-23 12:50:23 +02:00
openbao-validate-emergency-drill-evidence.sh Reject placeholder OpenBao drill evidence 2026-06-02 02:02:09 +02:00
openbao-validate-restore-evidence.sh Reject placeholder OpenBao drill evidence 2026-06-02 02:02:09 +02:00
openbao-verify-authenticated.sh feat(openbao): enable bao.coulomb.social ingress and Traefik middlewares 2026-06-18 01:23:02 +02:00
openbao-verify-login-overlay.sh RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06) 2026-10-14 23:45:00 +02:00
openbao-verify-ssh-engine.sh feat(openbao): add SSH engine automation for ops-warden signing 2026-06-18 01:06:43 +02:00
openbao-verify-token-grants.py Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
openbao-verify.sh Configure OpenBao file audit declaratively 2026-06-01 22:12:23 +02:00
openbao_open_questions_session.py Run the custody session through a Make target, and give the runner a shebang 2026-09-10 08:15:41 +02:00
openbao_operator_loopback_callback.py Preserve writable OIDC fields on the loopback callback update. 2026-09-15 02:23:22 +02:00
openbao_platform_admin_aal2.py RPF-WP-0065-T04: rebuild founder runbook for the silent warden lane 2026-10-27 22:46:31 +01:00
openbao_platform_admin_callback_prune.py Add attended prune of retired bao.coulomb.social callbacks from platform-admin 2026-09-24 00:49:39 +02:00
openbao_platform_admin_check.py Declare live platform-admin role and policies; add attended admin check 2026-09-23 19:27:25 +02:00
openbao_policy_sync.py CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) 2026-09-23 20:00:40 +02:00
openbao_revoke_initial_root_token.py NK-WP-0055-T16: guarded revoke of the held initial root token for production entry 2026-10-28 00:54:59 +01:00
operator_matrix_lane.py RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 2026-10-09 12:10:21 +02:00
operators_entry_retire.py ADHOC-2026-10-10: retire the deprecated operators/nextcloud entry 2026-10-10 15:32:02 +02:00
playwright_consumer.py Prepare Playwright consumer credentials and identity activation handoff 2026-10-13 21:21:58 +02:00
prepare-backup-pair-slots.py Prepare empty OpenBao slots for the two backup publisher pairs. 2026-10-08 23:13:17 +02:00
prepare-glas-anthropic.py feat: verify Anthropic custody through metadata only 2026-09-05 21:15:14 +02:00
primary_application_archive.py Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
prove-backup-publisher-prefixes.py Add the two publisher prefixes to the backup bucket policy. 2026-10-08 23:42:25 +02:00
prove-sitting-requester-exchange.py Classify sitting-requester exchange failures and retry failed receipts. 2026-09-15 20:51:28 +02:00
prove-sitting-requester-exchange.sh Add sitting-requester create-only token-exchange proof. 2026-09-15 20:38:47 +02:00
prove_secret_annotation_guard.py fix(security): hold annotation enforcement until ESO metadata is explicit 2026-09-28 15:08:00 +02:00
provision-core-hub-forgejo-source.py CCR-2026-0031: choose the private probe repo with the admin token 2026-10-03 10:07:54 +02:00
provision-policy-nexus-forgejo-source.py Activate Policy Nexus source credential lane 2026-09-01 01:35:48 +02:00
provision-reuse-surface-forgejo-source.py Prepare restricted seven-source reuse reader and bounded recovery 2026-10-15 01:25:46 +02:00
provision-sitting-requester.py Approve sitting-requester CCRs and add the attended provisioner. 2026-09-15 20:08:02 +02:00
provision-sitting-requester.sh Approve sitting-requester CCRs and add the attended provisioner. 2026-09-15 20:08:02 +02:00
provision-t03-requester.py Provision scoped T03 requester custody and native requests 2026-09-14 02:47:32 +02:00
provision_argocd_issue_core_repository.py Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
provisioning_window.py Prepare offline attended provisioning checklists and route remaining custody gates 2026-10-04 00:27:00 +02:00
railiance_clock_custody.py Implement attended Railiance Clock host key delivery 2026-09-15 23:00:20 +02:00
recovery_evidence.py Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
refresh_live_images.py Add failure-safe cluster image capture hook 2026-09-05 10:04:38 +02:00
remote_exec.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
render_backup_credential_contract.py Commit the prepared backup reader for both archive pairs. 2026-10-08 22:12:34 +02:00
repair_eso_kubernetes_auth.py Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
restore_forgejo_offsite_locally.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
restore_telemetry_essentials.py Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
revoke-reuse-surface-forgejo-source.py Prepare restricted seven-source reuse reader and bounded recovery 2026-10-15 01:25:46 +02:00
root-custody-finish-attended.sh Diagnose attended custody finish failures with safe staged receipts 2026-10-03 21:08:56 +02:00
root-grant-attended.sh Implement attended root custody admission and crash-safe publisher 2026-10-03 19:44:22 +02:00
root_custody_finish.py feat(backup): repair reviewed upload share after history recovery proof 2026-10-03 21:50:19 +02:00
root_custody_finish_entry.py Diagnose attended custody finish failures with safe staged receipts 2026-10-03 21:08:56 +02:00
root_custody_restore_probe.py Prove isolated custody recovery and prepare governed offsite finish 2026-10-03 20:47:48 +02:00
root_grant_attended.py Implement attended root custody admission and crash-safe publisher 2026-10-03 19:44:22 +02:00
root_grant_publish.py Prepare conditional platform-root custody document producer 2026-10-03 18:51:26 +02:00
rpf_wp_0044_t06_attended.sh RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
scaleway_forgejo_archive.py Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
secret_annotation_maintenance.py fix(security): hold annotation enforcement until ESO metadata is explicit 2026-09-28 15:08:00 +02:00
service_assurance.py Implement S3 service assurance and admission checks 2026-09-05 11:43:55 +02:00
service_identity_metadata_export.py RPF-WP-0067: owner answers for NK-WP-0040-T02 and value-safe identity metadata exporter for NK-WP-0054-T04 2026-10-28 09:52:15 +01:00
service_jwt_lane.py RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao 2026-10-09 00:31:47 +02:00
state_hub_preflight_lane.py Allow bounded ESO token self-validation and cleanup 2026-09-05 16:47:26 +02:00
state_hub_signing_acceptance.py Require signature rejection in predecessor acceptance 2026-09-05 17:58:01 +02:00
survey-backup-iam.py Admit and install the backup pair writer. 2026-10-08 22:41:20 +02:00
survey-backup-pair-metadata.sh Admit and install the backup pair writer. 2026-10-08 22:41:20 +02:00
t02-attended-window.py RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane 2026-10-14 20:30:11 +02:00
t03-attended-delivery.py Point the OpenRouter cycle at memo version 3. 2026-09-27 15:33:09 +02:00
t03-native-execution.py Point the OpenRouter cycle at memo version 3. 2026-09-27 15:33:09 +02:00
t03_request_time.py Renew T03 requests using Railiance time and bind native execution 2026-09-16 01:08:56 +02:00
task_execution_cleanup.py fix(execution): retain scoped cleanup after uncertain outcomes 2026-10-16 01:51:53 +02:00
task_execution_grant.py feat(execution): bind immutable task grants before native effects 2026-10-16 07:51:42 +02:00
task_execution_journal.py Recover exact task cleanup after executor process loss 2026-10-16 16:43:20 +02:00
task_execution_mediator.py Bound task execution by absolute call and credential deadlines 2026-10-16 17:15:00 +02:00
task_execution_native_fixture.py Bound task execution by absolute call and credential deadlines 2026-10-16 17:15:00 +02:00
task_execution_plan.py feat(execution): bind immutable task grants before native effects 2026-10-16 07:51:42 +02:00
task_execution_recovery.py Recover exact task cleanup after executor process loss 2026-10-16 16:43:20 +02:00
telemetry_grafana_access.py Establish attended telemetry Grafana custody and record private activation 2026-09-06 22:36:09 +02:00
telemetry_grafana_custody.py Establish attended telemetry Grafana custody and record private activation 2026-09-06 22:36:09 +02:00
telemetry_primary_archive.py Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
telemetry_smtp_delivery.py Add attended SMTP verification and exact reader admission 2026-09-28 11:21:57 +02:00
telemetry_smtp_entry.py Prepare password-free telemetry SMTP entry for attended custody 2026-09-28 11:11:34 +02:00
tenant_engine_audit_core_sender_seed.py CUST-WP-0075: tenant-engine sender seed helper; re-qualify RPF-WP-0035-T02/T08 2026-10-03 08:28:32 +02:00
vendor_custodian_allocation_review.py CUST-WP-0071-T05: prepare weekly allocation assessment CronJob (suspended, unregistered) 2026-10-21 08:15:18 +02:00
verify-backup-pair-versions.py Record that both backup publisher slots are at version 2. 2026-10-08 23:19:21 +02:00
verify_coding_agent_approle.py Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
verify_informed_decision_requester.py Match native proof HTTPS egress to the service ingress peer 2026-10-04 23:44:47 +02:00
verify_nextcloud_offsite_restore.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
verify_playwright_access.py Activate Playwright pilot with scoped consumer group and native evidence 2026-10-13 20:55:31 +02:00
verify_scaleway_primary_restore.py Extend isolated Scaleway recovery checks to Forgejo database metadata 2026-09-06 00:51:55 +02:00
workload_adoption_proof.py RPF-WP-0044-T06: founder cluster route and attended ESO adoption script 2026-10-21 01:23:16 +02:00
workload_kv_write_next_version.py CCR-2026-0058: drop required_parameters from the write policy; back to proposed for re-approval 2026-10-31 16:24:47 +01:00
wp0024-owner-review.py RPF-WP-0015: verify installed ops-warden against accepted published revision; list drill PVC in review check 2026-10-14 12:53:48 +02:00
wp0024-t02-driver-candidate.py Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00
wp0025-broker-readiness.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00