coulomb/the-custodian
5
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Close verified guardrail publication and retain phased sizing results

Browse source
This commit is contained in:
codex 2026-10-19 15:40:49 +02:00
parent aedf6f8994
commit 01dc19601b
4 changed files with 42 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

17
.kaizen/agents/custodian-codex/supervision.json
View file

@ -1136,7 +1136,7 @@
{
"proposal_id": "POLICY-PUB-20261019-BUILD-MODE-GUARDRAIL-R1",
"disposition": "accepted_unchanged",
"outcome": "in_progress",
"outcome": "succeeded",
"proposal_ref": "docs/changes/CUST-WP-0079/policy-publication-r1/PLAN.md",
"original_revision": 1,
"original_digest": "309ef01650b65bc6b28e86daad9b2835a242631cf60e0896e849461bb917504f",
@ -1144,7 +1144,7 @@
"plan_digest_sha256": "6f8c7860b371460e1695027241d1d14b9ca5e46f7003ee92d4c717c26147740a",
"target": "railiance01 policy-nexus existing public host; paired rapp-policy-nexus/railiance-apps source",
"expected_result": "74 published documents; only accepted build-mode guardrail added; exact image 214b122c3d175563f114552fa1826dac9642433be019c736c3265d0a3ef379f1 and paired release hashes verified",
"verification_ref": "docs/changes/CUST-WP-0079/policy-publication-r1/PLAN.md exact post-approval sequence",
"verification_ref": "docs/changes/CUST-WP-0079/policy-publication-r1-execution/public-verification.json",
"rollback_ref": "docs/changes/CUST-WP-0079/policy-publication-r1/PLAN.md abort and rollback to verified prechange Helm revision 9",
"incremental_infrastructure_cost_eur": 0,
"cost_estimate_eur": null,
@ -1153,7 +1153,7 @@
"supervisor": "Bernd Worsch",
"approved_revision": 1,
"executed_revision": 1,
"refinement_or_rescue": false,
"refinement_or_rescue": true,
"promotion_evidence": false,
"approved_digest": "309ef01650b65bc6b28e86daad9b2835a242631cf60e0896e849461bb917504f",
"approved_digest_sha256": "309ef01650b65bc6b28e86daad9b2835a242631cf60e0896e849461bb917504f",
@ -1165,7 +1165,16 @@
"execution_started_at": "2026-10-19T13:24:06.363210+00:00",
"execution_ref": "docs/changes/CUST-WP-0079/policy-publication-r1-execution/execution-start.json",
"partial_verification_ref": "docs/changes/CUST-WP-0079/policy-publication-r1-execution/registry-verification.json",
"partial_verified_outcome": "Approved immutable OCI manifest and all 13 remote blobs byte-equal to local candidate; registry anonymous pull verified. Deployment not yet verified."
"partial_verified_outcome": "Approved immutable OCI manifest and all 13 remote blobs byte-equal to local candidate; registry anonymous pull verified. Deployment not yet verified.",
"native_verification_ref": "docs/changes/CUST-WP-0079/policy-publication-r1-execution/native-verification.json",
"execution_finished_at": "2026-10-19T13:36:20.944233+00:00",
"verified_outcome": "Exact approved artifact deployed once via atomic owner upgrade, Helm revision10 Ready1/1; public 74 documents, previous73 source digests unchanged, all150 pages/artifacts byte-equal candidate and all paired hashes verified.",
"verification_refinements": [
"Initial verifier incorrectly expected hosting transition date2026-12-21 in canon expiry.",
"Second verifier expected source expires_on label rather than rendered Expires on.",
"Correct final assertion matches approved rendered banner; both failed checks retained, artifact and deployment unchanged."
],
"recovery": "No artifact/deployment revision or rollback. Two verifier-only date/label assertion failures retained; corrected assertions match approved source and full verification passed."
}
],
"trials": [

2
WORK-RECORDS.md
View file

@ -502,7 +502,7 @@
| task | CUST-WP-0079-T01 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md |
| task | CUST-WP-0079-T02 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md |
| task | CUST-WP-0079-T03 | progress | — | workplans/CUST-WP-0079-deterministic-security-flow.md |
| task | CUST-WP-0079-T04 | progress | — | workplans/CUST-WP-0079-deterministic-security-flow.md |
| task | CUST-WP-0079-T04 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md |
| task | CUST-WP-0079-T05 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md |
| task | CUST-WP-0079-T06 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md |
| task | CUST-WP-0079-T07 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md |

17
workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md
View file

@ -507,3 +507,20 @@ railiance-platform with package implementation in rapp-playwright
`7537e056`). No tenant is inferred. The retained capture and its map hash stay
unchanged; the next reconciliation consumes this improved map. This identifies
receiving owners, not measured demand or authorization to retire workloads.
### Phased configurable run retained before pause
Vergabe `44e5458` adds `config/synthetic-pilot-phases.json`: named operation mix
with persisted tender/lot/task edits, idle, ordinary, burst, restart and recovery
phases. The retained `phased-comparison.json` reports 2971 requests, zero errors,
complete measurement coverage and exact derived request counts. Ordinary/burst/
recovery p95 values are 256/303/336ms; transfers overall p95 129ms. Startup took
7.266s and restart readiness 7.128s at the same inspected 1000m/1Gi limits.
Mean application CPU was 937m, peak cgroup memory 310MiB, with 1376/1813 periods
throttled; separately sampled database CPU p95 was 74.1% of one core.
An earlier restart attempt failed because Docker reassigned the published port.
Its failure and driver are retained; endpoint refresh fixes the harness and 17
focused tests pass. This remains provisional local evidence. RAPPS-WP-0014-T04
receives exact deployed-release/hardware and shared-contention measurement;
T03's human/recovery gate is unchanged. No production allocation changed.

13
workplans/CUST-WP-0079-deterministic-security-flow.md
View file

@ -99,9 +99,8 @@ no foreign owner task was changed by this reconciliation.
```task
id: CUST-WP-0079-T04
status: progress
status: done
depends_on: [PNEX-WP-0006]
blocking_reason: "Founder approved exact publication packet on 2026-10-19; policy-nexus owner executing PNEX-WP-0006 release. Native/public verification remains required before closure."
priority: high
state_hub_task_id: "5dd52156-09a8-5781-b288-99ae822f59a6"
```
@ -517,3 +516,13 @@ An opt-in endpoint, exact 15-repository disclosure policy, narrowly selected
network access and receiver are being prepared. Existing Forge read authority
does not authorize this new downstream disclosure. No new credential mount or
live access change has been made; both job definitions remain disabled.
Publication verified at 13:36:20Z on 2026-10-19: one atomic upgrade deployed the
exact approved artifact as Helm revision 10, Ready 1/1. Public release hashes
and source set match; all 150 canonical/revision pages and artifacts are byte
equal to the candidate, with 74 documents and the previous 73 source digests
unchanged. The standard and derived JSON are live. T04 is done. Native/public
receipts are in `docs/changes/CUST-WP-0079/policy-publication-r1-execution/`.
Two verifier-only date/label assertion failures are retained as refinements;
the corrected full proof passed without artifact changes or rollback. No new
vulnerability scan or native CI success is inferred from deployment acceptance.