From 8831a05aeba5ce588f3b395ade676dde2a151c5d Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 13 Oct 2026 20:26:29 +0200 Subject: [PATCH] Document publication verification and close reconciled work records Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13590-a16f-7f60-be60-fd71627bc99d --- WORK-RECORDS.md | 4 ++-- docs/evidence/2026-10-13-publication.md | 5 +++++ docs/operations.md | 6 ++++++ 3 files changed, 13 insertions(+), 2 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 18fa725..81b7393 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -10,7 +10,7 @@ | --- | --- | --- | --- | --- | | workplan | RAPP-PLAYWRIGHT-WP-0001 | finished | — | workplans/RAPP-PLAYWRIGHT-WP-0001-statehub-bootstrap.md | | workplan | RAPP-PLAYWRIGHT-WP-0002 | finished | — | workplans/RAPP-PLAYWRIGHT-WP-0002-consumer-contract.md | -| workplan | RAPP-PLAYWRIGHT-WP-0003 | active | — | workplans/RAPP-PLAYWRIGHT-WP-0003-service-package.md | +| workplan | RAPP-PLAYWRIGHT-WP-0003 | finished | — | workplans/RAPP-PLAYWRIGHT-WP-0003-service-package.md | | workplan | RAPP-PLAYWRIGHT-WP-0004 | blocked | — | workplans/RAPP-PLAYWRIGHT-WP-0004-consumer-verification.md | | task | RAPP-PLAYWRIGHT-WP-0001-T01 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0001-statehub-bootstrap.md | | task | RAPP-PLAYWRIGHT-WP-0001-T02 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0001-statehub-bootstrap.md | @@ -18,7 +18,7 @@ | task | RAPP-PLAYWRIGHT-WP-0002-T01 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0002-consumer-contract.md | | task | RAPP-PLAYWRIGHT-WP-0002-T02 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0002-consumer-contract.md | | task | RAPP-PLAYWRIGHT-WP-0002-T03 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0002-consumer-contract.md | -| task | RAPP-PLAYWRIGHT-WP-0003-T01 | wait | — | workplans/RAPP-PLAYWRIGHT-WP-0003-service-package.md | +| task | RAPP-PLAYWRIGHT-WP-0003-T01 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0003-service-package.md | | task | RAPP-PLAYWRIGHT-WP-0003-T02 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0003-service-package.md | | task | RAPP-PLAYWRIGHT-WP-0003-T03 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0003-service-package.md | | task | RAPP-PLAYWRIGHT-WP-0003-T04 | done | — | workplans/RAPP-PLAYWRIGHT-WP-0003-service-package.md | diff --git a/docs/evidence/2026-10-13-publication.md b/docs/evidence/2026-10-13-publication.md index 8a286a4..3d3e3f3 100644 --- a/docs/evidence/2026-10-13-publication.md +++ b/docs/evidence/2026-10-13-publication.md @@ -61,3 +61,8 @@ WP-0003-T01 is now done and WP-0003 is finished. Managed workload admission, consumer binding, deployment and live browser recovery/rollback remain in WP-0004-T01. The publication fix does not claim those outcomes or close discovery and consumer-acceptance work. + +The State Hub audit reconciled WP-0003 and its publication task to finished/done +with zero failures. The ingress owner's RCLUSTER-WP-0016 was also reconciled to +finished/done. Its deep audit still reports pre-existing archived task identifier +warnings; those records are outside this publication fix. diff --git a/docs/operations.md b/docs/operations.md index cc8c254..4654e50 100644 --- a/docs/operations.md +++ b/docs/operations.md @@ -76,3 +76,9 @@ Release [0.1.0](../releases/0.1.0.json) is published and pull-verified. Use its immutable reference for rendering; registry publication is no longer blocked. The cluster-owned ingress now allows a bounded 600-second HTTPS request body; see [cause, rollout and verification](evidence/2026-10-13-publication.md). + +For subsequent publications, fetch the remote index with `docker buildx +imagetools inspect --raw ` and hash the exact returned bytes. +Require the expected digest, then pull that immutable reference with +`sudo k3s crictl pull ` on railiance01 and verify its recorded +repo digest. A successful upload alone does not establish node pull access.