coulomb/sbom-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

workplans: close database lease rotation

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118
This commit is contained in:
tegwick 2026-08-23 01:11:03 +02:00
parent c08fbeb1ed
commit 503bebcb0b
2 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
WORK-RECORDS.md
View file

@ -10,7 +10,7 @@
| --- | --- | --- | --- | --- | | --- | --- | --- | --- | --- |
| workplan | SBOM-WP-0001 | finished | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md | | workplan | SBOM-WP-0001 | finished | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
| workplan | SBOM-WP-0003 | finished | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md | | workplan | SBOM-WP-0003 | finished | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| workplan | SBOM-WP-0004 | active | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | workplan | SBOM-WP-0004 | finished | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0001-T01 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md | | task | SBOM-WP-0001-T01 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
| task | SBOM-WP-0001-T02 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md | | task | SBOM-WP-0001-T02 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
| task | SBOM-WP-0001-T03 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md | | task | SBOM-WP-0001-T03 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
@ -22,4 +22,4 @@
| task | SBOM-WP-0003-T04 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md | | task | SBOM-WP-0003-T04 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0004-T01 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | task | SBOM-WP-0004-T01 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0004-T02 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | task | SBOM-WP-0004-T02 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0004-T03 | progress | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | task | SBOM-WP-0004-T03 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md |

11
workplans/SBOM-WP-0004-database-lease-rotation.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Adopt rotated database leases without liveness restarts" title: "Adopt rotated database leases without liveness restarts"
domain: infotech domain: infotech
repo: sbom-nexus repo: sbom-nexus
status: active status: finished
owner: codex owner: codex
topic_slug: infotech topic_slug: infotech
created: "2026-08-23" created: "2026-08-23"
@ -62,7 +62,7 @@ Kubernetes to restart an otherwise healthy process.
```task ```task
id: SBOM-WP-0004-T03 id: SBOM-WP-0004-T03
status: progress status: done
priority: high priority: high
state_hub_task_id: "a1e88b28-119d-5d1c-a97b-2dd1b3cb9113" state_hub_task_id: "a1e88b28-119d-5d1c-a97b-2dd1b3cb9113"
``` ```
@ -75,3 +75,10 @@ The corrected digest is live at migration `0002 (head)` with process and
database health passing, repository reads working, and zero pod restarts. The database health passing, repository reads working, and zero pod restarts. The
first promotion safely proved digest rollback and exposed the now-fixed first promotion safely proved digest rollback and exposed the now-fixed
migration transaction guard. Keep this task open through one full lease window. migration transaction guard. Keep this task open through one full lease window.
Completed at 2026-08-22T23:06:19Z after 30m51s continuous uptime on pod UID
`73965817-c653-4017-8b90-e19b70c06b21`. The mounted ExternalSecret had
refreshed again at 23:02:59Z; the pod remained Ready with restart count zero,
`/state/live`, database-backed `/state/health`, and repository reads all passed,
and application logs contained zero credential-pattern matches and zero health
500 responses. This exceeds the prior exact 30-minute failure point.