railiance-platform/docs
codex d217c806ca
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
Add the two publisher prefixes to the backup bucket policy.
The live policy keeps the original backup application. Each new key can abort only inside its own prefix.

Assistant: grok
Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54
2026-10-08 23:42:25 +02:00
..
adr Implement S3 service assurance and admission checks 2026-09-05 11:43:55 +02:00
credential-lane-designs Admit and install the backup pair writer. 2026-10-08 22:41:20 +02:00
drafts Accept the policy-nexus multi-source shape and draft the Application. 2026-10-05 01:37:43 +02:00
evidence Complete scoped Authelia SMTP admission and record rotation consumers 2026-10-06 20:38:28 +02:00
object-storage Add the two publisher prefixes to the backup bucket policy. 2026-10-08 23:42:25 +02:00
provisioning-windows/2026-10-04-1000 Silence applier-apply under --quiet and drop the retired bao callback default 2026-10-07 09:16:58 +02:00
activity-core-release-admission.md Record Core authorization boundary and pending GitOps tool projection 2026-09-27 16:01:33 +02:00
apps-pg.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
argocd-coulombcore-retirement.md Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
argocd-gitops.md RPF-WP-0044: T01 done; exact T02/T03 commands pinned to c3ebd6d. 2026-09-21 19:05:56 +02:00
attended-provisioning-window.md Record founder batched attended custody choice 2026-10-04 03:00:33 +02:00
audit-core-database-lease-approval.example.json Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
audit-core-database-lease-recovery.md Correct WP-0024 lease selection contract 2026-08-22 14:46:12 +02:00
audit-core-whitehat-e2-credential-projection.md Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
backup-credential-recovery.md Record verified Forgejo Scaleway backup and recovery 2026-09-06 01:03:02 +02:00
backup-provider-coverage.md Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
backup-storage-tiers.md Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
catalog-lane-scaffold.md Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
cnpg-option-a-backup.md Include user-engine in offsite CNPG backups 2026-07-30 00:05:58 +02:00
coding-agent-openbao-identity.md Finish coding-agent high-risk boundary coverage 2026-08-22 10:03:54 +02:00
consumption-mode-enforcement.md Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
credential-broker.md Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00
credential-change-approval.md Cancel withdrawn approval operator reader without inventing auth 2026-09-10 08:10:33 +02:00
credential-lane-lifecycle-runbook.md Update Gitea prose to Forgejo; place forge; record ArgoCD as an open decision 2026-08-11 22:41:30 +02:00
custody-projection-contract.example.json Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
direct-apply-gap-inventory.md Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
ephemeral-custody-lifecycle.md Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
eso-auth-recovery.md Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
forgejo-backup.md Verify Scaleway primary recovery and distinguish secondary backup coverage 2026-09-06 00:34:43 +02:00
forgejo-package-prune.md Protect digest-pinned packages and refuse partial-inventory pruning 2026-09-27 16:00:51 +02:00
inbound-library-imap-custody.md Prepare password-free inbound-library IMAP entry for attended custody 2026-10-05 11:14:54 +02:00
keycape-exposure-rotation-approval.example.json Record final KeyCape recovery receipt 2026-08-23 14:51:50 +02:00
keycape-factor-recovery.md Record completed P04 recovery rollout and acceptance 2026-09-13 21:19:13 +02:00
keycape-live-secret-exposure-recovery.md Record final KeyCape recovery receipt 2026-08-23 14:51:50 +02:00
metered-requester-extension.md Record approved metered requester extension and six native creates 2026-09-27 21:08:43 +02:00
net-kingdom-credential-custody-contract.md Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
openbao-approved-automation-delegation.md Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
openbao-emergency-drill-evidence.example.json Add OpenBao emergency drill evidence validator 2026-06-02 00:08:17 +02:00
openbao-open-questions-session.md Run the custody session through a Make target, and give the runner a shebang 2026-09-10 08:15:41 +02:00
openbao-public-listener-transition.md Pin attended OpenBao login to the operator tunnel. 2026-09-15 20:27:35 +02:00
openbao-reboot-snapshot-receipt.example.json Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
openbao-restore-drill-evidence.example.json Add OpenBao restore evidence validator 2026-06-01 23:57:00 +02:00
openbao.md Prune retired bao.coulomb.social callbacks from platform-admin; declare OIDC mount config 2026-09-24 01:14:43 +02:00
placement-policy.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
platform-ownership-handoffs.md Review blocked platform obligations and archive completed ESO recovery 2026-09-05 21:16:53 +02:00
platform-tenant-essentials-review.md Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00
postgresql-ha.md Finish architecture-cleanup RAILIANCE-WP-0016 T05 2026-08-15 14:43:44 +02:00
put-backup-object-storage.md docs: how to add APPLICATION_ID for the backup bucket policy 2026-08-14 19:52:08 +02:00
railiance01-coordinated-reboot.md Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
rapp-credential-lane-binding.md retarget: CCR-2026-0012 is the general backup object-store lane 2026-08-14 19:19:56 +02:00
rapp-openbao-boundary.md Document rapp-openbao compatibility handoff 2026-07-26 10:39:40 +02:00
rapp-openbao-compatibility-handoff.md Document rapp-openbao compatibility handoff 2026-07-26 10:39:40 +02:00
rapp-platform-service-pattern.md Close RAILIANCE-WP-0015-T06 rapp credential-lane binding 2026-08-14 00:47:28 +02:00
rapp-postgres-boundary.md Broker audit-core dynamic database credentials 2026-08-10 19:36:30 +02:00
reuse-surface-runtime-secrets-rotation-runbook.md Add reuse-surface secrets rotation runbook (RAILIANCE-WP-0011-T04) 2026-07-08 00:01:21 +02:00
s3-consumer-interfaces.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
service-assurance.md Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
telemetry-smtp-custody.md Complete scoped Authelia SMTP admission and record rotation consumers 2026-10-06 20:38:28 +02:00
tenancy-posture.md Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00
WH-ENG-20260822-AUDIT-E2-03-custody-contract.json Approve audit E2 third custody contract 2026-08-22 23:30:07 +02:00
whynot-design-npm-publish-handoff.md Update Gitea prose to Forgejo; place forge; record ArgoCD as an open decision 2026-08-11 22:41:30 +02:00
workload-kv-access-lanes.md Settle the npm lane field, and record an ungoverned duplicate 2026-09-10 09:03:22 +02:00
wp0024-owner-review-interface.md Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00