coulomb/sbom-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: record dark deployment preflight

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834
This commit is contained in:
tegwick 2026-08-22 15:05:23 +02:00
parent 0941a2e5f4
commit 01fb7ecdda
3 changed files with 92 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
workplans/SBOM-WP-0002-production-cutover.md
View file

@ -37,11 +37,16 @@ bounded daily catch-up before retiring State Hub SBOM ownership.
id: SBOM-WP-0002-T01
status: progress
priority: high
needs_human: true
intervention_note: "Warden requires operator OIDC/MFA for first rapp-sbom-nexus Forgejo repository creation and one-time secret provisioning for platform-pg-2/OpenBao."
state_hub_task_id: "95a520d4-30c2-5c87-8054-6bfe549c2686"
```
Provision database credentials through the governed route, migrate schema,
deploy the API without callers, and capture health plus backup/restore evidence.
Image publication, package rendering, family validation, and server-side dry-run
are complete; see
`docs/evidence/SBOM-WP-0002-T01-dark-deployment-preflight-2026-08-22.md`.
## Synchronize repository projections