coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/workplans
History
codex c921aa0aed
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 
Silent generate-in-custody: verifies the SecurityCase file (digest, type,
materialized, confidential, client_id) per ops-warden 23985370, mints the 5m
create-only grant token from the caller's session, proves absence, writes once
with CAS 0, verifies by metadata only and revokes the token. Agents, root and
callers without the issuer policy are refused. Secret length awaits key-cape.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 469992@bnt-lap001
Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
2026-10-09 20:12:44 +02:00
..
archived Review blocked platform obligations and archive completed ESO recovery 2026-09-05 21:16:53 +02:00
.gitkeep chore(init): scaffold railiance-platform (S3 Platform Services) 2026-03-10 00:36:06 +01:00
README.md Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
RPF-WP-0015-audit-core-custody-and-recovery-coordination.md CUST-WP-0075-T03: route human gates to hub decisions 2026-10-03 03:14:01 +02:00
RPF-WP-0025-openbao-operator-only-access.md Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
RPF-WP-0027-keycape-live-secret-exposure-recovery.md CUST-WP-0075-T03: route human gates to hub decisions 2026-10-03 03:14:01 +02:00
RPF-WP-0029-backup-credential-default-removal.md Close RPF-WP-0029-T02 on operator-attested predecessor unshare. 2026-09-15 02:48:15 +02:00
RPF-WP-0035-credential-lane-implementation.md RPF-WP-0035-T03: record founder apply, custody move and duplicate retirement 2026-10-09 12:31:13 +02:00
RPF-WP-0036-platform-service-assurance.md CUST-WP-0075 inbox sweep: act on activity-core reply to RPF-WP-0036-T03 2026-10-03 03:33:54 +02:00
RPF-WP-0038-forgejo-scaleway-primary-coverage.md CUST-WP-0075-T03: route human gates to hub decisions 2026-10-03 03:14:01 +02:00
RPF-WP-0039-vergabe-demo-company-database.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
RPF-WP-0040-keycape-factor-credential-custody.md Close factor credential expiry and recovery acceptance for P05 2026-09-13 22:20:14 +02:00
RPF-WP-0041-state-hub-105m-not-provisioning.md Confirm no platform provisioning from the 105m remainder. 2026-09-14 10:34:27 +02:00
RPF-WP-0042-informed-decision-sitting-requester.md Close RPF-WP-0042 after sitting-requester exchange proof. 2026-09-15 20:57:50 +02:00
RPF-WP-0043-policy-nexus-argocd-onboarding.md Accept the policy-nexus multi-source shape and draft the Application. 2026-10-05 01:37:43 +02:00
RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md CUST-WP-0075-T03: route human gates to hub decisions 2026-10-03 03:14:01 +02:00
RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md RPF-WP-0046-T04: adopt eso-token-renewer Application (pinned b2ebe10); close RPF-WP-0045 2026-09-23 20:17:42 +02:00
RPF-WP-0046-eso-database-token-renewal.md RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished 2026-09-24 00:48:24 +02:00
RPF-WP-0047-bao-coulomb-social-notice-page.md RPF-WP-0047 done: bao.coulomb.social serves a trusted static notice 2026-09-24 00:57:34 +02:00
RPF-WP-0048-activity-core-gitops-adoption.md CUST-WP-0075-T03: route human gates to hub decisions 2026-10-03 03:14:01 +02:00
RPF-WP-0049-platform-root-custody-record-delivery.md docs(custody): reference owned backup runtime refresh task 2026-10-03 22:00:53 +02:00
RPF-WP-0050-attended-provisioning-preparation.md Implement issuer reader preparation and qualify blocked owner dependencies 2026-10-04 11:32:13 +02:00
RPF-WP-0051-informed-decision-requester-workload-delivery.md Accept requester workload delivery and retain separate rotation residual 2026-10-05 00:13:30 +02:00
RPF-WP-0052-authelia-platform-smtp-admission.md Complete scoped Authelia SMTP admission and record rotation consumers 2026-10-06 20:38:28 +02:00
RPF-WP-0053-coulomb-paired-backup-admission.md Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
RPF-WP-0054-keycape-client-secret-generate-lane.md RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 2026-10-09 20:12:44 +02:00

README.md

Current platform work

Reviewed September 27, 2026. Eight workplans remain blocked with 23 waiting tasks. No active, ready or proposed source workplan remains. Completed work retains its IDs and managed UUIDs, including plans under archived/.

Workplan Remaining tasks Next dependency
RPF-WP-0015 T02/T03 Fresh recovery windows, synthetic sender/abort owner and snapshot/quorum/access evidence
RPF-WP-0027 T03/T06 Complete historical resolver custody/routing contract; T05 closed from September 23 operator disposition and owner receipt
RPF-WP-0035 T02/T03/T06/T07/T08 Exact service registration/custody, human memo acceptance, reader/disablement returns, governed npm migration and formerly-valid audit-bearer revocation proof
RPF-WP-0036 T03/T04/T06 Current recovery/cadence/custody evidence, Q2 production delivery and owner/projection acceptance; local archive adapter implemented
RPF-WP-0038 T04 Durable scheduled caller, canonical verified inventory and quota/retention gates; September 15 cutover/expiration hold persists
RPF-WP-0043 T02/T03/T04 Cross-owner chart/values agreement, committed values and source access, zero-diff proof and adoption
RPF-WP-0044 T03–T08 Per-app promotion gates, issue-core credentials/ownership, target-revenue hook acceptance, ESO adoption/observation and readable old-controller inventory
RPF-WP-0048 T02 Healthy observation through September 28 at 16:06:22 Berlin plus bounded authenticated release broker/admission and rollback proof

Latest review and evidence. No new task or workplan was created. Existing completed credential reviews, delivery, retention projection and rotations are not reopened by these waits.

Source files are authoritative. The generated brief still contains retired aliases and stale statuses; do not recreate work from it. Routine synchronization uses the exact-commit Repo Manager receipt described in AGENTS.md. Legacy alias repair remains the scoped owner dependency in WP-0036-T06.