coulomb/rapp-canned-prompts
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RCP-WP-0002 finished: publisher identity done, verified on a verdict that states its basis

Browse source 
uptime 36m > lease TTL 30m, 21 samples, zero not-ready, zero query failures,
zero kubelet readiness 503s, no restarts. The verdict now names the uptime it
checked, so the claim can be audited rather than taken.

T05 done upstream in canned-prompts 0.2.0 / migration 0003. DR-3 had already
resolved the identity question as app-local accounts with OIDC demand-gated;
research found that rather than my judgement supplying it.

Left open deliberately: the NetworkPolicy ingress rule still admits any
namespace. Publisher identity now gates writes so it is no longer the only
control, and it should narrow once the legitimate callers are known — recorded
rather than tightened on a guess.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Bjefh8NUiEiahN4JLwoSKM

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 388925@bnt-lap001
Assistant-Session: 3507023f-e0fd-4a1e-9d90-a0d4217d1502
This commit is contained in:
tegwick 2026-09-08 11:11:55 +02:00
parent bdbef58259
commit 40ac59271a
3 changed files with 58 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

25
docs/evidence/RCP-WP-0002-T05-lease-rotation-2026-09-08.log
View file

@ -1,2 +1,27 @@
started 2026-09-08T10:48:16+02:00 — 22m watch (runtime lease TTL 30m)
2026-09-08T10:48:17+02:00 ready=1/1
2026-09-08T10:49:23+02:00 ready=1/1
2026-09-08T10:50:26+02:00 ready=1/1
2026-09-08T10:51:32+02:00 ready=1/1
2026-09-08T10:52:38+02:00 ready=1/1
2026-09-08T10:53:44+02:00 ready=1/1
2026-09-08T10:54:50+02:00 ready=1/1
2026-09-08T10:55:56+02:00 ready=1/1
2026-09-08T10:57:02+02:00 ready=1/1
2026-09-08T10:58:08+02:00 ready=1/1
2026-09-08T10:59:11+02:00 ready=1/1
2026-09-08T11:00:18+02:00 ready=1/1
2026-09-08T11:01:24+02:00 ready=1/1
2026-09-08T11:02:30+02:00 ready=1/1
2026-09-08T11:03:36+02:00 ready=1/1
2026-09-08T11:04:42+02:00 ready=1/1
2026-09-08T11:05:48+02:00 ready=1/1
2026-09-08T11:06:51+02:00 ready=1/1
2026-09-08T11:07:57+02:00 ready=1/1
2026-09-08T11:09:03+02:00 ready=1/1
2026-09-08T11:10:09+02:00 ready=1/1
finished 2026-09-08T11:11:16+02:00
samples=21 not_ready=0 query_failed=0
kubelet readiness 503s in window: 0 (probe every 5s)
pod started 2026-09-08T08:34:32Z, uptime=36m, restarts=0
RESULT: survived — continuously ready, uptime 36m > lease TTL 30m