coulomb/the-custodian
4
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

finish three custodian workplans from live hub evidence
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Python Tests / pytest (push) Successful in 21s
Details

Browse source 
Close CUST-WP-0064 after the 2026-08-24 unassisted fire ingested
clay-borg, close CUST-WP-0065 now that all 120 active repos project a
classification, and close ADHOC-2026-08-25. Mark CUST-WP-0067 T02/T10
done (reverse relays already gone; work-record recovery lives on 0068).
Park the later no-checkout SBOM regression as CUST-IN-0015. Teach the
classification gate to use this host's checkout path.
This commit is contained in:
codex 2026-08-28 20:27:05 +02:00
parent 349238cf8f
commit 93b8174abd
8 changed files with 143 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

17
workplans/CUST-WP-0067-hub-authority-target-resolution.md
View file

@ -7,7 +7,7 @@ repo: the-custodian
status: active
owner: codex
created: "2026-08-24"
updated: "2026-08-24"
updated: "2026-08-28"
quality_dor: DoR-Ok
quality_dor_at: "2026-08-24"
quality_dor_by: codex
@ -104,7 +104,7 @@ the live API.
```task
id: CUST-WP-0067-T02
status: progress
status: done
priority: high
state_hub_task_id: "4093e928-d752-5a91-96c3-2e80f0e1dac5"
```
@ -161,6 +161,14 @@ any repo and was blocked in-session; the change and its sequencing constraint
are recorded in `docs/recovery/tunnels-yaml-proposed-changes-CUST-WP-0067.md`.
Remote agents and the documented port map must be repointed *before* removal.
**Done (2026-08-28):** both reverse relays are gone from
`~/.config/bridge/tunnels.yaml` and from `bridge status`. The only
`state-hub-*` tunnel is `state-hub-primary` (`direction: local`,
`127.0.0.1:8000` → cluster `10.43.68.154:8000`). Live check: one listener on
8000, it is `ssh`, and `/state/health` reports `instance_role=primary`
(`railiance01`). Local uvicorn is not running. Cache Postgres
`infra-postgres-1` is still up on purpose until `CUST-WP-0068-T08`.
## Make the hub target explicit and unspoofable
```task
@ -650,7 +658,7 @@ their classification later, with no separate backfill path to write or trust.
```task
id: CUST-WP-0067-T10
status: todo
status: done
priority: high
state_hub_task_id: "509414a4-dee9-5892-96ab-eab8f85982c8"
```
@ -731,3 +739,6 @@ It is a content-conformance pass, an identifier decision overlapping
`RMGR-WP-0005`, an orphan disposition, and a per-repository unblocking pass —
across ~40 repositories, several needing owner judgement. The mechanical share
is done.
**Done (2026-08-25, recorded 2026-08-28):** promoted to `CUST-WP-0068`. This
task's remaining work is that workplan; it is not tracked twice.