coulomb/tenant-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
75 commits 1 branch 0 tags 970 KiB
Commit graph

75 commits

This branch
This branch
All branches
Author SHA1 Message Date
tegwick
807f8db07c Note NetKingdom layering review in INTENT 
Records this repository's layer in the NetKingdom IT-security layer model
(Taxonomy / Tooling / Engines / Staff) and what should change in this INTENT
as a result. Links to the review that established the model:
gate-house/history/2026-08-28-security-layer-model-and-gate-house-recut.md

The note flags pending adaptation only; the body is unchanged.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2564823@bnt-lap001
Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9
 2026-08-28 20:33:43 +02:00
tegwick
f82017090b fix(workplans): qualify ad-hoc identifiers with the repository prefix 
`ADHOC-YYYY-MM-DD` is unique per date but not per repository, so any two repos
opening an ad-hoc on the same day collide. The 2026-08-26 fleet projection
reset refused 9 records for exactly this reason.

Canon (work-record-types_v0.1, CUST-WP-0066) settled the form as
`{PREFIX}-WP-ADHOC-YYYY-MM-DD`, filename unchanged, and grandfathered existing
ids on the condition they are never *silently* re-derived. This is the explicit
migration that clause allows for.

The hub id is derived from the record id, so a changed id is a different
record: stale state_hub_*_id fields are dropped and fix-consistency re-derives.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
 2026-08-28 00:28:24 +02:00
codex
5197bab2f2 docs(agents): repoint remote State Hub URL to the in-cluster address 
The remote row pointed at 127.0.0.1:18000, a reverse tunnel back to the
workstation. On railiance01 the State Hub runs in the cluster on that same
machine, so the request left the box and came back to reach a local service.

Refs CUST-WP-0067-T07

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
 2026-08-25 00:22:09 +02:00
tegwick
0c0b40f510 chore: refresh work record index 2026-08-21 01:21:51 +02:00
custodian-sync
92c31984c7 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-21:
  - update .custodian-brief.md for tenant-engine
 2026-08-21 01:21:28 +02:00
tegwick
7a1725160f docs: finish PostgreSQL production cutover 2026-08-21 01:20:54 +02:00
tegwick
a738a6bce4 docs: align PostgreSQL cutover deployment pins 2026-08-21 00:42:32 +02:00
tegwick
d2a7fe3151 fix: keep migration objects on stable role
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 38s
Details
2026-08-21 00:27:54 +02:00
tegwick
749461b97b Implement PostgreSQL production store path
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 41s
Details 
Add the PostgreSQL backend, migration and stopped-write transfer tools, lease-aware deployment manifests, tenancy declarations, and shared conformance coverage. Persist grouping mutations in durable stores and separate process liveness from database readiness.
 2026-08-19 14:43:08 +02:00
tegwick
2063470ac8 Send a projected flex-auth caller token on every check
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 1m7s
Details 
TENANT_ENGINE_FLEX_AUTH_TOKEN_FILE is read per request so hourly
projection rotation needs no restart. Missing or unreadable file fails
closed as a local deny and never calls flex-auth. Needed before
flex-auth-tenant-engine can enforce (FLEX-WP-0015-T02).
 2026-08-19 14:31:39 +02:00
tegwick
0809af063c docs: point deploy/ at rapp-tenant-engine as apply home 2026-08-18 13:03:16 +02:00
custodian-sync
aee0971cca chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-18:
  - update .custodian-brief.md for tenant-engine
 2026-08-18 07:29:09 +02:00
custodian-sync
0a65a4a25c chore(consistency): renormalize lifecycle state [auto] 
Updated by fix-consistency on 2026-08-18:
  - workplan status: ready → active
 2026-08-18 07:29:03 +02:00
tegwick
b22d4a7294 TEN-WP-0010-T01: mark proposed-and-recorded as done, ratification outstanding 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 22:53:52 +02:00
custodian-sync
3dd54127f6 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-17:
  - update .custodian-brief.md for tenant-engine
 2026-08-17 22:53:33 +02:00
tegwick
bdf9f5f643 Finish TEN-WP-0010: mutable grouping, contract corrected, handoffs sent 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 22:53:10 +02:00
custodian-sync
2e1c4e15e6 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-17:
  - update .custodian-brief.md for tenant-engine
 2026-08-17 22:09:41 +02:00
tegwick
b998ca2332 Finish TEN-WP-0010-T03/T04: audited grouping mutation
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 1m5s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 22:09:24 +02:00
custodian-sync
2e11b6a155 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-17:
  - update .custodian-brief.md for tenant-engine
 2026-08-17 22:06:27 +02:00
tegwick
1b2526910b TEN-WP-0010-T02 done, T01 proposed: no consumer parses the grouping segment 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 22:05:59 +02:00
custodian-sync
fd75bd74cf chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-17:
  - update .custodian-brief.md for tenant-engine
 2026-08-17 21:41:24 +02:00
tegwick
20979040b2 Plan mutable grouping (TEN-WP-0010) 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 21:41:05 +02:00
tegwick
5a9e78f657 TEN-WP-0009-T01: record rapp-postgres acceptance, add postgres-client label 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 10:59:32 +02:00
tegwick
05d12fe39f TEN-WP-0009-T01: target platform-pg via rapp-postgres consumer declaration 
Corrects the credential assumption: shared-cluster access is a broker lease,
not a CNPG-minted secretKeyRef.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 10:44:59 +02:00
custodian-sync
358dc506fa chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 18:59:49 +02:00
tegwick
cf7ca1a692 TEN-WP-0009: make database placement portable rather than settled 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 18:59:30 +02:00
custodian-sync
121968d65b chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 18:26:00 +02:00
tegwick
781359e7d4 Plan PostgreSQL production store (TEN-WP-0009) 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 18:25:35 +02:00
custodian-sync
bd61df3ff8 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 18:17:57 +02:00
tegwick
c05cc704b2 Plan staged-promotion onboarding (TEN-WP-0008) 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 18:17:39 +02:00
tegwick
a69adb6498 Add deployment pin-drift check (make verify-pin) 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 10:46:26 +02:00
custodian-sync
28539bfce2 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 10:35:00 +02:00
tegwick
76196aa39f Finish TEN-WP-0007: guardrail surface live in production 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 10:34:44 +02:00
custodian-sync
b95b317293 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 10:02:53 +02:00
custodian-sync
1020758e83 chore(consistency): renormalize lifecycle state [auto] 
Updated by fix-consistency on 2026-08-16:
  - workplan status: ready → active
 2026-08-16 10:02:49 +02:00
tegwick
611431c2b7 TEN-WP-0007: pin guardrail image, record CI digest and flex-auth nine-action pin 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 10:02:34 +02:00
custodian-sync
4d29b8ce15 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 02:52:34 +02:00
tegwick
9f1e58a797 Plan guardrail production rollout (TEN-WP-0007) 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:52:05 +02:00
tegwick
e5c106186d chore(consistency): refresh WORK-RECORDS.md for TEN-WP-0006 close 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:21:10 +02:00
custodian-sync
628e31dba8 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 02:20:07 +02:00
tegwick
955fe339fd Finish TEN-WP-0006: guardrail and quota policy
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 43s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:19:48 +02:00
tegwick
d1d9c9a735 TEN-WP-0006-T05: cross-tenant denial and write-path outage conformance 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:18:52 +02:00
tegwick
b6d016869f Finish TEN-WP-0006-T04: expose guardrail read and write APIs 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:18:01 +02:00
tegwick
f631224ab5 Finish TEN-WP-0006-T03: persist guardrails in both stores 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:14:31 +02:00
tegwick
33ceb882ee Finish TEN-WP-0006-T02: implement guardrail domain model 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:10:38 +02:00
tegwick
0d1435c2d2 Finish TEN-WP-0006-T01: specify guardrail model and boundary 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 02:07:42 +02:00
custodian-sync
9f37b3cf6e chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-16:
  - update .custodian-brief.md for tenant-engine
 2026-08-16 01:50:26 +02:00
tegwick
b8af02d74d Plan guardrail and quota policy (TEN-WP-0006) 
Closes the guardrail/quota concern reserved since repo creation. Notably
ADR-0013 specifies trial tenants default to a zero spend budget; no such
default exists today.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-16 01:50:08 +02:00
tegwick
77bc207484 chore(consistency): refresh WORK-RECORDS.md for TEN-WP-0005 close 
Index still listed T01-T04 as todo after the workplan finished. Regenerated
by fix-consistency; committing the file so origin matches the hub.
 2026-08-14 01:44:49 +02:00
custodian-sync
6cea67d558 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-08-14:
  - update .custodian-brief.md for tenant-engine
 2026-08-14 01:43:56 +02:00