coulomb/sbom-nexus
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

workplans: close controlled source delivery

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118
This commit is contained in:
tegwick 2026-08-23 00:49:54 +02:00
parent d4306b738c
commit c806797e02
2 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
WORK-RECORDS.md
View file

@ -9,7 +9,7 @@
| Kind | ID | Status | Lane | Source | | Kind | ID | Status | Lane | Source |
| --- | --- | --- | --- | --- | | --- | --- | --- | --- | --- |
| workplan | SBOM-WP-0001 | finished | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md | | workplan | SBOM-WP-0001 | finished | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
| workplan | SBOM-WP-0003 | active | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md | | workplan | SBOM-WP-0003 | finished | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| workplan | SBOM-WP-0004 | active | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | workplan | SBOM-WP-0004 | active | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0001-T01 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md | | task | SBOM-WP-0001-T01 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
| task | SBOM-WP-0001-T02 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md | | task | SBOM-WP-0001-T02 | done | — | workplans/SBOM-WP-0001-bootstrap-and-state-hub-extraction.md |
@ -19,7 +19,7 @@
| task | SBOM-WP-0003-T01 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md | | task | SBOM-WP-0003-T01 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0003-T02 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md | | task | SBOM-WP-0003-T02 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0003-T03 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md | | task | SBOM-WP-0003-T03 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0003-T04 | progress | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md | | task | SBOM-WP-0003-T04 | done | — | workplans/SBOM-WP-0003-controlled-source-and-replay.md |
| task | SBOM-WP-0004-T01 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | task | SBOM-WP-0004-T01 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0004-T02 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | task | SBOM-WP-0004-T02 | done | — | workplans/SBOM-WP-0004-database-lease-rotation.md |
| task | SBOM-WP-0004-T03 | progress | — | workplans/SBOM-WP-0004-database-lease-rotation.md | | task | SBOM-WP-0004-T03 | progress | — | workplans/SBOM-WP-0004-database-lease-rotation.md |

15
workplans/SBOM-WP-0003-controlled-source-and-replay.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Controlled Forgejo source ingestion and durable operation replay" title: "Controlled Forgejo source ingestion and durable operation replay"
domain: infotech domain: infotech
repo: sbom-nexus repo: sbom-nexus
status: active status: finished
owner: codex owner: codex
topic_slug: infotech topic_slug: infotech
created: "2026-08-22" created: "2026-08-22"
@ -82,7 +82,7 @@ available for local/operator compatibility while the production flag is dark.
```task ```task
id: SBOM-WP-0003-T04 id: SBOM-WP-0003-T04
status: progress status: done
priority: high priority: high
state_hub_task_id: "9c8a2b6c-2b99-5dd8-9c1c-b5ba4ad2367b" state_hub_task_id: "9c8a2b6c-2b99-5dd8-9c1c-b5ba4ad2367b"
``` ```
@ -98,3 +98,14 @@ after migration `0002`. The attended `sbom-nexus` canary produced snapshot
archive SHA-256/byte provenance, zero errors, identical replay under the same archive SHA-256/byte provenance, zero errors, identical replay under the same
operation key, and an empty transient directory before and after. The feature operation key, and an empty transient directory before and after. The feature
is dark again with snapshot history intact; scheduled proof remains. is dark again with snapshot history intact; scheduled proof remains.
The existing enabled Temporal schedule was then reconciled unchanged and
operator-triggered through its normal schedule action. It froze exactly three
controlled targets, issued three successful Nexus writes, spawned zero tasks,
and created provenance-bearing terminal snapshots
`62f5f596-f644-4992-b356-f06b832eef07`,
`6849b000-d7ac-4d06-a104-51d2610a67df`, and
`526e03bf-a71c-4095-ba8a-31a46a2adfc9`. All three correctly reported
`no-manifest`; `never_count` advanced 94 to 91. The feature is enabled for the
bounded schedule. Unassisted weekday observation and ongoing source-reference
projection remain live in `CUST-WP-0064` / `ACTIVITY-WP-0034`.