tegwick
142c94287e
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a053ff-1d6f-7fe2-ac1c-a6eb40a42a0c
1.7 KiB
STATE-WP-0084 private Forge derivation cutover evidence
Date: 2026-08-31
The railliance01 State Hub deployment is healthy on image
main-a32112e. Helm has forgeRead.enabled: true; the pod uses ServiceAccount
state-hub, a projected OpenBao Kubernetes token, and coordinate-only runtime
configuration. A non-secret in-pod check returned available from
forge_read_token().
A transaction-rolled-back review derived all nine rapp-* repositories from
Forgejo before any projection write. It returned seven ordinary update sets and
two no-ops, with zero creations, retirements, refusals, or errors. The reviewed
commits were:
| Repository | Forge commit | Review result |
|---|---|---|
rapp-core-hub |
b322bf1531650a09a9ef0669d3c63091532ab078 |
update |
rapp-issue-core |
a78f38cfd8afb29ed23d150a4ea3e3dcd1f35381 |
update |
rapp-openbao |
89bc86b8aff549953ec744395ca47578aaac7591 |
update |
rapp-policy-nexus |
41c42e8d1a653af666da2e5e7e008a27464d9b87 |
update |
rapp-postgres |
2b7fe861f984f8539ca63ede662fe5719ace895a |
update |
rapp-qonto |
240c462b9412a3932cc27dbbc13933378f4af07e |
update |
rapp-sbom-nexus |
1566bcf69fc0757db5efc67f78b14af10d944c1b |
no-op |
rapp-tenant-engine |
70a6dc3113b4da070690bf6e7a21c2bac67e2004 |
no-op |
rapp-user-engine |
608690d80d63cc373af17d387af29adec8a53c7b |
update |
Each commit was then reconciled through the guarded primary-only
POST /repos/{slug}/work-record-projection/reconcile API with
acknowledge_retirements: false. A second rolled-back review returned
noop: 9, with zero errors and every change count at zero.
No token value, credential-bearing URL, or private preflight artifact was printed or stored in this evidence.