coulomb/resource-control
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: approve WP-0002 T03; wait on OpenBao bootstrap key

Browse source 
Human approved the Scaleway buy. Decision and inventory record
approved_on 2026-08-14. Bucket not created until the bootstrap key
is in OpenBao.
This commit is contained in:
tegwick 2026-08-14 16:58:44 +02:00
parent f9af7518f5
commit 2ebc000f04
3 changed files with 17 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
data/resources/platform-audit-storage.proposed.json
View file

@ -7,15 +7,15 @@
"entity_gap": null, "entity_gap": null,
"description": "Off-host S3-compatible object store for rapp-postgres WAL archive and physical base backups. Procured by Railiance, operated as a Scaleway-delegated substrate on reef-storage, not on reef-railiance.", "description": "Off-host S3-compatible object store for rapp-postgres WAL archive and physical base backups. Procured by Railiance, operated as a Scaleway-delegated substrate on reef-storage, not on reef-railiance.",
"decision": { "decision": {
"status": "recommended", "status": "approved",
"chosen": "Scaleway Standard Multi-AZ nl-ams; independent secondary copy on Host Europe Backup Storage or governed Nextcloud (T06)", "chosen": "Scaleway Standard Multi-AZ nl-ams; independent secondary copy on Host Europe Backup Storage or governed Nextcloud (T06)",
"rejected": [ "rejected": [
"Host Europe Cloud Storage as primary (S3 not confirmed orderable)", "Host Europe Cloud Storage as primary (S3 not confirmed orderable)",
"Hetzner Object Storage as primary (no default at-rest encryption)", "Hetzner Object Storage as primary (no default at-rest encryption)",
"Self-managed Garage as primary (labor and capacity lose at this workload)" "Self-managed Garage as primary (labor and capacity lose at this workload)"
], ],
"approved_by": null, "approved_by": "human-financial-authority",
"approved_on": null, "approved_on": "2026-08-14",
"ref": "docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md" "ref": "docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md"
}, },
"operational_refs": [ "operational_refs": [

14
docs/evidence/RESOURCE-WP-0002-primary-selection-2026-08-14.md
View file

@ -1,13 +1,17 @@
# RESOURCE-WP-0002 T03 — primary object-store selection # RESOURCE-WP-0002 T03 — primary object-store selection
Date: 2026-08-14 Date: 2026-08-14
Status: **recommended — awaiting human purchase approval** Status: **approved — waiting on Scaleway bootstrap key in OpenBao**
Resource: `resource:platform:audit-storage` Resource: `resource:platform:audit-storage`
Procuring / consuming entity: `entity:railiance` (self-use, no 20 % markup) Procuring / consuming entity: `entity:railiance` (self-use, no 20 % markup)
Operating reef: `reef-storage` (not `reef-railiance`) Operating reef: `reef-storage` (not `reef-railiance`)
This is the decision record T03 asked for. It is not a purchase. It does Human financial authority approved the purchase in session 2026-08-14
not create a Scaleway account, bucket, or key. (“lets do it”, then “key into OpenBao first”). This file is no longer a
recommendation-only draft. The bucket is **not** created until the
bootstrap API key is in OpenBao
(`platform/workloads/railiance/scaleway/bootstrap`). See
`reef-storage/docs/put-scaleway-bootstrap.md`.
## Recommendation ## Recommendation
@ -78,5 +82,5 @@ primary without a new decision.
## Authority ## Authority
Recommended by: resource-control (this file) Recommended by: resource-control (this file)
Approved by: _vacant — human financial authority_ Approved by: human financial authority (Bernd Worsch, chat 2026-08-14)
Approved on: _null_ Approved on: 2026-08-14

8
workplans/RESOURCE-WP-0002-procure-postgres-backup-storage.md
View file

@ -212,9 +212,11 @@ Progress 2026-08-14: decision record written —
Primary: Scaleway Multi-AZ `nl-ams`. Secondary copy: Host Europe Backup Primary: Scaleway Multi-AZ `nl-ams`. Secondary copy: Host Europe Backup
Storage or Nextcloud (T06). Inventory stays `proposed` with five-facet Storage or Nextcloud (T06). Inventory stays `proposed` with five-facet
refs to `reef-storage`. Reef seeded (identity, topology, consumers, refs to `reef-storage`. Reef seeded (identity, topology, consumers,
planned attribute file). **Blocked on human approval to create the planned attribute file). **Purchase approved 2026-08-14.** Blocked on founder putting the
Scaleway project/bucket.** After yes: fill reef attributes, set Scaleway bootstrap API key in OpenBao
`decision.status: approved` and inventory `ordered`. (`platform/workloads/railiance/scaleway/bootstrap`,
`reef-storage/docs/put-scaleway-bootstrap.md`). Do not paste the
secret in chat. Then run `reef-storage/tools/create-platform-audit-bucket.sh`.
## T04 — Establish credential custody and hand off to rapp-postgres ## T04 — Establish credential custody and hand off to rapp-postgres