Record completed zlib rollout, owner closure and current security counts
This commit is contained in:
codex
parent
e2136843c4
commit
626c0d0d49
34 changed files with 4910 additions and 7 deletions
|
|
@ -381,8 +381,8 @@
|
|||
{
|
||||
"proposal_id": "INFD-WP-0009-T05/zlib85091-r1",
|
||||
"trial_id": "infd-zlib-20261011-r1",
|
||||
"disposition": "pending",
|
||||
"outcome": "not_executed",
|
||||
"disposition": "accepted_unchanged",
|
||||
"outcome": "succeeded",
|
||||
"original_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"original_digest": "5dea0d404e4d13683fbf71d56273c06db7a6a916ab68759a90d7394005eee206",
|
||||
"commands_sha256": "4cf81acb7d42f52d81f8ba624a6b2349a0b8948477a14c09bd069d2a4acab7cf",
|
||||
|
|
@ -393,7 +393,7 @@
|
|||
"target": "realm:kubernetes/railiance01/informed-decision",
|
||||
"authority_mode": "ADMINISTER",
|
||||
"expected_result": "New guarded protected same-schema drill and one-Deployment zlib-only release to exact published f558; installed r1, fresh full zero scan, Ready and canonical authenticated provider proof. Human acceptance required first.",
|
||||
"verification_ref": "/home/worsch/informed-decision/docs/evidence/2026-10-11-zlib-image-release/native-backup-restore-protocol.md",
|
||||
"verification_ref": "/home/worsch/the-custodian/docs/evidence/2026-10-10-security-consolidation/zlib-native-completed/canonical-provider-verification.json",
|
||||
"rollback_ref": "/home/worsch/informed-decision/docs/evidence/2026-10-11-zlib-image-release/rollback-deployment.json",
|
||||
"rollback": "Exact image763/sourcec96; preserve latest database. Proposed manual outage recovery limited to same trial,30 minutes and deadline; later revocation uncertainty requires express new human consent.",
|
||||
"cost_estimate_eur": 0,
|
||||
|
|
@ -425,15 +425,50 @@
|
|||
"preparation_history_ref": "/home/worsch/informed-decision/docs/evidence/2026-10-11-zlib-image-release/preparation-failure-history.json",
|
||||
"history_limit": "Original67 full snapshot unavailable; retained digest and observations are not reconstructed full bytes. Earlier changes-requested reviews and failed T04 evidence preserved.",
|
||||
"promotion_evidence": false,
|
||||
"native_execution": false,
|
||||
"bounded_outage_exception": "proposed-only-unapproved",
|
||||
"native_execution": true,
|
||||
"bounded_outage_exception": "approved_scoped_manual_same_trial_only",
|
||||
"checklist_item": 19,
|
||||
"checklist_display_label": "INFD-WP-0009-T05/zlib-85091-r1",
|
||||
"scoring_semantics": "New distinct T05 trial; preparation refinements are not executed trials or scored successes. No old T04 approval inherited.",
|
||||
"review_memo_id": "review-2cf690a6-8c46-4faa-826c-a24a88d53dea",
|
||||
"native_authoring_receipt_ref": "/home/worsch/the-custodian/docs/evidence/2026-10-10-security-consolidation/zlib-native-authoring-receipt.json",
|
||||
"review_ready_at": "2026-10-11T10:40:24.369238+00:00",
|
||||
"user_review_preference": "Review in informed-decision; not founder acceptance"
|
||||
"user_review_preference": "Review in informed-decision; not founder acceptance",
|
||||
"approved_digest": "5dea0d404e4d13683fbf71d56273c06db7a6a916ab68759a90d7394005eee206",
|
||||
"approved_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"approved_at": "2026-10-11T10:40:55Z",
|
||||
"approval_ref": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"human_disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"approved_source_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"executed_digest": "5dea0d404e4d13683fbf71d56273c06db7a6a916ab68759a90d7394005eee206",
|
||||
"executed_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"executed_source_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"refinement_or_rescue": true,
|
||||
"preexecution_refinement": "Root receipt incorrectly reused native clock1.1806s ahead; three invocations refused before custody/journal. Root-only local verified_at correction; approved actuator/render/plan unchanged; failed prephase receipts retained.",
|
||||
"completed_phases": [
|
||||
"drill-backup",
|
||||
"drill-copy",
|
||||
"offline-verify",
|
||||
"cleanup-offline",
|
||||
"cutover-backup",
|
||||
"cutover-copy",
|
||||
"release",
|
||||
"verify"
|
||||
],
|
||||
"verified_at": "2026-10-11T11:20:27.541827+00:00",
|
||||
"outage_recovery_used": false,
|
||||
"latest_database_preserved": true,
|
||||
"scan_completed_at": "2026-10-11T10:48:46.790940Z",
|
||||
"installed_zlib": "1.3.2-r1",
|
||||
"allseverity_findings": 0,
|
||||
"owner_postacceptance": "verified and recorded separately: Product T10 and Platform RPF-IN-0010",
|
||||
"product_closure_commit": "47881fc1ff262bb705e75e4b59b8ef4731780d87",
|
||||
"platform_acceptance_commit": "8647587ca292b67857c79f4561d3264e7f8132ef",
|
||||
"actual_hub_decision_id": "2b81326f-4c09-5c66-88d1-84af4e5895fd",
|
||||
"residuals_retained": [
|
||||
"INFD-IN-0010",
|
||||
"INFD-IN-0009"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -0,0 +1,437 @@
|
|||
{
|
||||
"observed_at": "2026-10-11T11:29:24.110383+00:00",
|
||||
"scope": "same13 owner repositories; top-level authoritative workplan files, statuses proposed/ready/active/blocked/backlog; done/cancel tasks excluded; residuals counted separately",
|
||||
"repos": {
|
||||
"railiance-platform": {
|
||||
"open_plans": 10,
|
||||
"nonresidual_plans": 9,
|
||||
"residual_plans": 1,
|
||||
"unfinished_tasks": 30,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "RPF-WP-0015",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0027",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0035",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 7,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0036",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 3,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0036-platform-service-assurance.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0038",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0043",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0044",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 6,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0048",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0048-activity-core-gitops-adoption.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0053",
|
||||
"status": "proposed",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 5,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md"
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0055",
|
||||
"status": "backlog",
|
||||
"flavor": "residual",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0055-keycape-client-secret-rotation-residual.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"net-kingdom": {
|
||||
"open_plans": 7,
|
||||
"nonresidual_plans": 7,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 17,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "NK-WP-0011",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 8,
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0011-enterprise-federation-saml.md"
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0022",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md"
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0027",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 3,
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0027-reef-placement-reconciliation.md"
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0031",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0031-deterministic-posture-feedback.md"
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0035",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0035-emission-cadence-security-profile.md"
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0040",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0040-execution-attribution-receipt.md"
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0048",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"access-engine": {
|
||||
"open_plans": 4,
|
||||
"nonresidual_plans": 4,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 14,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "FLEX-WP-ADHOC-2026-10-03",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/access-engine/workplans/ADHOC-2026-10-03.md"
|
||||
},
|
||||
{
|
||||
"id": "FLEX-WP-0020",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/access-engine/workplans/FLEX-WP-0020-repository-identity-migration.md"
|
||||
},
|
||||
{
|
||||
"id": "FLEX-WP-0031",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 4,
|
||||
"file": "/home/worsch/access-engine/workplans/FLEX-WP-0031-decision-record-emission.md"
|
||||
},
|
||||
{
|
||||
"id": "FLEX-WP-0036",
|
||||
"status": "active",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 8,
|
||||
"file": "/home/worsch/access-engine/workplans/FLEX-WP-0036-runtime-rename-access-engine.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"secrets-engine": {
|
||||
"open_plans": 4,
|
||||
"nonresidual_plans": 4,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 5,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "SECRETS-WP-0006",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0006-catalog-lane-adoption.md"
|
||||
},
|
||||
{
|
||||
"id": "SECRETS-WP-0007",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0007-production-lifecycle-hardening.md"
|
||||
},
|
||||
{
|
||||
"id": "SECRETS-WP-0008",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md"
|
||||
},
|
||||
{
|
||||
"id": "SECRETS-WP-0009",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"ops-mason": {
|
||||
"open_plans": 5,
|
||||
"nonresidual_plans": 5,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 8,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "MASON-WP-0004",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0004-credential-inventory-descriptions.md"
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0005",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md"
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0006",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0006-readiness-tier-check.md"
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0009",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0009-keycape-secrets-engine-openbao-client-custody.md"
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0010",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0010-security-case-materialization.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"ops-warden": {
|
||||
"open_plans": 5,
|
||||
"nonresidual_plans": 5,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 8,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "WARDEN-WP-0027",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0027-credential-governance-lockdown.md"
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0034",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0034-layer-model-v07-conformance.md"
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0037",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md"
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0040",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 3,
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md"
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0044",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0044-security-case-follow-through.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"key-cape": {
|
||||
"open_plans": 2,
|
||||
"nonresidual_plans": 2,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 3,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "KEY-WP-0038",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/key-cape/workplans/KEY-WP-0038-forgejo-oidc-client.md"
|
||||
},
|
||||
{
|
||||
"id": "KEY-WP-0039",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/key-cape/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"user-engine": {
|
||||
"open_plans": 5,
|
||||
"nonresidual_plans": 5,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 7,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "USER-WP-0026",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0026-account-recovery.md"
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0027",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0027-account-journey-clarity.md"
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0028",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0028-user-journey-acceptance.md"
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0035",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0035-onboarding-handoff-findings.md"
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0037",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0037-hub-authority-lookup.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"tenant-engine": {
|
||||
"open_plans": 1,
|
||||
"nonresidual_plans": 0,
|
||||
"residual_plans": 1,
|
||||
"unfinished_tasks": 2,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "TEN-WP-0012",
|
||||
"status": "blocked",
|
||||
"flavor": "residual",
|
||||
"unfinished_tasks": 2,
|
||||
"file": "/home/worsch/tenant-engine/workplans/TEN-WP-0012-external-conformance-waits.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"gate-house": {
|
||||
"open_plans": 1,
|
||||
"nonresidual_plans": 1,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 1,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "GH-WP-0004",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/gate-house/workplans/GH-WP-0004-section-11-layer-declarations.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"kings-guard": {
|
||||
"open_plans": 1,
|
||||
"nonresidual_plans": 1,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 1,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "KG-WP-0005",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1,
|
||||
"file": "/home/worsch/kings-guard/workplans/KG-WP-0005-qonto-source-cadence-admission.md"
|
||||
}
|
||||
]
|
||||
},
|
||||
"policy-nexus": {
|
||||
"open_plans": 0,
|
||||
"nonresidual_plans": 0,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 0,
|
||||
"workplans": []
|
||||
},
|
||||
"informed-decision": {
|
||||
"open_plans": 1,
|
||||
"nonresidual_plans": 1,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 4,
|
||||
"workplans": [
|
||||
{
|
||||
"id": "INFD-WP-0008",
|
||||
"status": "backlog",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 4,
|
||||
"file": "/home/worsch/informed-decision/workplans/INFD-WP-0008-lifecycle-expansion-contracts.md"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"total": {
|
||||
"open_plans": 46,
|
||||
"nonresidual_plans": 44,
|
||||
"residual_plans": 2,
|
||||
"unfinished_tasks": 100
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,16 @@
|
|||
[
|
||||
{
|
||||
"repo": "informed-decision",
|
||||
"revision": "47881fc1ff262bb705e75e4b59b8ef4731780d87",
|
||||
"files": 28,
|
||||
"source_only": true,
|
||||
"native_change": false
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"revision": "8647587ca292b67857c79f4561d3264e7f8132ef",
|
||||
"files": 25,
|
||||
"source_only": true,
|
||||
"native_change": false
|
||||
}
|
||||
]
|
||||
|
|
@ -0,0 +1,12 @@
|
|||
[
|
||||
{
|
||||
"manifest": "/tmp/infd-zlib-native-product-acceptance-stage/manifest.json",
|
||||
"sha256": "a985b1b8978d169c95b8ee693f2d00f2146756854de04a48412f115e23a360b4",
|
||||
"file_count": 28
|
||||
},
|
||||
{
|
||||
"manifest": "/tmp/infd-zlib-platform-native-acceptance-stage/manifest.json",
|
||||
"sha256": "35953f6ec6340f3a60dd4a72ba68fb91a0bb88a7356b58dd8a94557ba71b6f4a",
|
||||
"file_count": 25
|
||||
}
|
||||
]
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
{
|
||||
"exact_image_available": true,
|
||||
"pulled": true,
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"image_config_id": "sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"exact_registry_digest_bound": true,
|
||||
"source_labels_match": true,
|
||||
"container_execution": false,
|
||||
"credentials_used": false
|
||||
}
|
||||
|
|
@ -0,0 +1,672 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"observed_at": "2026-10-11T10:44:51.809259+00:00",
|
||||
"native_changed": false,
|
||||
"protected_database_read": false,
|
||||
"secret_read": false,
|
||||
"deployment_generation": 25,
|
||||
"ready_replicas": 1,
|
||||
"sealed_live_deployment": {
|
||||
"apiVersion": "apps/v1",
|
||||
"kind": "Deployment",
|
||||
"metadata": {
|
||||
"annotations": {
|
||||
"argocd.argoproj.io/tracking-id": "informed-decision:apps/Deployment:informed-decision/informed-decision",
|
||||
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
||||
},
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision",
|
||||
"uid": "a588e10a-90d2-4883-975e-6dd8b8feca92"
|
||||
},
|
||||
"spec": {
|
||||
"progressDeadlineSeconds": 600,
|
||||
"replicas": 1,
|
||||
"revisionHistoryLimit": 10,
|
||||
"selector": {
|
||||
"matchLabels": {
|
||||
"app.kubernetes.io/name": "informed-decision"
|
||||
}
|
||||
},
|
||||
"strategy": {
|
||||
"type": "Recreate"
|
||||
},
|
||||
"template": {
|
||||
"metadata": {
|
||||
"annotations": {
|
||||
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
||||
},
|
||||
"labels": {
|
||||
"app.kubernetes.io/component": "review",
|
||||
"app.kubernetes.io/name": "informed-decision"
|
||||
}
|
||||
},
|
||||
"spec": {
|
||||
"automountServiceAccountToken": false,
|
||||
"containers": [
|
||||
{
|
||||
"env": [
|
||||
{
|
||||
"name": "INFD_KEYCAPE_ISSUER",
|
||||
"value": "https://kc.coulomb.social"
|
||||
},
|
||||
{
|
||||
"name": "INFD_CONTAINER_CONFIG",
|
||||
"value": "/configuration/runtime.json"
|
||||
}
|
||||
],
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
||||
"imagePullPolicy": "IfNotPresent",
|
||||
"livenessProbe": {
|
||||
"failureThreshold": 3,
|
||||
"httpGet": {
|
||||
"path": "/healthz",
|
||||
"port": "http",
|
||||
"scheme": "HTTP"
|
||||
},
|
||||
"periodSeconds": 10,
|
||||
"successThreshold": 1,
|
||||
"timeoutSeconds": 2
|
||||
},
|
||||
"name": "informed-decision",
|
||||
"ports": [
|
||||
{
|
||||
"containerPort": 8080,
|
||||
"name": "http",
|
||||
"protocol": "TCP"
|
||||
},
|
||||
{
|
||||
"containerPort": 8081,
|
||||
"name": "workload",
|
||||
"protocol": "TCP"
|
||||
}
|
||||
],
|
||||
"readinessProbe": {
|
||||
"failureThreshold": 3,
|
||||
"httpGet": {
|
||||
"path": "/healthz",
|
||||
"port": "http",
|
||||
"scheme": "HTTP"
|
||||
},
|
||||
"periodSeconds": 10,
|
||||
"successThreshold": 1,
|
||||
"timeoutSeconds": 2
|
||||
},
|
||||
"resources": {
|
||||
"limits": {
|
||||
"cpu": "500m",
|
||||
"memory": "256Mi"
|
||||
},
|
||||
"requests": {
|
||||
"cpu": "5m",
|
||||
"memory": "64Mi"
|
||||
}
|
||||
},
|
||||
"securityContext": {
|
||||
"allowPrivilegeEscalation": false,
|
||||
"capabilities": {
|
||||
"drop": [
|
||||
"ALL"
|
||||
]
|
||||
},
|
||||
"readOnlyRootFilesystem": true
|
||||
},
|
||||
"startupProbe": {
|
||||
"failureThreshold": 12,
|
||||
"httpGet": {
|
||||
"path": "/healthz",
|
||||
"port": "http",
|
||||
"scheme": "HTTP"
|
||||
},
|
||||
"periodSeconds": 10,
|
||||
"successThreshold": 1,
|
||||
"timeoutSeconds": 2
|
||||
},
|
||||
"terminationMessagePath": "/dev/termination-log",
|
||||
"terminationMessagePolicy": "File",
|
||||
"volumeMounts": [
|
||||
{
|
||||
"mountPath": "/data",
|
||||
"name": "data"
|
||||
},
|
||||
{
|
||||
"mountPath": "/run/informed-decision",
|
||||
"name": "runtime"
|
||||
},
|
||||
{
|
||||
"mountPath": "/tmp",
|
||||
"name": "tmp"
|
||||
},
|
||||
{
|
||||
"mountPath": "/configuration",
|
||||
"name": "configuration",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/policy",
|
||||
"name": "caller",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/audit",
|
||||
"name": "audit",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/kubernetes",
|
||||
"name": "kubernetes-api",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/workload-registry",
|
||||
"name": "workload-registry",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/requester",
|
||||
"name": "sitting-requester",
|
||||
"readOnly": true
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"dnsPolicy": "ClusterFirst",
|
||||
"restartPolicy": "Always",
|
||||
"schedulerName": "default-scheduler",
|
||||
"securityContext": {
|
||||
"fsGroup": 10001,
|
||||
"fsGroupChangePolicy": "OnRootMismatch",
|
||||
"runAsGroup": 10001,
|
||||
"runAsNonRoot": true,
|
||||
"runAsUser": 10001,
|
||||
"seccompProfile": {
|
||||
"type": "RuntimeDefault"
|
||||
}
|
||||
},
|
||||
"serviceAccount": "review",
|
||||
"serviceAccountName": "review",
|
||||
"terminationGracePeriodSeconds": 45,
|
||||
"volumes": [
|
||||
{
|
||||
"name": "data",
|
||||
"persistentVolumeClaim": {
|
||||
"claimName": "informed-decision-data"
|
||||
}
|
||||
},
|
||||
{
|
||||
"emptyDir": {
|
||||
"medium": "Memory",
|
||||
"sizeLimit": "16Mi"
|
||||
},
|
||||
"name": "runtime"
|
||||
},
|
||||
{
|
||||
"emptyDir": {
|
||||
"medium": "Memory",
|
||||
"sizeLimit": "16Mi"
|
||||
},
|
||||
"name": "tmp"
|
||||
},
|
||||
{
|
||||
"configMap": {
|
||||
"defaultMode": 292,
|
||||
"name": "informed-decision-runtime-6c221878d051"
|
||||
},
|
||||
"name": "configuration"
|
||||
},
|
||||
{
|
||||
"name": "caller",
|
||||
"projected": {
|
||||
"defaultMode": 288,
|
||||
"sources": [
|
||||
{
|
||||
"serviceAccountToken": {
|
||||
"audience": "flex-auth",
|
||||
"expirationSeconds": 3600,
|
||||
"path": "token"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "audit",
|
||||
"secret": {
|
||||
"defaultMode": 288,
|
||||
"items": [
|
||||
{
|
||||
"key": "token",
|
||||
"path": "token"
|
||||
}
|
||||
],
|
||||
"secretName": "informed-decision-audit"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "kubernetes-api",
|
||||
"projected": {
|
||||
"defaultMode": 288,
|
||||
"sources": [
|
||||
{
|
||||
"serviceAccountToken": {
|
||||
"expirationSeconds": 600,
|
||||
"path": "token"
|
||||
}
|
||||
},
|
||||
{
|
||||
"configMap": {
|
||||
"items": [
|
||||
{
|
||||
"key": "ca.crt",
|
||||
"path": "ca.crt"
|
||||
}
|
||||
],
|
||||
"name": "kube-root-ca.crt"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"configMap": {
|
||||
"defaultMode": 292,
|
||||
"name": "informed-decision-workload-registry"
|
||||
},
|
||||
"name": "workload-registry"
|
||||
},
|
||||
{
|
||||
"name": "sitting-requester",
|
||||
"secret": {
|
||||
"defaultMode": 288,
|
||||
"items": [
|
||||
{
|
||||
"key": "client-secret",
|
||||
"path": "client-secret"
|
||||
}
|
||||
],
|
||||
"optional": false,
|
||||
"secretName": "informed-decision-sitting-requester"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
},
|
||||
"candidate_deployment": {
|
||||
"apiVersion": "apps/v1",
|
||||
"kind": "Deployment",
|
||||
"metadata": {
|
||||
"annotations": {
|
||||
"argocd.argoproj.io/tracking-id": "informed-decision:apps/Deployment:informed-decision/informed-decision",
|
||||
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
||||
},
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision",
|
||||
"uid": "a588e10a-90d2-4883-975e-6dd8b8feca92"
|
||||
},
|
||||
"spec": {
|
||||
"progressDeadlineSeconds": 600,
|
||||
"replicas": 1,
|
||||
"revisionHistoryLimit": 10,
|
||||
"selector": {
|
||||
"matchLabels": {
|
||||
"app.kubernetes.io/name": "informed-decision"
|
||||
}
|
||||
},
|
||||
"strategy": {
|
||||
"type": "Recreate"
|
||||
},
|
||||
"template": {
|
||||
"metadata": {
|
||||
"annotations": {
|
||||
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
||||
},
|
||||
"labels": {
|
||||
"app.kubernetes.io/component": "review",
|
||||
"app.kubernetes.io/name": "informed-decision"
|
||||
}
|
||||
},
|
||||
"spec": {
|
||||
"automountServiceAccountToken": false,
|
||||
"containers": [
|
||||
{
|
||||
"env": [
|
||||
{
|
||||
"name": "INFD_KEYCAPE_ISSUER",
|
||||
"value": "https://kc.coulomb.social"
|
||||
},
|
||||
{
|
||||
"name": "INFD_CONTAINER_CONFIG",
|
||||
"value": "/configuration/runtime.json"
|
||||
}
|
||||
],
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"imagePullPolicy": "IfNotPresent",
|
||||
"livenessProbe": {
|
||||
"failureThreshold": 3,
|
||||
"httpGet": {
|
||||
"path": "/healthz",
|
||||
"port": "http",
|
||||
"scheme": "HTTP"
|
||||
},
|
||||
"periodSeconds": 10,
|
||||
"successThreshold": 1,
|
||||
"timeoutSeconds": 2
|
||||
},
|
||||
"name": "informed-decision",
|
||||
"ports": [
|
||||
{
|
||||
"containerPort": 8080,
|
||||
"name": "http",
|
||||
"protocol": "TCP"
|
||||
},
|
||||
{
|
||||
"containerPort": 8081,
|
||||
"name": "workload",
|
||||
"protocol": "TCP"
|
||||
}
|
||||
],
|
||||
"readinessProbe": {
|
||||
"failureThreshold": 3,
|
||||
"httpGet": {
|
||||
"path": "/healthz",
|
||||
"port": "http",
|
||||
"scheme": "HTTP"
|
||||
},
|
||||
"periodSeconds": 10,
|
||||
"successThreshold": 1,
|
||||
"timeoutSeconds": 2
|
||||
},
|
||||
"resources": {
|
||||
"limits": {
|
||||
"cpu": "500m",
|
||||
"memory": "256Mi"
|
||||
},
|
||||
"requests": {
|
||||
"cpu": "5m",
|
||||
"memory": "64Mi"
|
||||
}
|
||||
},
|
||||
"securityContext": {
|
||||
"allowPrivilegeEscalation": false,
|
||||
"capabilities": {
|
||||
"drop": [
|
||||
"ALL"
|
||||
]
|
||||
},
|
||||
"readOnlyRootFilesystem": true
|
||||
},
|
||||
"startupProbe": {
|
||||
"failureThreshold": 12,
|
||||
"httpGet": {
|
||||
"path": "/healthz",
|
||||
"port": "http",
|
||||
"scheme": "HTTP"
|
||||
},
|
||||
"periodSeconds": 10,
|
||||
"successThreshold": 1,
|
||||
"timeoutSeconds": 2
|
||||
},
|
||||
"terminationMessagePath": "/dev/termination-log",
|
||||
"terminationMessagePolicy": "File",
|
||||
"volumeMounts": [
|
||||
{
|
||||
"mountPath": "/data",
|
||||
"name": "data"
|
||||
},
|
||||
{
|
||||
"mountPath": "/run/informed-decision",
|
||||
"name": "runtime"
|
||||
},
|
||||
{
|
||||
"mountPath": "/tmp",
|
||||
"name": "tmp"
|
||||
},
|
||||
{
|
||||
"mountPath": "/configuration",
|
||||
"name": "configuration",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/policy",
|
||||
"name": "caller",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/audit",
|
||||
"name": "audit",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/kubernetes",
|
||||
"name": "kubernetes-api",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/workload-registry",
|
||||
"name": "workload-registry",
|
||||
"readOnly": true
|
||||
},
|
||||
{
|
||||
"mountPath": "/var/run/secrets/informed-decision/requester",
|
||||
"name": "sitting-requester",
|
||||
"readOnly": true
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"dnsPolicy": "ClusterFirst",
|
||||
"restartPolicy": "Always",
|
||||
"schedulerName": "default-scheduler",
|
||||
"securityContext": {
|
||||
"fsGroup": 10001,
|
||||
"fsGroupChangePolicy": "OnRootMismatch",
|
||||
"runAsGroup": 10001,
|
||||
"runAsNonRoot": true,
|
||||
"runAsUser": 10001,
|
||||
"seccompProfile": {
|
||||
"type": "RuntimeDefault"
|
||||
}
|
||||
},
|
||||
"serviceAccount": "review",
|
||||
"serviceAccountName": "review",
|
||||
"terminationGracePeriodSeconds": 45,
|
||||
"volumes": [
|
||||
{
|
||||
"name": "data",
|
||||
"persistentVolumeClaim": {
|
||||
"claimName": "informed-decision-data"
|
||||
}
|
||||
},
|
||||
{
|
||||
"emptyDir": {
|
||||
"medium": "Memory",
|
||||
"sizeLimit": "16Mi"
|
||||
},
|
||||
"name": "runtime"
|
||||
},
|
||||
{
|
||||
"emptyDir": {
|
||||
"medium": "Memory",
|
||||
"sizeLimit": "16Mi"
|
||||
},
|
||||
"name": "tmp"
|
||||
},
|
||||
{
|
||||
"configMap": {
|
||||
"defaultMode": 292,
|
||||
"name": "informed-decision-runtime-6c221878d051"
|
||||
},
|
||||
"name": "configuration"
|
||||
},
|
||||
{
|
||||
"name": "caller",
|
||||
"projected": {
|
||||
"defaultMode": 288,
|
||||
"sources": [
|
||||
{
|
||||
"serviceAccountToken": {
|
||||
"audience": "flex-auth",
|
||||
"expirationSeconds": 3600,
|
||||
"path": "token"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "audit",
|
||||
"secret": {
|
||||
"defaultMode": 288,
|
||||
"items": [
|
||||
{
|
||||
"key": "token",
|
||||
"path": "token"
|
||||
}
|
||||
],
|
||||
"secretName": "informed-decision-audit"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "kubernetes-api",
|
||||
"projected": {
|
||||
"defaultMode": 288,
|
||||
"sources": [
|
||||
{
|
||||
"serviceAccountToken": {
|
||||
"expirationSeconds": 600,
|
||||
"path": "token"
|
||||
}
|
||||
},
|
||||
{
|
||||
"configMap": {
|
||||
"items": [
|
||||
{
|
||||
"key": "ca.crt",
|
||||
"path": "ca.crt"
|
||||
}
|
||||
],
|
||||
"name": "kube-root-ca.crt"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"configMap": {
|
||||
"defaultMode": 292,
|
||||
"name": "informed-decision-workload-registry"
|
||||
},
|
||||
"name": "workload-registry"
|
||||
},
|
||||
{
|
||||
"name": "sitting-requester",
|
||||
"secret": {
|
||||
"defaultMode": 288,
|
||||
"items": [
|
||||
{
|
||||
"key": "client-secret",
|
||||
"path": "client-secret"
|
||||
}
|
||||
],
|
||||
"optional": false,
|
||||
"secretName": "informed-decision-sitting-requester"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
},
|
||||
"sealed_dependencies": {
|
||||
"configmap": {
|
||||
"apiVersion": "v1",
|
||||
"immutable": true,
|
||||
"kind": "ConfigMap",
|
||||
"metadata": {
|
||||
"annotations": {
|
||||
"argocd.argoproj.io/tracking-id": "informed-decision:/ConfigMap:informed-decision/informed-decision-runtime-6c221878d051",
|
||||
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
||||
},
|
||||
"name": "informed-decision-runtime-6c221878d051",
|
||||
"namespace": "informed-decision",
|
||||
"uid": "90113d2d-54d9-4e82-b1d3-90b49ebed2b5"
|
||||
},
|
||||
"canonical_data_sha256": "8ec462d12347548f506eeebf1e3c7cc47648019c8a783804d09bcc79b0f22af6"
|
||||
},
|
||||
"pvc": {
|
||||
"apiVersion": "v1",
|
||||
"kind": "PersistentVolumeClaim",
|
||||
"metadata": {
|
||||
"annotations": {
|
||||
"argocd.argoproj.io/tracking-id": "informed-decision:/PersistentVolumeClaim:informed-decision/informed-decision-data",
|
||||
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover",
|
||||
"pv.kubernetes.io/bind-completed": "yes",
|
||||
"pv.kubernetes.io/bound-by-controller": "yes",
|
||||
"volume.beta.kubernetes.io/storage-provisioner": "rancher.io/local-path",
|
||||
"volume.kubernetes.io/selected-node": "239.62.205.92.host.secureserver.net",
|
||||
"volume.kubernetes.io/storage-provisioner": "rancher.io/local-path"
|
||||
},
|
||||
"finalizers": [
|
||||
"kubernetes.io/pvc-protection"
|
||||
],
|
||||
"name": "informed-decision-data",
|
||||
"namespace": "informed-decision",
|
||||
"uid": "d80b25b1-141a-441b-b205-98fa2fd98b7c"
|
||||
},
|
||||
"spec": {
|
||||
"accessModes": [
|
||||
"ReadWriteOnce"
|
||||
],
|
||||
"resources": {
|
||||
"requests": {
|
||||
"storage": "1Gi"
|
||||
}
|
||||
},
|
||||
"storageClassName": "local-path",
|
||||
"volumeMode": "Filesystem",
|
||||
"volumeName": "pvc-d80b25b1-141a-441b-b205-98fa2fd98b7c"
|
||||
}
|
||||
},
|
||||
"pvc_phase": "Bound"
|
||||
},
|
||||
"argo": {
|
||||
"uid": "499868f2-eabc-4df4-ae31-b89ce58d750d",
|
||||
"source": {
|
||||
"path": "deploy/lifecycle",
|
||||
"repoURL": "https://forgejo.coulomb.social/coulomb/informed-decision.git",
|
||||
"targetRevision": "c96b0c6d881e855d1d158003c6de90ef390262e2"
|
||||
},
|
||||
"destination": {
|
||||
"namespace": "informed-decision",
|
||||
"server": "https://kubernetes.default.svc"
|
||||
},
|
||||
"automated": false,
|
||||
"health": {
|
||||
"lastTransitionTime": "2026-10-11T07:00:42Z",
|
||||
"status": "Healthy"
|
||||
},
|
||||
"sync": {
|
||||
"comparedTo": {
|
||||
"destination": {
|
||||
"namespace": "informed-decision",
|
||||
"server": "https://kubernetes.default.svc"
|
||||
},
|
||||
"source": {
|
||||
"path": "deploy/lifecycle",
|
||||
"repoURL": "https://forgejo.coulomb.social/coulomb/informed-decision.git",
|
||||
"targetRevision": "c96b0c6d881e855d1d158003c6de90ef390262e2"
|
||||
}
|
||||
},
|
||||
"revision": "c96b0c6d881e855d1d158003c6de90ef390262e2",
|
||||
"status": "OutOfSync"
|
||||
}
|
||||
},
|
||||
"server_dry_run_passed": true,
|
||||
"admission_only_image_delta": true,
|
||||
"client_diff_exit": 1,
|
||||
"client_diff_sha256": "ee53537b71df69ea1ce4a67498a47524d1aef87aa5ad1e9499c3f699f142762e",
|
||||
"allocatable_cpu_m": 4000,
|
||||
"requested_cpu_m": 3460,
|
||||
"strategy": "Recreate"
|
||||
}
|
||||
|
|
@ -0,0 +1,48 @@
|
|||
{
|
||||
"before": {
|
||||
"all_checks_pass": true,
|
||||
"observed_at": "2026-10-11T11:20:14.889361+00:00",
|
||||
"deployment_uid": "a588e10a-90d2-4883-975e-6dd8b8feca92",
|
||||
"generation": 26,
|
||||
"ready_replicas": 1,
|
||||
"pod_name": "informed-decision-68d5f488d8-c576r",
|
||||
"pod_uid": "1153f806-1e05-4596-baf3-a4fa8adf08be",
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"image_id": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"application_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"application_health": "Healthy",
|
||||
"native_data_change": false
|
||||
},
|
||||
"native_provider": {
|
||||
"request_memo_id": "infd-20261011-zlib-remediation-r1",
|
||||
"request_memo_version": 1,
|
||||
"request_identity_source": "fixed-authenticated-route",
|
||||
"has_review": true,
|
||||
"disposition_count": 1,
|
||||
"dispositions_interpreted": false,
|
||||
"approval_inferred": false,
|
||||
"current_approval_claimed": false,
|
||||
"http_status": 200,
|
||||
"observed_at": "2026-10-11T11:20:25.876927+00:00",
|
||||
"native_authenticated_canonical_lifecycle_outcomes": true,
|
||||
"native_provider_path_returned": true,
|
||||
"credential_material_output": false
|
||||
},
|
||||
"after": {
|
||||
"all_checks_pass": true,
|
||||
"observed_at": "2026-10-11T11:20:27.541827+00:00",
|
||||
"deployment_uid": "a588e10a-90d2-4883-975e-6dd8b8feca92",
|
||||
"generation": 26,
|
||||
"ready_replicas": 1,
|
||||
"pod_name": "informed-decision-68d5f488d8-c576r",
|
||||
"pod_uid": "1153f806-1e05-4596-baf3-a4fa8adf08be",
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"image_id": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"application_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"application_health": "Healthy",
|
||||
"native_data_change": false
|
||||
},
|
||||
"provider_command_sha256": "ddfe2619f4847238fe79ec779a15b0d8df5d178cbed989ac2d73c1480b57a706",
|
||||
"founder_approval_inferred": false,
|
||||
"protected_database_contents_exported": false
|
||||
}
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"only_disposable_offline_volume_removed": "infd-zlib-r1-restore-20261011",
|
||||
"native_and_offcluster_original_snapshots_retained": true
|
||||
}
|
||||
|
|
@ -0,0 +1,23 @@
|
|||
{
|
||||
"proposal_id": "INFD-WP-0009-T05/zlib85091-r1",
|
||||
"memo_id": "infd-20261011-zlib-remediation-r1",
|
||||
"memo_version": 1,
|
||||
"memo_sha256": "5dea0d404e4d13683fbf71d56273c06db7a6a916ab68759a90d7394005eee206",
|
||||
"source_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"executor_plan_sha256": "d871081999215bd3850ab1173064ed6cb6d7c23b26d9c3d5b3c5940e698d4c61",
|
||||
"native_outcome_sha256": "7cd00372d1a7c4fb4dc92e2c550d8d4c586f96cda3aecec8016a883370893c86",
|
||||
"activation": "APPROVED",
|
||||
"authority_mode": "ADMINISTER",
|
||||
"target": "realm:kubernetes/railiance01/informed-decision",
|
||||
"verification_method": "root-fixed-origin-native-readback",
|
||||
"runtime_authenticated_grant": false,
|
||||
"outcome_query": "/lifecycle/memos/infd-20261011-zlib-remediation-r1/outcomes?version=1",
|
||||
"verified_at": "2026-10-11T11:19:17.592644+00:00",
|
||||
"review_memo_id": "review-2cf690a6-8c46-4faa-826c-a24a88d53dea",
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"bounded_outage_rollback_pre_authorized": true,
|
||||
"note": "Template is not evidence/approval. Root sets scopedpreauthorizationtrue only after actual confirmed founder acceptance of this exact new packet/terms, retains original currentreadback before release.",
|
||||
"native_observed_at": "2026-10-11T11:19:18.476232+00:00"
|
||||
}
|
||||
|
|
@ -0,0 +1,53 @@
|
|||
{
|
||||
"phase": "cutover-backup",
|
||||
"all_checks_pass": true,
|
||||
"raw_output_withheld": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"verified_at": "2026-10-11T11:17:33.972874+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"source_readonly_baseline": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"snapshot_readonly": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"snapshot_sha256": "e0bac513f7445bf702c504ec7c15a1eb277ed7a48529099437d0dd63cf0679bb",
|
||||
"snapshot_bytes": 23347200,
|
||||
"snapshot_file": "cutover.sqlite",
|
||||
"native_parent_private": true,
|
||||
"native_uid": 10001,
|
||||
"pod_name": "informed-decision-5557446c88-lvm88",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662"
|
||||
}
|
||||
|
|
@ -0,0 +1,36 @@
|
|||
{
|
||||
"phase": "cutover-copy",
|
||||
"all_checks_pass": true,
|
||||
"raw_output_withheld": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"verified_at": "2026-10-11T11:18:05.531924+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"snapshot_file": "cutover.sqlite",
|
||||
"snapshot_bytes": 23347200,
|
||||
"snapshot_sha256": "e0bac513f7445bf702c504ec7c15a1eb277ed7a48529099437d0dd63cf0679bb",
|
||||
"snapshot_readonly": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"pod_name": "informed-decision-5557446c88-lvm88",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662",
|
||||
"off_cluster_private_copy_verified": true,
|
||||
"snapshot_contents_output": false
|
||||
}
|
||||
|
|
@ -0,0 +1,53 @@
|
|||
{
|
||||
"phase": "drill-backup",
|
||||
"all_checks_pass": true,
|
||||
"raw_output_withheld": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"verified_at": "2026-10-11T11:11:32.769166+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"source_readonly_baseline": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"snapshot_readonly": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"snapshot_sha256": "97d7dfb8fce4f720456468ff169f5e2b2bcb1edc328687b1a6c1225b66f2b0ba",
|
||||
"snapshot_bytes": 23330816,
|
||||
"snapshot_file": "drill.sqlite",
|
||||
"native_parent_private": true,
|
||||
"native_uid": 10001,
|
||||
"pod_name": "informed-decision-5557446c88-lvm88",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662"
|
||||
}
|
||||
|
|
@ -0,0 +1,36 @@
|
|||
{
|
||||
"phase": "drill-copy",
|
||||
"all_checks_pass": true,
|
||||
"raw_output_withheld": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"verified_at": "2026-10-11T11:12:17.399753+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"snapshot_file": "drill.sqlite",
|
||||
"snapshot_bytes": 23330816,
|
||||
"snapshot_sha256": "97d7dfb8fce4f720456468ff169f5e2b2bcb1edc328687b1a6c1225b66f2b0ba",
|
||||
"snapshot_readonly": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"pod_name": "informed-decision-5557446c88-lvm88",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662",
|
||||
"off_cluster_private_copy_verified": true,
|
||||
"snapshot_contents_output": false
|
||||
}
|
||||
File diff suppressed because it is too large
Load diff
|
|
@ -0,0 +1,68 @@
|
|||
{
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
||||
"artifact_source_revision": "9b4bb25d325698ae543e7e8a8a3c3592db1f58fc",
|
||||
"scanner": "aquasec/trivy@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969",
|
||||
"full_allseverity_scan": true,
|
||||
"no_suppression": true,
|
||||
"exit_code": 0,
|
||||
"completed_at": "2026-10-11T10:48:46.790940+00:00",
|
||||
"db_metadata": {
|
||||
"Version": 2,
|
||||
"NextUpdate": "2026-10-11T18:59:50.889010572Z",
|
||||
"UpdatedAt": "2026-10-10T18:59:50.889010923Z",
|
||||
"DownloadedAt": "2026-10-10T23:32:32.380033131Z"
|
||||
},
|
||||
"db_sha256": "03cacb40452ceb74afdfca072cb82f79ee884dfac006ef24a4dfdad133b0f917",
|
||||
"full_report_sha256": "42473695abfb99cb32ae29e607120996d339683da7987e9a91117aab9a7e5c00",
|
||||
"public_archive_sha256": "d24993af69028c6ac43640ee17dcccdc3e962cda4bc28dc8000b4ac77728bc2d",
|
||||
"archive_config_and_11_layers_verified": true,
|
||||
"started_at": "2026-10-11T10:48:21.420853+00:00",
|
||||
"command": [
|
||||
"docker",
|
||||
"--config",
|
||||
"/tmp/infd-zlib-fresh-rescan-20261011T104821420853Z/empty-docker-config",
|
||||
"--host",
|
||||
"unix:///var/run/docker.sock",
|
||||
"run",
|
||||
"--rm",
|
||||
"--user",
|
||||
"1000:1000",
|
||||
"--network",
|
||||
"none",
|
||||
"--cpus",
|
||||
"1",
|
||||
"--memory",
|
||||
"1g",
|
||||
"--read-only",
|
||||
"--tmpfs",
|
||||
"/tmp:rw,nosuid,nodev,noexec,size=268435456",
|
||||
"--cap-drop",
|
||||
"ALL",
|
||||
"--security-opt",
|
||||
"no-new-privileges",
|
||||
"-v",
|
||||
"/tmp/infd-zlib-published-9b4bb25d/image.tar:/artifact/image.tar:ro",
|
||||
"-v",
|
||||
"/tmp/infd-zlib-fresh-rescan-20261011T104821420853Z/scanner-cache:/cache",
|
||||
"-v",
|
||||
"/tmp/infd-zlib-fresh-rescan-20261011T104821420853Z:/output",
|
||||
"aquasec/trivy@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969",
|
||||
"image",
|
||||
"--input",
|
||||
"/artifact/image.tar",
|
||||
"--cache-dir",
|
||||
"/cache",
|
||||
"--skip-db-update",
|
||||
"--skip-java-db-update",
|
||||
"--scanners",
|
||||
"vuln",
|
||||
"--format",
|
||||
"json",
|
||||
"--output",
|
||||
"/output/trivy-full.json"
|
||||
],
|
||||
"raw_output_withheld": true,
|
||||
"native_actions": false,
|
||||
"native_database_read": false,
|
||||
"credential_read": false
|
||||
}
|
||||
|
|
@ -0,0 +1,182 @@
|
|||
{
|
||||
"repo_slug": "informed-decision",
|
||||
"repo_path": "/home/worsch/informed-decision",
|
||||
"issues": [
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-35",
|
||||
"message": "Repo Manager warning: GOAL.md: durable flavors use INTENT.md; GOAL.md is the project-flavor purpose document",
|
||||
"file_path": "GOAL.md",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-33",
|
||||
"message": "WORK-RECORDS.md is missing or stale \u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)",
|
||||
"file_path": "WORK-RECORDS.md",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T02' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T02",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T03' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T03",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T04' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T04",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T05' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T05",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T06' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T06",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T07' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T07",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T08' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T08",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T09' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T09",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-11",
|
||||
"message": "Task 'INFD-WP-ADHOC-2026-10-11-T10' has no state_hub_task_id",
|
||||
"file_path": "workplans/ADHOC-2026-10-11.md#INFD-WP-ADHOC-2026-10-11-T10",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-04",
|
||||
"message": "Status drift in 'infd-wp-0009': file='finished' db='active' (file wins)",
|
||||
"file_path": "workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md",
|
||||
"db_id": "77eaeabf-0644-595f-b3d5-1168e6a294c4",
|
||||
"file_value": "finished",
|
||||
"db_value": "active",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-10",
|
||||
"message": "Task status drift 'INFD-WP-0009-T05': file='done' db='progress' (file wins)",
|
||||
"file_path": "workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md#INFD-WP-0009-T05",
|
||||
"db_id": "1743596f-8558-5a6b-afef-4dd5c1e9c0ae",
|
||||
"file_value": "done",
|
||||
"db_value": "progress",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-22",
|
||||
"message": "Task description drift 'INFD-WP-0009-T05': file content differs from DB (file wins)",
|
||||
"file_path": "workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md#INFD-WP-0009-T05",
|
||||
"db_id": "1743596f-8558-5a6b-afef-4dd5c1e9c0ae",
|
||||
"file_value": "Owner follow-through `INFD-RISK-20261011-ZLIB-85091` tracks actual published\nbase and purpose-overlay scan finding CVE-2",
|
||||
"db_value": "Owner follow-through `INFD-RISK-20261011-ZLIB-85091` tracks actual published\nbase and purpose-overlay scan finding CVE-2",
|
||||
"fixable": true
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-28",
|
||||
"message": "3 unread message(s) lack thread_id for supersession tracking: access-engine:9b15c762, access-engine:ea7d5873, access-engine:7fcb1eb7",
|
||||
"file_path": "",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
}
|
||||
],
|
||||
"fixes_applied": [
|
||||
"bindings: synced 11/11",
|
||||
"C-17 cleared: pushed 1 backlogged commit(s)",
|
||||
"C-33 fixed: regenerated WORK-RECORDS.md",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T02' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T03' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T04' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T05' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T06' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T07' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T08' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T09' in finished workstream \u2014 not created",
|
||||
"C-11 skipped: task 'INFD-WP-ADHOC-2026-10-11-T10' in finished workstream \u2014 not created",
|
||||
"C-04 fixed: workstream 77eaeabf\u2026 status \u2192 'finished'",
|
||||
"C-10 fixed: task 1743596f\u2026 status \u2192 'done'",
|
||||
"C-22 fixed: task 1743596f\u2026 description updated",
|
||||
"brief: .custodian-brief.md updated",
|
||||
"push: pushed"
|
||||
],
|
||||
"summary": {
|
||||
"fail": 0,
|
||||
"automation_error": 0,
|
||||
"warn": 15,
|
||||
"info": 0
|
||||
},
|
||||
"result": "warn"
|
||||
}
|
||||
|
|
@ -0,0 +1,82 @@
|
|||
[
|
||||
{
|
||||
"path": "drill-backup.json",
|
||||
"sha256": "53ea89341b3ed9d62b6db11070c19a3f1a97aa705ca5e69f75e5badb6d0f085e"
|
||||
},
|
||||
{
|
||||
"path": "drill-copy.json",
|
||||
"sha256": "06011d148a022d7249f85e794455f297bf8193e19480762b667c8a42afa30e4e"
|
||||
},
|
||||
{
|
||||
"path": "offline-verify.json",
|
||||
"sha256": "4cf2df2c91877c87be8eebb279640473bb3627fe93ed4467467058e8f7baa7ab"
|
||||
},
|
||||
{
|
||||
"path": "cleanup-offline.json",
|
||||
"sha256": "ee89cddb506e65959c96b8da453443cd77e3a5cce927e0102acf56f28c38408c"
|
||||
},
|
||||
{
|
||||
"path": "cutover-backup.json",
|
||||
"sha256": "3d7a79ddb6f29368284a2d87ffbf350e27a0548750e29e8a532ad9736b3e2cc7"
|
||||
},
|
||||
{
|
||||
"path": "cutover-copy.json",
|
||||
"sha256": "14f008e0b8a7b1447847c3c02f1a07ffa13285832f91a6c5a795200f1c68c12f"
|
||||
},
|
||||
{
|
||||
"path": "release.json",
|
||||
"sha256": "05cb8b520c9414b5f3a39b2fa5f9b6bf07e93145390fd252c7ddf8cd618687d7"
|
||||
},
|
||||
{
|
||||
"path": "verify.json",
|
||||
"sha256": "efe87612f116839340a8e4c777ee7a66f806c8b8ded7f4a13451ec858c838f9a"
|
||||
},
|
||||
{
|
||||
"path": "canonical-provider-verification.json",
|
||||
"sha256": "bee994ec4a965f2dccdd252feeb4b527f523fad172db8999849e7c9bc2b12794"
|
||||
},
|
||||
{
|
||||
"path": "fresh-scan-receipt.json",
|
||||
"sha256": "0336de3a48d9e1af3e0d74ef7c4a4c01c3a0ac4418a1d84856e87c424dda6db1"
|
||||
},
|
||||
{
|
||||
"path": "fresh-scan-full.json",
|
||||
"sha256": "42473695abfb99cb32ae29e607120996d339683da7987e9a91117aab9a7e5c00"
|
||||
},
|
||||
{
|
||||
"path": "confirmed-root-authority.json",
|
||||
"sha256": "0d64760ba43581a19ec74489e655e89af150083aa59cea2414c12faa76912e88"
|
||||
},
|
||||
{
|
||||
"path": "approved-native-preflight.json",
|
||||
"sha256": "90a8222c400c8e21e4850111fd91c22be9d33c3de9e3351da2bb49c69c3d40eb"
|
||||
},
|
||||
{
|
||||
"path": "root-clock-diagnosis.json",
|
||||
"sha256": "6e3cf5fee7471a58016652b7aa8a11756b40e0c8c75c5b74292fad8e11ec6ffe"
|
||||
},
|
||||
{
|
||||
"path": "prephase-refusal-first.json",
|
||||
"sha256": "ea63e675da65771a2971030e2b9f55b5c466f70209718be3d0bad8e0b314843d"
|
||||
},
|
||||
{
|
||||
"path": "prephase-refusal-second.json",
|
||||
"sha256": "ea63e675da65771a2971030e2b9f55b5c466f70209718be3d0bad8e0b314843d"
|
||||
},
|
||||
{
|
||||
"path": "prephase-refusal-traced.json",
|
||||
"sha256": "2932b60db10ce8295b376e6b5964ce695a489699782dd03eb02d9cff9c25bfb6"
|
||||
},
|
||||
{
|
||||
"path": "root-authority-helper-before-clock-correction.py",
|
||||
"sha256": "64afd31c9776bd38c84f82972800fe59cbfb34b5315e9cb56aa25f5eb0e4c96d"
|
||||
},
|
||||
{
|
||||
"path": "root-authority-helper-final.py",
|
||||
"sha256": "0e4fde2db800d0055c5ef94bd4efcb4f29207dfdb7fbab5df370bac0c65aa42a"
|
||||
},
|
||||
{
|
||||
"path": "approved-local-image-readiness.json",
|
||||
"sha256": "285bd23bc05a41fe9942e399527594da896f9a2160af757c9b7ffa9e006fbf37"
|
||||
}
|
||||
]
|
||||
|
|
@ -0,0 +1,68 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"offline_volume": "infd-zlib-r1-restore-20261011",
|
||||
"offline_readonly": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 59,
|
||||
"pending": 0,
|
||||
"records": 17
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
}
|
||||
},
|
||||
"offline_post_admin_readonly": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 59,
|
||||
"pending": 0,
|
||||
"records": 17
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
}
|
||||
},
|
||||
"original_snapshot_hash_unchanged": true,
|
||||
"created_volume_identity": {
|
||||
"Name": "infd-zlib-r1-restore-20261011",
|
||||
"Labels": {
|
||||
"informed-decision.attempt": "643de582-9501-45dd-bac1-754b8524f5b9",
|
||||
"informed-decision.case": "infd-zlib-20261011-r1",
|
||||
"informed-decision.use": "offline-restore-only"
|
||||
},
|
||||
"Driver": "local",
|
||||
"Scope": "local",
|
||||
"CreatedAt": "2026-10-11T13:16:36+02:00"
|
||||
},
|
||||
"admin_counts": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
}
|
||||
},
|
||||
"network": "none",
|
||||
"runtime_tokens_or_config_mounted": false,
|
||||
"service_entrypoint_started": false,
|
||||
"original_snapshot_retained": true
|
||||
}
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
{
|
||||
"all_checks_pass": false,
|
||||
"phase": "drill-backup",
|
||||
"status": "phase_receipt_unverified",
|
||||
"raw_output_withheld": true
|
||||
}
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
{
|
||||
"all_checks_pass": false,
|
||||
"phase": "drill-backup",
|
||||
"status": "phase_receipt_unverified",
|
||||
"raw_output_withheld": true
|
||||
}
|
||||
|
|
@ -0,0 +1,33 @@
|
|||
{
|
||||
"all_checks_pass": false,
|
||||
"phase": "drill-backup",
|
||||
"status": "prephase_receipt_unverified",
|
||||
"exception_locations": [
|
||||
{
|
||||
"file": "actuator.py",
|
||||
"line": 321,
|
||||
"exception_type": "ValueError"
|
||||
},
|
||||
{
|
||||
"file": "actuator.py",
|
||||
"line": 23,
|
||||
"exception_type": "ValueError"
|
||||
},
|
||||
{
|
||||
"file": "actuator.py",
|
||||
"line": 325,
|
||||
"exception_type": "ValueError"
|
||||
},
|
||||
{
|
||||
"file": "actuator.py",
|
||||
"line": 397,
|
||||
"exception_type": "ValueError"
|
||||
},
|
||||
{
|
||||
"file": "actuator.py",
|
||||
"line": 399,
|
||||
"exception_type": "SystemExit"
|
||||
}
|
||||
],
|
||||
"raw_output_withheld": true
|
||||
}
|
||||
|
|
@ -0,0 +1,398 @@
|
|||
{
|
||||
"repo_slug": "railiance-platform",
|
||||
"repo_path": "/home/worsch/railiance-platform",
|
||||
"issues": [
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-35",
|
||||
"message": "Repo Manager missing: README.md: README.md is required for flavor tooling",
|
||||
"file_path": "README.md",
|
||||
"db_id": "",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-23",
|
||||
"message": "Lifecycle drift in 'rpf-wp-0053': workplan status 'proposed' has an active task \u2014 report only (ADR-007: do not auto-promote proposed)",
|
||||
"file_path": "workplans/RPF-WP-0053-coulomb-paired-backup-admission.md",
|
||||
"db_id": "cb55e474-c7a5-5c6f-bd72-ce65f853e3e3",
|
||||
"file_value": "proposed",
|
||||
"db_value": "proposed",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0004' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260702-RPF-WP-0023-workload-kv-access-lanes.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0004",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0005' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260702-RPF-WP-0024-credential-change-approval-workflow.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0005",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0006' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260702-RPF-WP-0024-credential-change-approval-workflow.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0006",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0005' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0005",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0006' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0006",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0007",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0004' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0004",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0007",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0008' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0008",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0004' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0004",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0007",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0008' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0008",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0007",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-20",
|
||||
"message": "Workplan dependency target 'RAILIANCE-WP-0008' is not linked to State Hub",
|
||||
"file_path": "workplans/archived/260905-RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAILIANCE-WP-0008",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0003@retired-20260826' (id=665b3b9b\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "665b3b9b-608a-4be4-84b6-dcb8261ff57b",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0004@retired-20260826' (id=e57e487b\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "e57e487b-8557-439d-8093-0457c73ede93",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0005@retired-20260826' (id=2731fece\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "2731fece-6c49-45b8-ab8a-4ea6c04ac603",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0006@retired-20260826' (id=96c8a93d\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "96c8a93d-7a5a-4fa9-8f7b-865119551da3",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0007@retired-20260826' (id=4d7ce243\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "4d7ce243-f40a-4249-a46a-a24f75d6fe4c",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0008@retired-20260826' (id=671898ef\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "671898ef-2378-4814-b8f6-066148cdad46",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0009@retired-20260826' (id=b059c81d\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "b059c81d-96f1-451f-896f-a05cd73744a1",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0010@retired-20260826' (id=f364d405\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "f364d405-a85d-4b89-b600-1964ab436cad",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "FAIL",
|
||||
"check_id": "C-07",
|
||||
"message": "Non-closed DB workstream 'railiance-wp-0029@retired-20260826' (id=038bc3c0\u2026) has no backing workplan file \u2014 ADR-001 violation",
|
||||
"file_path": "",
|
||||
"db_id": "038bc3c0-4492-5b91-95eb-ae515ca205df",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "FAIL",
|
||||
"check_id": "C-07",
|
||||
"message": "Non-closed DB workstream 'railiance-wp-0024@retired-20260826' (id=88c4ef7f\u2026) has no backing workplan file \u2014 ADR-001 violation",
|
||||
"file_path": "",
|
||||
"db_id": "88c4ef7f-0af8-580e-90dc-a2bae2675a4d",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0023@retired-20260826' (id=ec52fbe6\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "ec52fbe6-571b-570e-884b-c7a32ff7bcc8",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0025@retired-20260826' (id=2422d4e7\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "2422d4e7-2125-591e-8e95-80ecc6e09da0",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "FAIL",
|
||||
"check_id": "C-07",
|
||||
"message": "Non-closed DB workstream 'railiance-wp-0027@retired-20260826' (id=6f8a6cbc\u2026) has no backing workplan file \u2014 ADR-001 violation",
|
||||
"file_path": "",
|
||||
"db_id": "6f8a6cbc-c076-5f0a-ade2-281a7ec71360",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0026@retired-20260826' (id=73878f8d\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "73878f8d-d8bb-5845-8a5c-91cdd83c1066",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0016@retired-20260826' (id=857ca302\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "857ca302-bb94-5d41-a649-1aa966368df4",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0022@retired-20260826' (id=a7977cbf\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "a7977cbf-ab43-56b7-b7a9-ceb52382b341",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-platform-railiance-wp-0011@retired-20260826' (id=3f9fd8de\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "3f9fd8de-7235-4486-aaa7-634dba2bb6fa",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0028@retired-20260826' (id=022dda1f\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "022dda1f-8772-57ad-862e-672924455f11",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0017@retired-20260826' (id=16e8f234\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "16e8f234-9305-5ff3-af82-4639215a0c54",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "INFO",
|
||||
"check_id": "C-08",
|
||||
"message": "Closed DB workstream 'railiance-wp-0015@retired-20260826' (id=1c73af72\u2026, status=finished) has no backing workplan file",
|
||||
"file_path": "",
|
||||
"db_id": "1c73af72-fd4b-5ab6-8ff7-a3c302bf55a5",
|
||||
"file_value": "",
|
||||
"db_value": "",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-26",
|
||||
"message": "Workplan id 'RAIL-PL-WP-0002' uses prefix 'RAIL-PL-WP' but repo canonical prefix is 'RPF-WP' \u2014 new plans must conform",
|
||||
"file_path": "workplans/archived/260702-RAIL-PL-WP-0002-openbao-platform-secrets-service.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAIL-PL-WP-0002",
|
||||
"db_value": "RPF-WP",
|
||||
"fixable": false
|
||||
},
|
||||
{
|
||||
"severity": "WARN",
|
||||
"check_id": "C-26",
|
||||
"message": "Workplan id 'RAIL-PL-WP-0001' uses prefix 'RAIL-PL-WP' but repo canonical prefix is 'RPF-WP' \u2014 new plans must conform",
|
||||
"file_path": "workplans/archived/RAIL-PL-WP-0001-platform-baseline.md",
|
||||
"db_id": "",
|
||||
"file_value": "RAIL-PL-WP-0001",
|
||||
"db_value": "RPF-WP",
|
||||
"fixable": false
|
||||
}
|
||||
],
|
||||
"fixes_applied": [
|
||||
"bindings: synced 59/59",
|
||||
"C-17 cleared: pushed 1 backlogged commit(s)",
|
||||
"push: pushed"
|
||||
],
|
||||
"summary": {
|
||||
"fail": 3,
|
||||
"automation_error": 0,
|
||||
"warn": 18,
|
||||
"info": 17
|
||||
},
|
||||
"result": "fail"
|
||||
}
|
||||
|
|
@ -0,0 +1,46 @@
|
|||
{
|
||||
"phase": "release",
|
||||
"all_checks_pass": true,
|
||||
"raw_output_withheld": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"verified_at": "2026-10-11T11:18:37.429056+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"live_readonly_schema_integrity_counts": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"live_counts_may_include_concurrent_commits": true,
|
||||
"pod_name": "informed-decision-5557446c88-lvm88",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662",
|
||||
"operation_requested": true,
|
||||
"source_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"resources": [
|
||||
{
|
||||
"group": "apps",
|
||||
"kind": "Deployment",
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision"
|
||||
}
|
||||
],
|
||||
"prune": false,
|
||||
"rollout_verified": false,
|
||||
"latest_live_database_retained": true,
|
||||
"client_diff_sha256": "d61acc1da118dbd1dee8a94080c8b48a2e12f4b144704b2cb49f3443c49a3587"
|
||||
}
|
||||
|
|
@ -0,0 +1,42 @@
|
|||
import datetime,hashlib,json,os,stat,subprocess
|
||||
from pathlib import Path
|
||||
base=Path('/home/worsch/informed-decision/docs/evidence/2026-10-11-zlib-image-release')
|
||||
revision='312ab97e876e17341bf16f9e95397e14c2ac2720'
|
||||
program='''import json,re,urllib.request
|
||||
from datetime import datetime,timezone
|
||||
from api.services.memo_dispatch import ORIGIN,NoRedirect,token_file
|
||||
ident='infd-20261011-zlib-remediation-r1';expected='review-2cf690a6-8c46-4faa-826c-a24a88d53dea'
|
||||
try:
|
||||
request=urllib.request.Request(ORIGIN+'/v1/decisions/'+ident+'/outcomes?version=1',headers={'Authorization':'Bearer '+token_file('/var/run/secrets/state-hub/informed-decision/lifecycle-token')})
|
||||
opener=urllib.request.build_opener(urllib.request.ProxyHandler({}),NoRedirect())
|
||||
with opener.open(request,timeout=20) as response:
|
||||
raw=response.read(1024*1024+1)
|
||||
if response.code!=200 or len(raw)>1024*1024:raise ValueError('response_refused')
|
||||
value=json.loads(raw);review=value['review'];rows=value['dispositions']
|
||||
if not isinstance(review,dict) or review.get('memo_id')!=expected or review.get('stale') is not False or review.get('intake_state')!='ready' or not isinstance(rows,list):raise ValueError('review_refused')
|
||||
if len(rows)!=1:print(json.dumps({'status':'approval_pending','disposition_count':len(rows)}));raise SystemExit(3)
|
||||
row=rows[0];d=row['disposition'];founder={'kind':'person','sub':'uid=platform-root,ou=people,dc=netkingdom,dc=local'}
|
||||
if row.get('submission_state')!='confirmed' or d.get('verb')!='accept':print(json.dumps({'status':'approval_not_confirmed_accept'}));raise SystemExit(3)
|
||||
if d.get('actor')!=founder or d.get('memo_version')!=1 or d.get('memo_id')!=expected or not re.fullmatch('[a-f0-9-]{36}',d.get('approval_id','')) or not re.fullmatch('disp-[a-f0-9-]{36}',d.get('id','')):raise ValueError('founder_refused')
|
||||
accepted=datetime.fromisoformat(d['at'].replace('Z','+00:00'));now=datetime.now(timezone.utc)
|
||||
if accepted.tzinfo is None or accepted>now:raise ValueError('time_refused')
|
||||
normalized={'memo_id':ident,'request_identity_origin':'fixed_authenticated_request_route','review':{'memo_id':expected,'intake_state':'ready','stale':False},'dispositions':[{'submission_state':'confirmed','disposition':{k:d[k] for k in ['id','at','memo_id','memo_version','verb','approval_id','actor']}}],'observed_at':now.isoformat()}
|
||||
print(json.dumps({'status':'confirmed_founder_acceptance','normalized_outcome':normalized}),flush=True)
|
||||
except SystemExit:raise
|
||||
except Exception:print(json.dumps({'status':'native_readback_unverified'}),flush=True);raise SystemExit(1) from None
|
||||
'''
|
||||
run=subprocess.run(['ssh','railiance01','kubectl -n state-hub exec -i deployment/state-hub-memo-dispatch -c dispatcher -- python -'],input=program,text=True,capture_output=True,timeout=60)
|
||||
try:result=json.loads(run.stdout)
|
||||
except Exception:raise SystemExit('Native readback unverified; raw transport suppressed')
|
||||
if run.returncode or result.get('status')!='confirmed_founder_acceptance':print(json.dumps({'status':result.get('status','native_readback_unverified'),'native_action':False}));raise SystemExit(3)
|
||||
outcome=result['normalized_outcome'];d=outcome['dispositions'][0]['disposition']
|
||||
raw=(json.dumps(outcome,sort_keys=True,indent=2)+'\n').encode()
|
||||
receipt=json.loads((base/'root-authority-receipt-template.json').read_text())
|
||||
receipt.update(memo_sha256=hashlib.sha256((base/'memo.json').read_bytes()).hexdigest(),source_revision=revision,executor_plan_sha256=hashlib.sha256((base/'execution/execution-plan.json').read_bytes()).hexdigest(),native_outcome_sha256=hashlib.sha256(raw).hexdigest(),activation='APPROVED',verified_at=outcome['observed_at'],review_memo_id=outcome['review']['memo_id'],approval_id=d['approval_id'],disposition_id=d['id'],accepted_at=d['at'],bounded_outage_rollback_pre_authorized=True)
|
||||
for path,data in [(Path('/tmp/security-infd-zlib-native-outcome-latest.json'),raw),(Path('/tmp/security-infd-zlib-root-authority.json'),(json.dumps(receipt,indent=2)+'\n').encode())]:
|
||||
if path.exists():
|
||||
info=path.lstat()
|
||||
if not stat.S_ISREG(info.st_mode) or info.st_uid!=os.getuid() or info.st_nlink!=1:raise SystemExit('Authority custody refused')
|
||||
fd=os.open(path,os.O_CREAT|os.O_TRUNC|os.O_WRONLY|os.O_NOFOLLOW,0o600);os.fchmod(fd,0o600)
|
||||
with os.fdopen(fd,'wb') as f:f.write(data);f.flush();os.fsync(f.fileno())
|
||||
print(json.dumps({'status':'confirmed_founder_acceptance','approval_id':d['approval_id'],'disposition_id':d['id'],'accepted_at':d['at'],'source_revision':revision,'verified_at':receipt['verified_at'],'native_action':False}))
|
||||
|
|
@ -0,0 +1,42 @@
|
|||
import datetime,hashlib,json,os,stat,subprocess
|
||||
from pathlib import Path
|
||||
base=Path('/home/worsch/informed-decision/docs/evidence/2026-10-11-zlib-image-release')
|
||||
revision='312ab97e876e17341bf16f9e95397e14c2ac2720'
|
||||
program='''import json,re,urllib.request
|
||||
from datetime import datetime,timezone
|
||||
from api.services.memo_dispatch import ORIGIN,NoRedirect,token_file
|
||||
ident='infd-20261011-zlib-remediation-r1';expected='review-2cf690a6-8c46-4faa-826c-a24a88d53dea'
|
||||
try:
|
||||
request=urllib.request.Request(ORIGIN+'/v1/decisions/'+ident+'/outcomes?version=1',headers={'Authorization':'Bearer '+token_file('/var/run/secrets/state-hub/informed-decision/lifecycle-token')})
|
||||
opener=urllib.request.build_opener(urllib.request.ProxyHandler({}),NoRedirect())
|
||||
with opener.open(request,timeout=20) as response:
|
||||
raw=response.read(1024*1024+1)
|
||||
if response.code!=200 or len(raw)>1024*1024:raise ValueError('response_refused')
|
||||
value=json.loads(raw);review=value['review'];rows=value['dispositions']
|
||||
if not isinstance(review,dict) or review.get('memo_id')!=expected or review.get('stale') is not False or review.get('intake_state')!='ready' or not isinstance(rows,list):raise ValueError('review_refused')
|
||||
if len(rows)!=1:print(json.dumps({'status':'approval_pending','disposition_count':len(rows)}));raise SystemExit(3)
|
||||
row=rows[0];d=row['disposition'];founder={'kind':'person','sub':'uid=platform-root,ou=people,dc=netkingdom,dc=local'}
|
||||
if row.get('submission_state')!='confirmed' or d.get('verb')!='accept':print(json.dumps({'status':'approval_not_confirmed_accept'}));raise SystemExit(3)
|
||||
if d.get('actor')!=founder or d.get('memo_version')!=1 or d.get('memo_id')!=expected or not re.fullmatch('[a-f0-9-]{36}',d.get('approval_id','')) or not re.fullmatch('disp-[a-f0-9-]{36}',d.get('id','')):raise ValueError('founder_refused')
|
||||
accepted=datetime.fromisoformat(d['at'].replace('Z','+00:00'));now=datetime.now(timezone.utc)
|
||||
if accepted.tzinfo is None or accepted>now:raise ValueError('time_refused')
|
||||
normalized={'memo_id':ident,'request_identity_origin':'fixed_authenticated_request_route','review':{'memo_id':expected,'intake_state':'ready','stale':False},'dispositions':[{'submission_state':'confirmed','disposition':{k:d[k] for k in ['id','at','memo_id','memo_version','verb','approval_id','actor']}}],'observed_at':now.isoformat()}
|
||||
print(json.dumps({'status':'confirmed_founder_acceptance','normalized_outcome':normalized}),flush=True)
|
||||
except SystemExit:raise
|
||||
except Exception:print(json.dumps({'status':'native_readback_unverified'}),flush=True);raise SystemExit(1) from None
|
||||
'''
|
||||
run=subprocess.run(['ssh','railiance01','kubectl -n state-hub exec -i deployment/state-hub-memo-dispatch -c dispatcher -- python -'],input=program,text=True,capture_output=True,timeout=60)
|
||||
try:result=json.loads(run.stdout)
|
||||
except Exception:raise SystemExit('Native readback unverified; raw transport suppressed')
|
||||
if run.returncode or result.get('status')!='confirmed_founder_acceptance':print(json.dumps({'status':result.get('status','native_readback_unverified'),'native_action':False}));raise SystemExit(3)
|
||||
outcome=result['normalized_outcome'];d=outcome['dispositions'][0]['disposition']
|
||||
raw=(json.dumps(outcome,sort_keys=True,indent=2)+'\n').encode()
|
||||
receipt=json.loads((base/'root-authority-receipt-template.json').read_text())
|
||||
receipt.update(memo_sha256=hashlib.sha256((base/'memo.json').read_bytes()).hexdigest(),source_revision=revision,executor_plan_sha256=hashlib.sha256((base/'execution/execution-plan.json').read_bytes()).hexdigest(),native_outcome_sha256=hashlib.sha256(raw).hexdigest(),activation='APPROVED',verified_at=datetime.datetime.now(datetime.timezone.utc).isoformat(),native_observed_at=outcome['observed_at'],review_memo_id=outcome['review']['memo_id'],approval_id=d['approval_id'],disposition_id=d['id'],accepted_at=d['at'],bounded_outage_rollback_pre_authorized=True)
|
||||
for path,data in [(Path('/tmp/security-infd-zlib-native-outcome-latest.json'),raw),(Path('/tmp/security-infd-zlib-root-authority.json'),(json.dumps(receipt,indent=2)+'\n').encode())]:
|
||||
if path.exists():
|
||||
info=path.lstat()
|
||||
if not stat.S_ISREG(info.st_mode) or info.st_uid!=os.getuid() or info.st_nlink!=1:raise SystemExit('Authority custody refused')
|
||||
fd=os.open(path,os.O_CREAT|os.O_TRUNC|os.O_WRONLY|os.O_NOFOLLOW,0o600);os.fchmod(fd,0o600)
|
||||
with os.fdopen(fd,'wb') as f:f.write(data);f.flush();os.fsync(f.fileno())
|
||||
print(json.dumps({'status':'confirmed_founder_acceptance','approval_id':d['approval_id'],'disposition_id':d['id'],'accepted_at':d['at'],'source_revision':revision,'verified_at':receipt['verified_at'],'native_action':False}))
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
{
|
||||
"immediate_authority_pass": false,
|
||||
"delta_seconds": -1.1806,
|
||||
"static_reason": "fresh root native readback required before every phase"
|
||||
}
|
||||
|
|
@ -0,0 +1,55 @@
|
|||
{
|
||||
"phase": "verify",
|
||||
"all_checks_pass": true,
|
||||
"raw_output_withheld": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"verified_at": "2026-10-11T11:19:17.592644+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"live_readonly_schema_integrity_counts": {
|
||||
"schema_version": 5,
|
||||
"lifecycle": {
|
||||
"records": 17,
|
||||
"events": 59,
|
||||
"pending": 0
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 344
|
||||
},
|
||||
"submissions": {
|
||||
"confirmed": 44
|
||||
},
|
||||
"integrity": "ok",
|
||||
"read_only_pre_open": true,
|
||||
"store_constructed": false
|
||||
},
|
||||
"live_counts_may_include_concurrent_commits": true,
|
||||
"installed_zlib_files": {
|
||||
"lib/apk/db/installed": "f590762196710e25c0e9f72da0642cad8a5dcba0aa9e58a0cbaa65684d15c001",
|
||||
"usr/lib/libz.so.1.3.2": "ecc8b9dfc45eb7fa29b410ffaca6257873890de53b80fe91735737b49067c5f2"
|
||||
},
|
||||
"zlib_package": "1.3.2-r1",
|
||||
"installed_purpose_checks": {
|
||||
"installed_image_purpose_variants": 10,
|
||||
"binding_forms_allowed": 2,
|
||||
"advisory_or_malformed_refused": 8,
|
||||
"synthetic_only": true,
|
||||
"native_provider": false
|
||||
},
|
||||
"policy_sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62",
|
||||
"policy_mode": "0644",
|
||||
"policy_uid": 0,
|
||||
"health_statuses": {
|
||||
"/healthz": 200,
|
||||
"/readyz": 200
|
||||
},
|
||||
"native_provider_probe": false,
|
||||
"pod_name": "informed-decision-68d5f488d8-c576r",
|
||||
"pod_uid": "1153f806-1e05-4596-baf3-a4fa8adf08be",
|
||||
"native_rollout_verified": true,
|
||||
"current_schema5_database_retained": true,
|
||||
"recovery_verification": false
|
||||
}
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
{
|
||||
"id": "4f1c2046-f7af-47ff-ba4e-1631e86fa6b5",
|
||||
"workplan_id": "77eaeabf-0644-595f-b3d5-1168e6a294c4",
|
||||
"task_id": "1743596f-8558-5a6b-afef-4dd5c1e9c0ae",
|
||||
"status": "native_completed_and_source_closed"
|
||||
}
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
{
|
||||
"proposal_id": "INFD-WP-0009-T05/zlib85091-r1",
|
||||
"memo_id": "infd-20261011-zlib-remediation-r1",
|
||||
"memo_version": 1,
|
||||
"memo_sha256": "5dea0d404e4d13683fbf71d56273c06db7a6a916ab68759a90d7394005eee206",
|
||||
"source_revision": "312ab97e876e17341bf16f9e95397e14c2ac2720",
|
||||
"executor_plan_sha256": "d871081999215bd3850ab1173064ed6cb6d7c23b26d9c3d5b3c5940e698d4c61",
|
||||
"native_outcome_sha256": "1159fd4f0a36da0ca144f005ad8f8780aeb412044253ae1d65705d36047dd7dc",
|
||||
"activation": "APPROVED",
|
||||
"authority_mode": "ADMINISTER",
|
||||
"target": "realm:kubernetes/railiance01/informed-decision",
|
||||
"verification_method": "root-fixed-origin-native-readback",
|
||||
"runtime_authenticated_grant": false,
|
||||
"outcome_query": "/lifecycle/memos/infd-20261011-zlib-remediation-r1/outcomes?version=1",
|
||||
"verified_at": "2026-10-11T10:43:45.008249+00:00",
|
||||
"review_memo_id": "review-2cf690a6-8c46-4faa-826c-a24a88d53dea",
|
||||
"approval_id": "b5ce337c-5d7d-44fa-864d-706b54039f7c",
|
||||
"disposition_id": "disp-cf61c2cf-4a7d-4672-8bc2-de2e4641916f",
|
||||
"accepted_at": "2026-10-11T10:40:55Z",
|
||||
"bounded_outage_rollback_pre_authorized": true,
|
||||
"note": "Template is not evidence/approval. Root sets scopedpreauthorizationtrue only after actual confirmed founder acceptance of this exact new packet/terms, retains original currentreadback before release."
|
||||
}
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
{
|
||||
"task_id": "1743596f-8558-5a6b-afef-4dd5c1e9c0ae",
|
||||
"status": "done",
|
||||
"needs_human": false
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"id": "2b81326f-4c09-5c66-88d1-84af4e5895fd",
|
||||
"title": "Founder approves exact zlib remediation; protected drill and native rollout verified",
|
||||
"decision_type": "made",
|
||||
"status": "resolved",
|
||||
"decided_at": "2026-10-11T10:40:55Z"
|
||||
}
|
||||
|
|
@ -25,4 +25,4 @@ Add a row whenever you loosen, shortcut or leave unarmed a control. Remove nothi
|
|||
| 16 | Intake doctrine conditions (gate-house C1–C6) | Draft ruling GH-DEC-2026-023 (gate-house `aac350d`, status proposed, awaiting the founder). C1–C6 apply now; R3 (row 9) is the main relaxation (F1), R2 (row 8) also covers C6, R5 (row 11) also covers C5. | Remove the `compact-sitting` exact-record branch once its memos are terminal; re-arm R3 with an access-engine approval-claim check and a signed intake receipt. | gate-house, informed-decision, access-engine | 2026-10-03 |
|
||||
| 17 | Owner reviews and approval recording (canon `delegated-owner-review_v0.1`) | Owner reviews required by CCRs and similar records are written by each owner repo's worker agent from its INTENT.md, not by a human owner. The requesting agent records the founder's resolved hub decision (status, binding confirmations, admission markers) and commits. The founder still decides; `decided_by` is unauthenticated (rows 8, 12). | Reviews and recordings signed by authenticated agent workload identities; recording tooling verifies an authenticated human resolver; human owner review restored for red-lane records if wanted. | the-custodian | 2026-10-07 |
|
||||
| 18 | Ordinary authenticated operator/PDP admission for User Engine application.register | Executed one-use exception USER-CATALOGUE-INFDEC-20261011-R1 under confirmed founder approval b859698b-5d08-4da5-9599-4760c6a799f1 (02:07:09Z). Exact executor b0dbbb97 and transport3e594e0e; packet307c4fc5, grant SHA 72ee846034809f4ae6848eac3a43f2b7390f1df7a67ede50eff7435d1b43f839. Two exact informed-decision catalogue records committed; genuine denial retained, three truthful audits, one consumed ledger and unsent/unclaimed registered event verified. Private grant removed. Ordinary management admission remains unmet; no IAM/human claim/future registration/targeted replay authority. Execution deadline2026-10-12T23:59:59Z does not erase facts. [Outcome](evidence/2026-10-10-security-consolidation/user-catalogue-independent-postapply-verification.json). | Before customer production, supported authenticated operator management with genuine ordinary allow/deny/attribution and unavailable refusal; retire bootstrap use, preserve/reconcile ledger/audits/events. Broader USER-WP-0026-T03/USER-WP-0028-T02 remain live; no human journey completion inferred. | user-engine, access-engine; Custodian tracks | 2026-10-11 |
|
||||
| 19 | Fresh informed-decision readback during a failed T05 rollout | Proposed only; no exception approved or used. The new INFD-WP-0009-T05/zlib-85091-r1 packet will request manual, supervised rollback to exact image763c/sourcec96 if the candidate makes informed-decision unavailable. Proposed limits: separately confirmed founder consent retained before release, exact same journal/source/Deployment/config/PVC, at most30minutes after release and before2026-10-12T23:59:59Z. Later revocation cannot be checked during the outage. No fallback on401/403, explicit revocation, conflicts or mismatches; no cached authority for backups or release. | Close this one-use entry with actual disposition and trial outcome. Preserve the ordinary fresh-authority gate; do not reuse the outage path after its window, for another trial or for customer production. A future standing recovery mechanism needs independently obtainable authority and its own review. | informed-decision, railiance-platform; Custodian tracks | 2026-10-11 |
|
||||
| 19 | Fresh informed-decision readback during a failed T05 rollout | Exact new trial INFD-WP-0009-T05/zlib85091-r1 approved under founder acceptance b5ce337c-5d7d-44fa-864d-706b54039f7c at2026-10-11T10:40:55Z. Image f558/source312ab97 verified Ready and actual canonical lifecycle HTTP200 at11:20:25Z, with latest database preserved. Proposed bounded30minute manual outage recovery was expressly accepted but never invoked; trial completed. Original proposed packet and pre-execution refusals remain immutable. [Outcome](evidence/2026-10-10-security-consolidation/zlib-native-completed/canonical-provider-verification.json). | Completed2026-10-11. Ordinary fresh-authority gate retained; no standing cached authority, autonomy promotion, other-trial or customer-production reuse. Any future standing recovery mechanism needs independently obtainable authority and separate review. | informed-decision, railiance-platform; Custodian tracks | 2026-10-11 |
|
||||
|
|
|
|||
|
|
@ -502,3 +502,43 @@ INFD Product and Platform independently accepted the exact deployed purpose imag
|
|||
`INFD-WP-0009-T04` is done in source commit `0693c40`; T05 remains live for the inherited fixable MEDIUM zlib finding, due October 18. `INFD-IN-0010` is the unpromoted live handoff for the verifier omission defect before future reuse. WP0009 remains active. The same 13-owner source inventory now totals **47 open plans (45 nonresidual + 2 residual), 101 unfinished tasks**, compared with the previous per-repo sum of 47/102. A previously zeroed cached `_total` was corrected from authoritative per-repo arithmetic; the exact prior snapshot remains retained.
|
||||
|
||||
Forgejo source acknowledgment is recorded in Net commit `f6856cd` and the separate application-owner design receipt `d349815`. Explicit version selection is committed at `bb9b9b5`, with 43 loader/validator and 22 package compatibility tests passing. Both actual acknowledged types remain unimplemented and reject ordinary admission; canonical 1.1 and all native provider pins stay unchanged. Six-object materialization, authenticated provenance, adapters and first session remain under the existing ORGREF/owner gates.
|
||||
|
||||
### Zlib remediation completed and owner workplan closed
|
||||
|
||||
The founder accepted the distinct T05 packet at10:40:55Z on2026-10-11, approval
|
||||
`b5ce337c-5d7d-44fa-864d-706b54039f7c`. All eight supervised phases completed:
|
||||
fresh private backup and verified copy, isolated no-network schema5 restore
|
||||
compatibility, exact clone cleanup, fresh cutover backup/copy, one-Deployment
|
||||
manual non-pruning rollout and installed verification. Image `f5588f49…` is
|
||||
actually deployed at Argo source `312ab97`, generation26Ready1. Installed zlib
|
||||
is1.3.2-r1; the current full immutable-image scan has zero findings across44
|
||||
packages. Schema, integrity and all recorded counts remain intact. Ten installed
|
||||
purpose fixtures include eight refusals; actual authenticated canonical lifecycle
|
||||
outcomes returnedHTTP200 at11:20:25Z, with the same Pod/image/source verified
|
||||
before and after. Database-preserving rollback remained available and unused.
|
||||
|
||||
Three pre-execution refusals occurred before any custody or durable phase
|
||||
journal existed. Root had used the service clock,1.1806seconds ahead, as its own
|
||||
verification timestamp. Root-only bookkeeping now uses local verification time
|
||||
and retains the service timestamp separately. Failed receipts and original
|
||||
helper bytes remain retained; approved actuator, render, memo and plan bytes did
|
||||
not change. This refinement is recorded in the same trial, not another scored
|
||||
success. The earlier sandbox hypothesis was disproven. Checklist19 records the
|
||||
exact accepted, unused one-trial outage option without a standing authority or
|
||||
autonomy grant.
|
||||
|
||||
Separate owner returns are recorded under completed Product T10 and Platform
|
||||
RPF-IN-0010. Product commit `47881fc` closes T05, resolves only
|
||||
INFD-RISK-20261011-ZLIB-85091 and finishes INFD-WP-0009; Platform `8647587`
|
||||
records actual native acceptance. Live INFD-IN-0010 and INFD-IN-0009 residual
|
||||
handoffs remain unpromoted. Original T04 failed/UNCERTAIN evidence remains
|
||||
unchanged. Safe receipts are in
|
||||
`docs/evidence/2026-10-10-security-consolidation/zlib-native-completed/`.
|
||||
|
||||
The same13-owner source inventory is now **46 open plans (44 nonresidual and2
|
||||
residual),100 unfinished tasks**, compared with the initial49/105. Broader User
|
||||
Engine human journey/ordinary management, Forgejo type implementation/native
|
||||
materialization and first session remain in their existing owner records and
|
||||
ORGREF driver. Three historical Platform C07 aliases still hold13 tasks
|
||||
(8done/5wait); their diagnosis is retained, with no deletion or artificial
|
||||
closure. Source totals do not silently include those unbacked historical rows.
|
||||
|
|
|
|||
|
|
@ -116,3 +116,19 @@ ORGREF-WP-0002 project driver. This is continuing owner work after the bounded
|
|||
coordination wave, not a claim of whole-estate completion. The latest
|
||||
thirteen-owner source count is 48 open plans (46 nonresidual, two residual),
|
||||
102 unfinished task blocks.
|
||||
|
||||
Final native follow-through checkpoint, 2026-10-11: Policy Nexus hosting and
|
||||
the exact one-application catalogue exception are deployed and verified under
|
||||
their distinct founder decisions. Forgejo type1.2 has actual source
|
||||
acknowledgment; its type implementation and native first session remain with
|
||||
the existing ORGREF driver and owners. Informed-decision T04 and T05 are
|
||||
actually verified, and Product `47881fc` finishes INFD-WP-0009; Platform
|
||||
`8647587` records independent native acceptance. Fixed imagef558 is Ready,
|
||||
schema5/data retained, fresh full44-package scan zero, and actual authenticated
|
||||
canonical lifecycle returnsHTTP200. Protected restore drill and exact
|
||||
non-pruning one-Deployment rollout completed; outage recovery was unused.
|
||||
Live INFD-IN-0010/0009 handoffs remain unpromoted and original failed evidence
|
||||
remains intact. The latest same13-owner source count is46open plans
|
||||
(44nonresidual+2residual),100unfinished tasks. Actual receipts and remaining
|
||||
owner boundaries are in the updated security collaboration review; this
|
||||
checkpoint does not claim whole-estate completion.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue