Prove abrupt recovery with live jobs in released and managed containers

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13590-a16f-7f60-be60-fd71627bc99d
This commit is contained in:
tegwick 2026-10-13 22:32:10 +02:00
parent 5b8e798419
commit 2cb2b654e0
25 changed files with 1954 additions and 4 deletions

View file

@ -48,7 +48,7 @@ artifacts expire; sanitized evidence under `docs/evidence/` is retained.
| --- | --- |
| WP-0002 | Finished: consumption contract, lifecycle and trial/pilot design |
| WP-0003 | Finished: tested image published at its exact digest and pulled on railiance01; ingress upload deadline fixed. |
| WP-0004 | T02 provider trial/pilot done. T01 awaits actual consumer identity/access and remaining recovery evidence. T03 has published A5 local-provider discovery; final managed availability update awaits T01. |
| WP-0004 | T02 provider trial/pilot done. T01 awaits actual consumer identity/access and cross-version rollback evidence. T03 has published A5 local-provider discovery; final managed availability update awaits T01. |
Platform admitted and deployed the reviewed package under RPF-WP-0056. The
`playwright-consumers` group is bound to the namespace consumer Role. Initial
@ -72,7 +72,10 @@ Platform's [consumer access instructions](https://forgejo.coulomb.social/coulomb
are prepared but conditional on identity-owner activation. The earlier
[admission review](docs/platform-admission.md) is retained as history; package
admission, deployment and the binding are no longer the outstanding decision.
Abrupt-interruption recovery and actual cross-version rollback remain unverified.
Actual abrupt-interruption recovery is now verified locally and on the managed
pilot: active/queued jobs become interrupted, partial artifacts disappear, completed
hashes survive, and a fresh trial passes. See [crash evidence](docs/evidence/2026-10-13-crash-recovery.md).
Actual cross-version rollback remains unverified; there is only one released version.
The repeatable [consumer API acceptance command](docs/operations.md#repeatable-consumer-api-acceptance)
now passes six local API checks and refuses release/location mismatches. It is
@ -88,5 +91,5 @@ sandbox is disabled; hostile pages and mutually untrusted tenants are unsupporte
Target failures identify the category but not detailed DNS/TLS/HTTP causes.
The OnCo pilot covers the home page, not all consumer routes or accessibility.
See the [timestamped intent assessment](history/2026-10-13-2211-intent-scope-assessment.md)
See the [timestamped intent assessment](history/2026-10-13-2231-intent-scope-assessment.md)
for the prioritized gaps and their acceptance evidence.