Reconcile reef bindings and evidence

bindings/rails.yaml

@@ -2,16 +2,18 @@ reef_id: reef-railiance
 hosted_rails:
   - rail_id: rail-kubernetes
     role: primary
-    readiness_state: declared
+    readiness_state: verified
     contract_version: 1.0.0
     evidence:
       - evidence/admission/rail-kubernetes-baseline.json
-    notes: First-wave default execution rail for the grouped Railiance home reef.
+      - evidence/verification/rail-runtime-2026-08-21.json
+    notes: First-wave default execution rail; live verification still records one Ready control-plane and etcd node.
   - rail_id: rail-knative
     role: derived
-    readiness_state: declared
+    readiness_state: verified
     contract_version: 1.0.0
     base_rail: rail-kubernetes
     evidence:
       - evidence/admission/rail-knative-baseline.json
-    notes: Declared second-wave rail; not installed or production-approved.
+      - evidence/verification/rail-runtime-2026-08-21.json
+    notes: Installed and verified for private operation; production approval remains blocked by the single-node failure domain.

bindings/rapps.yaml

@@ -1,13 +1,30 @@
 reef_id: reef-railiance
 bound_rapps:
+  - rapp_id: rapp-issue-core
+    rail_id: rail-kubernetes
+    package_readiness_state: verified
+    readiness_state: verified
+    evidence:
+      - ../rapp-issue-core/declarations/rapp.yaml
+      - ../rapp-issue-core/evidence/live/2026-08-19-railiance01.json
+  - rapp_id: rapp-openbao
+    rail_id: rail-kubernetes
+    package_readiness_state: verified
+    readiness_state: verified
+    evidence:
+      - ../rapp-openbao/declarations/rapp.yaml
+      - ../railiance-platform/docs/rapp-openbao-boundary.md
+      - ../railiance-platform/docs/openbao.md
   - rapp_id: rapp-qonto
     rail_id: rail-knative
+    package_readiness_state: verified
     readiness_state: verified
     evidence:
       - ../rapp-qonto/docs/security-and-reliability-gates.md
       - ../rapp-qonto/evidence/live/2026-07-29-railiance01.json
   - rapp_id: rapp-policy-nexus
     rail_id: rail-kubernetes
+    package_readiness_state: verified
     readiness_state: production-approved
     evidence:
       - ../rapp-policy-nexus/declarations/rapp.yaml
@@ -15,7 +32,24 @@ bound_rapps:
       - ../rapp-policy-nexus/bindings/reef-railiance.yaml
       - ../rapp-policy-nexus/evidence/live/2026-08-18-railiance01.json
       - ../rapp-policy-nexus/evidence/live/2026-08-18-railiance01-release2-rollback.json
+  - rapp_id: rapp-postgres
+    rail_id: rail-kubernetes
+    package_readiness_state: verified
+    readiness_state: verified
+    evidence:
+      - ../rapp-postgres/declarations/rapp.yaml
+      - ../rapp-postgres/docs/evidence/node-reboot-2026-08-16.md
+      - ../rapp-postgres/docs/evidence/backup-restore-2026-08-13.md
+  - rapp_id: rapp-user-engine
+    rail_id: rail-kubernetes
+    package_readiness_state: verified
+    readiness_state: declared
+    evidence:
+      - ../rapp-user-engine/declarations/rapp.yaml
+      - ../rapp-user-engine/bindings/reef-railiance.yaml
 notes:
+  - Membership is the derived projection of rApp declarations whose bound_reefs includes reef-railiance; package_readiness_state is not reef binding admission.
   - The Qonto binding is verified for non-production operation; production approval remains separate.
   - The policy-nexus release-2 binding is deployed and verified; rollback to release 1 and forward restoration to release 2 were exercised successfully on 2026-08-18.
+  - User Engine remains declared at the reef binding even though its package readiness is verified.
   - Add or promote bindings only when the substrate decision is explicit and source-backed.