coulomb/sbom-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

workplans: close controlled source delivery

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118
This commit is contained in:
tegwick 2026-08-23 00:49:54 +02:00
parent d4306b738c
commit c806797e02
2 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
WORK-RECORDS.md
View file

@ -9,7 +9,7 @@
| Kind | ID | Status | Lane | Source |
| --- | --- | --- | --- | --- |
| workplan | SBOM-WP-0001 | finished | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
| workplan | SBOM-WP-0003 | active | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| workplan | SBOM-WP-0003 | finished | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| workplan | SBOM-WP-0004 | active | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0001-T01 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
| task | SBOM-WP-0001-T02 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
@ -19,7 +19,7 @@
| task | SBOM-WP-0003-T01 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0003-T02 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0003-T03 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0003-T04 | progress | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0003-T04 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0004-T01 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0004-T02 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0004-T03 | progress | — | workplans/SBOM-WP-0004-database-lease-rotation.md |

15
workplans/SBOM-WP-0003-controlled-source-and-replay.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Controlled Forgejo source ingestion and durable operation replay"
domain: infotech
repo: sbom-nexus
status: active
status: finished
owner: codex
topic_slug: infotech
created: "2026-08-22"
@ -82,7 +82,7 @@ available for local/operator compatibility while the production flag is dark.
```task
id: SBOM-WP-0003-T04
status: progress
status: done
priority: high
state_hub_task_id: "9c8a2b6c-2b99-5dd8-9c1c-b5ba4ad2367b"
```
@ -98,3 +98,14 @@ after migration `0002`. The attended `sbom-nexus` canary produced snapshot
archive SHA-256/byte provenance, zero errors, identical replay under the same
operation key, and an empty transient directory before and after. The feature
is dark again with snapshot history intact; scheduled proof remains.
The existing enabled Temporal schedule was then reconciled unchanged and
operator-triggered through its normal schedule action. It froze exactly three
controlled targets, issued three successful Nexus writes, spawned zero tasks,
and created provenance-bearing terminal snapshots
`62f5f596-f644-4992-b356-f06b832eef07`,
`6849b000-d7ac-4d06-a104-51d2610a67df`, and
`526e03bf-a71c-4095-ba8a-31a46a2adfc9`. All three correctly reported
`no-manifest`; `never_count` advanced 94 to 91. The feature is enabled for the
bounded schedule. Unassisted weekday observation and ongoing source-reference
projection remain live in `CUST-WP-0064` / `ACTIVITY-WP-0034`.