Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a053ff-1d6f-7fe2-ac1c-a6eb40a42a0c
34 lines
1.7 KiB
Markdown
34 lines
1.7 KiB
Markdown
# STATE-WP-0084 private Forge derivation cutover evidence
|
|
|
|
Date: 2026-08-31
|
|
|
|
The `railliance01` State Hub deployment is healthy on image
|
|
`main-a32112e`. Helm has `forgeRead.enabled: true`; the pod uses ServiceAccount
|
|
`state-hub`, a projected OpenBao Kubernetes token, and coordinate-only runtime
|
|
configuration. A non-secret in-pod check returned `available` from
|
|
`forge_read_token()`.
|
|
|
|
A transaction-rolled-back review derived all nine `rapp-*` repositories from
|
|
Forgejo before any projection write. It returned seven ordinary update sets and
|
|
two no-ops, with zero creations, retirements, refusals, or errors. The reviewed
|
|
commits were:
|
|
|
|
| Repository | Forge commit | Review result |
|
|
| --- | --- | --- |
|
|
| `rapp-core-hub` | `b322bf1531650a09a9ef0669d3c63091532ab078` | update |
|
|
| `rapp-issue-core` | `a78f38cfd8afb29ed23d150a4ea3e3dcd1f35381` | update |
|
|
| `rapp-openbao` | `89bc86b8aff549953ec744395ca47578aaac7591` | update |
|
|
| `rapp-policy-nexus` | `41c42e8d1a653af666da2e5e7e008a27464d9b87` | update |
|
|
| `rapp-postgres` | `2b7fe861f984f8539ca63ede662fe5719ace895a` | update |
|
|
| `rapp-qonto` | `240c462b9412a3932cc27dbbc13933378f4af07e` | update |
|
|
| `rapp-sbom-nexus` | `1566bcf69fc0757db5efc67f78b14af10d944c1b` | no-op |
|
|
| `rapp-tenant-engine` | `70a6dc3113b4da070690bf6e7a21c2bac67e2004` | no-op |
|
|
| `rapp-user-engine` | `608690d80d63cc373af17d387af29adec8a53c7b` | update |
|
|
|
|
Each commit was then reconciled through the guarded primary-only
|
|
`POST /repos/{slug}/work-record-projection/reconcile` API with
|
|
`acknowledge_retirements: false`. A second rolled-back review returned
|
|
`noop: 9`, with zero errors and every change count at zero.
|
|
|
|
No token value, credential-bearing URL, or private preflight artifact was
|
|
printed or stored in this evidence.
|