# STATE-WP-0084 private Forge derivation cutover evidence

Date: 2026-08-31

The `railliance01` State Hub deployment is healthy on image
`main-a32112e`. Helm has `forgeRead.enabled: true`; the pod uses ServiceAccount
`state-hub`, a projected OpenBao Kubernetes token, and coordinate-only runtime
configuration. A non-secret in-pod check returned `available` from
`forge_read_token()`.

A transaction-rolled-back review derived all nine `rapp-*` repositories from
Forgejo before any projection write. It returned seven ordinary update sets and
two no-ops, with zero creations, retirements, refusals, or errors. The reviewed
commits were:

| Repository | Forge commit | Review result |
| --- | --- | --- |
| `rapp-core-hub` | `b322bf1531650a09a9ef0669d3c63091532ab078` | update |
| `rapp-issue-core` | `a78f38cfd8afb29ed23d150a4ea3e3dcd1f35381` | update |
| `rapp-openbao` | `89bc86b8aff549953ec744395ca47578aaac7591` | update |
| `rapp-policy-nexus` | `41c42e8d1a653af666da2e5e7e008a27464d9b87` | update |
| `rapp-postgres` | `2b7fe861f984f8539ca63ede662fe5719ace895a` | update |
| `rapp-qonto` | `240c462b9412a3932cc27dbbc13933378f4af07e` | update |
| `rapp-sbom-nexus` | `1566bcf69fc0757db5efc67f78b14af10d944c1b` | no-op |
| `rapp-tenant-engine` | `70a6dc3113b4da070690bf6e7a21c2bac67e2004` | no-op |
| `rapp-user-engine` | `608690d80d63cc373af17d387af29adec8a53c7b` | update |

Each commit was then reconciled through the guarded primary-only
`POST /repos/{slug}/work-record-projection/reconcile` API with
`acknowledge_retirements: false`. A second rolled-back review returned
`noop: 9`, with zero errors and every change count at zero.

No token value, credential-bearing URL, or private preflight artifact was
printed or stored in this evidence.