From d4e9da0ce4caca404a3652eefed3af46512c80cc Mon Sep 17 00:00:00 2001
From: codex <codex@local>
Date: Sun, 26 Jul 2026 14:14:30 +0200
Subject: [PATCH] Record blocked Knative substrate preflight

---
 WORK-RECORDS.md                                      |  4 ++--
 evidence/preflight/knative-2026-07-26.json           | 12 ++++++++++++
 ...WP-0002-knative-and-qonto-production-admission.md |  9 ++++++++-
 3 files changed, 22 insertions(+), 3 deletions(-)
 create mode 100644 evidence/preflight/knative-2026-07-26.json

diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 71bf7e6..14f1065 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -16,7 +16,7 @@
 | task | REEF-RAILIANCE-WP-0001-T04 | done | — | workplans/REEF-RAILIANCE-WP-0001-bootstrap-and-wave1-import.md |
 | task | REEF-RAILIANCE-WP-0002-T01 | done | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
 | task | REEF-RAILIANCE-WP-0002-T02 | progress | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
-| task | REEF-RAILIANCE-WP-0002-T03 | todo | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
-| task | REEF-RAILIANCE-WP-0002-T04 | todo | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
+| task | REEF-RAILIANCE-WP-0002-T03 | wait | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
+| task | REEF-RAILIANCE-WP-0002-T04 | progress | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
 | task | REEF-RAILIANCE-WP-0002-T05 | wait | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
 | task | REEF-RAILIANCE-WP-0002-T06 | todo | — | workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md |
diff --git a/evidence/preflight/knative-2026-07-26.json b/evidence/preflight/knative-2026-07-26.json
new file mode 100644
index 0000000..8968528
--- /dev/null
+++ b/evidence/preflight/knative-2026-07-26.json
@@ -0,0 +1,12 @@
+{
+  "schema_version": "railiance.knative-preflight/v1",
+  "collected_at": "2026-07-26T11:50:08Z",
+  "collector": "manual invocation of railiance-cluster/tools/knative-preflight.sh precursor",
+  "context": "default",
+  "status": "unreachable",
+  "api_endpoint": "92.205.62.239:6443",
+  "error_class": "network_timeout",
+  "facts_collected": false,
+  "secret_values_collected": false,
+  "admission_effect": "block_installation"
+}
diff --git a/workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md b/workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md
index 874b8ce..6778314 100644
--- a/workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md
+++ b/workplans/REEF-RAILIANCE-WP-0002-knative-and-qonto-production-admission.md
@@ -48,11 +48,16 @@ Collect Kubernetes version, capacity/headroom, ingress, DNS/TLS, network,
 identity/secret delivery, observability, backup/restore, and maintenance
 evidence before installation.
 
+2026-07-26: The first read-only probe reached the configured context but the
+API endpoint timed out. Recorded machine-readable failure evidence and kept
+installation blocked. `railiance-cluster` now owns a reusable preflight probe
+and the access/install workplan.
+
 ## T03 - Install and verify the derived rail
 
 ```task
 id: REEF-RAILIANCE-WP-0002-T03
-status: todo
+status: wait
 priority: high
 state_hub_task_id: "ff070df6-8ffa-40e6-bbaa-2dcff20f64f2"
 ```
@@ -60,6 +65,8 @@ state_hub_task_id: "ff070df6-8ffa-40e6-bbaa-2dcff20f64f2"
 Install only after the baseline matches the derived rail prerequisites. Record
 versioned smoke and rollback evidence.
 
+Blocked by failed API reachability preflight; no install was attempted.
+
 ## T04 - Bind and verify rapp-qonto
 
 ```task