From b928f1c5f9bec2d82d02197c6cf3f692b45d301b Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 23 Aug 2026 12:40:56 +0200 Subject: [PATCH] intakes: route security host deployment boundary --- intakes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/intakes.md b/intakes.md index e419b55..302bd5e 100644 --- a/intakes.md +++ b/intakes.md @@ -15,7 +15,7 @@ origin: residual origin_ref: CUST-WP-0063 selected_contact_uri: "https://security.coulomb.social/" updated: "2026-08-23" -notes: "The operator selected https://security.coulomb.social/ as the RFC 9116 Contact URI. Policy Nexus owns provisioning and receipt testing before policy.coulomb.social/.well-known/security.txt may publish it. Reports route privately to risk-nexus; the route creates no bounty, response-time, or safe-harbour promise. Acceptance check 2026-08-23: DNS resolves, but the HTTPS server aborts the TLS handshake with alert internal_error before serving a page, so the private receipt test cannot begin. Blocker sent to Policy Nexus as message a111b97c-0561-44eb-b61a-12bcf068b28d. Close only after HTTPS is reachable and a private test report reaches Risk Nexus." +notes: "The operator selected https://security.coulomb.social/ as the RFC 9116 Contact URI. Policy Nexus owns provisioning and receipt testing before policy.coulomb.social/.well-known/security.txt may publish it. Reports route privately to risk-nexus; the route creates no bounty, response-time, or safe-harbour promise. Acceptance check 2026-08-23: security.coulomb.social resolves to 217.160.0.212 and aborts TLS with alert internal_error, while the governed Policy Nexus ingress at policy.coulomb.social resolves to 92.205.62.239 and its current package grants only that hostname. The private receipt mechanism is also not yet defined. Initial blocker message: a111b97c. Exact DNS/admission/package handoffs: railiance-apps fb32adf5 and rapp-policy-nexus 93acef37. Do not move DNS or publish security.txt until the production host grant, certificate/ingress, monitored receipt path, and private report-to-Risk-Nexus proof are complete." state_hub_intake_id: "01a02b31-f4b0-75e4-a15c-a78e1c276689" ```