docs(security): record verified owner source delivery and native gates
This commit is contained in:
codex
parent
fee99c24bd
commit
d834d0c4b7
7 changed files with 804 additions and 2 deletions
|
|
@ -0,0 +1,23 @@
|
|||
# Verified owner source delivery, 17 October 2026
|
||||
|
||||
NetKingdom source `4f65e41` delivers local group provenance and sealed-custody
|
||||
recovery preparation. Repo Manager source `83c521b` delivers bounded staged-object
|
||||
batching. Normal hooks accepted source and follow-through records. Exact remote
|
||||
heads, unchanged source files, source ancestry and all 61 owner task ID/UUID/status
|
||||
bindings are checked in [publication verification](publication-verification.json).
|
||||
The legacy consistency projection's missing task IDs were detected and repaired
|
||||
through the existing forge-derived reconciliation; the failed audit remains noted.
|
||||
|
||||
[Verified results](verified-results.json) retain the 65/111/42 canonical test
|
||||
outcomes, 14 actual disposable LLDAP oracles, four actual configured-hook cases,
|
||||
13 scanner parity cases, performance samples, independent cleanup and limitations.
|
||||
Checksums in this published receipt use explicit `sha256:` prefixes. Original
|
||||
receipts and full frozen fixture/candidate packets remain workspace-local, with
|
||||
their original digests retained; these are source/disposable results.
|
||||
|
||||
Review corrected production SQLite-on-PVC guidance before publication. The local
|
||||
journal is not production storage admission. No actual key, restored consumer,
|
||||
live deployment, rotation or owner assent was introduced. All sixteen target
|
||||
acceptance gates remain open. [Next steps](native-next-steps.md) use the existing
|
||||
owner/package/custody boundaries, supported by [40 independently verified public
|
||||
source references](source-references.json).
|
||||
|
|
@ -0,0 +1,82 @@
|
|||
# Native preparation after verified source delivery
|
||||
|
||||
These are owner-bound preparation steps. Source evidence establishes neither
|
||||
current native assent nor production acceptance. [Source references](source-references.json)
|
||||
bind 23 group/storage and 17 recovery references to exact reviewed Git bytes.
|
||||
|
||||
## Group journal and protected rollback — NK-WP-0048-T14
|
||||
|
||||
NetKingdom owns implementation and attended directory reconciliation. Platform
|
||||
owns shared database/custody governance; rapp-postgres supplies the existing
|
||||
database-per-consumer surface. The inspected runtime package bindings do not
|
||||
assign identity-provisioner a managed package. Settle that assignment first.
|
||||
Accepted ADR-0015 excludes SQLite-on-PVC from production. Keep the delivered
|
||||
SQLite backend local/disposable; build the same journal semantics behind the
|
||||
existing injection seam using CNPG, or obtain an explicit scoped policy exception.
|
||||
|
||||
The proposed consumer is identity-provisioner in namespace sso, with a separate
|
||||
database/schema and runtime/migration/owner roles. Placement, connections,
|
||||
statement/idle timeouts, retention, backup and dynamic credential lease delivery
|
||||
need existing package/Platform acceptance. Source declarations suggest the second
|
||||
cell as an overflow candidate; they prove no live headroom or granted capacity.
|
||||
EUR cost and credible loss bounds remain unknown. No consumer or database was
|
||||
created and no lease was requested.
|
||||
|
||||
Tenant/case scope must come from an authoritative protected caller binding.
|
||||
Caller JSON and a default platform scope are insufficient. Warden's old group
|
||||
caller route was dropped; User Engine's runtime token/pod access is not new
|
||||
protected-case authority. Bind current case/source/principal/native identities,
|
||||
independent evidence and per-attempt session revocation through existing owners.
|
||||
|
||||
SQL row versions/active-slot exclusion can serialize cooperating journal calls.
|
||||
They cannot fence LLDAP's admin WebUI, helper or user-deletion writers. Prove an
|
||||
all-writer maintenance barrier that survives process loss, or provider CAS and
|
||||
generation semantics, before native destructive rollback. Two reads and one
|
||||
replica do not prevent races or remove/re-add ABA. A database restored behind an
|
||||
LDAP effect must remain quarantined pending independent reconciliation. Preserve
|
||||
intents/evidence; never clear uncertainty by dropping or reinitializing storage.
|
||||
|
||||
## Original TLS and selected consumer — NK-WP-0049-T35/T36
|
||||
|
||||
railiance-cluster owns the ingress/cert-manager/cluster-backup substrate;
|
||||
NetKingdom owns namespace ingress intent. The declared TLS identity is
|
||||
kc.coulomb.social using sso/kc-tls and letsencrypt-prod, terminated by Traefik.
|
||||
The identity archive profile excludes this TLS Secret. The inspected encrypted
|
||||
cluster-backup source writes same-host state/Helm/kubeconfig copies and establishes
|
||||
no independently recoverable original TLS/trust snapshot. Its named plaintext
|
||||
staging and whole-cluster restore are not admitted isolated recovery steps.
|
||||
|
||||
Obtain the existing source owner's metadata and independent private custody path,
|
||||
or an explicitly accepted reissue disposition for the outage claim. Draft owner
|
||||
questions have not been sent. No key retrieval or self-signed substitute is ready.
|
||||
Once public-only original certificate/chain/trust provenance is established,
|
||||
bind its public hashes/SANs/validity to the exact isolated attempt. Keep private
|
||||
inputs in the owner's terminal and run complete preflight before any key prompt.
|
||||
|
||||
The historically deployed secrets-engine-openbao client is a defensible selector
|
||||
candidate: issuer proof from 7 October and consumer proof from 10 October predate
|
||||
the 16 October archive. The public selector is:
|
||||
|
||||
| Field | Candidate value |
|
||||
| --- | --- |
|
||||
| Client / audience | secrets-engine-openbao |
|
||||
| Secret environment name | KEYCAPE_SECRETS_ENGINE_OPENBAO_CLIENT_SECRET |
|
||||
| Scope / denied scope | openbao:login / openbao:admin |
|
||||
| Subject / tenant | service:secrets-engine / tenant:platform |
|
||||
| Required role | secrets-engine |
|
||||
|
||||
Historical deployment does not prove current owner assent, archived uniqueness,
|
||||
environment binding or restored consumer continuity. Have the existing service
|
||||
owner validate the selector; later private archive/native checks must establish
|
||||
the original registration without retrieving a client secret into work records.
|
||||
No token exchange, OpenBao login, new grant, rotation or consumer redirect occurred.
|
||||
T33 still waits for complete reviewed readiness; T18 owns actual owner-held
|
||||
execution/consumer acceptance and T19 retained-factor MFA.
|
||||
|
||||
## Configured-hook acceptance — RMGR-WP-0021-T05
|
||||
|
||||
Source publication, canonical import routing, 42 tests, 13 parity cases and four
|
||||
actual configured clean/private-key cases are established separately. Keep the
|
||||
actual unavailable-scanner hook case pending until a reviewed fixture can shadow
|
||||
the exact scanner path without changing the real scanner or user state. Remote
|
||||
receive/CI/private-response coverage and whole TSA-15 acceptance remain open.
|
||||
|
|
@ -0,0 +1,83 @@
|
|||
{
|
||||
"schema": "custodian.owner-publication-verification.v1",
|
||||
"observed_at": "2026-10-16T22:45:50.633309+00:00",
|
||||
"native_target_acceptance": false,
|
||||
"all_sixteen_target_gates_remain_open": true,
|
||||
"owners": [
|
||||
{
|
||||
"repo": "net-kingdom",
|
||||
"source_commit": "4f65e41ac55d2bc652122b76312048efdaf6b698",
|
||||
"published_head": "6cb43c0cc55212363a5406b02db046e2384a7c40",
|
||||
"remote_main_exact": true,
|
||||
"source_ancestor_verified": true,
|
||||
"source_files_unchanged": 20,
|
||||
"normal_source_and_record_hooks_passed": true,
|
||||
"preexisting_other_work_preserved": true,
|
||||
"sync": {
|
||||
"legacy_consistency": {
|
||||
"fail": 0,
|
||||
"automation_error": 0,
|
||||
"warn": 36,
|
||||
"info": 5
|
||||
},
|
||||
"central_projection": "applied",
|
||||
"retained_audit_finding": "Legacy sync matched UUID/status but omitted task record IDs after T09; forge-derived reconciliation repaired projection."
|
||||
},
|
||||
"workplans": [
|
||||
{
|
||||
"id": "NK-WP-0048",
|
||||
"tasks": 20,
|
||||
"source_counts": {
|
||||
"done": 14,
|
||||
"wait": 2,
|
||||
"todo": 3,
|
||||
"progress": 1
|
||||
},
|
||||
"all_ids_uuids_statuses_match": true
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0049",
|
||||
"tasks": 36,
|
||||
"source_counts": {
|
||||
"done": 24,
|
||||
"progress": 4,
|
||||
"wait": 7,
|
||||
"todo": 1
|
||||
},
|
||||
"all_ids_uuids_statuses_match": true
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"repo": "repo-manager",
|
||||
"source_commit": "83c521bf2fa351d730a90bf7f7e13dfd4b0cff2a",
|
||||
"published_head": "b02e1cefb0e07fe246dc9fe9c5a989fe06116587",
|
||||
"remote_main_exact": true,
|
||||
"source_ancestor_verified": true,
|
||||
"source_files_unchanged": 2,
|
||||
"normal_source_and_record_hooks_passed": true,
|
||||
"preexisting_other_work_preserved": true,
|
||||
"sync": {
|
||||
"status": "applied",
|
||||
"commit": "b02e1cefb0e07fe246dc9fe9c5a989fe06116587",
|
||||
"refused": 0
|
||||
},
|
||||
"workplans": [
|
||||
{
|
||||
"id": "RMGR-WP-0021",
|
||||
"tasks": 5,
|
||||
"source_counts": {
|
||||
"done": 2,
|
||||
"progress": 2,
|
||||
"todo": 1
|
||||
},
|
||||
"all_ids_uuids_statuses_match": true
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"projection_instance": {
|
||||
"instance_role": "primary",
|
||||
"instance_label": "railiance01"
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,326 @@
|
|||
{
|
||||
"scope": "exact public Git sources; no live topology or owner assent",
|
||||
"all_40_hashes_independently_verified": true,
|
||||
"references": [
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "net-kingdom",
|
||||
"path": "INTENT.md",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:fd2ba8dff9dfd5583ec6d8b0348f273bfe00c59923b5d5d47cd22b1fb4658c54",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/INTENT.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "net-kingdom",
|
||||
"path": "docs/adr/ADR-0015-netkingdom-railiance-workload-packaging-and-relational-platform.md",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:2000985ef211aeedd3656e15cedb289e655526c2dcc4a161a64ffc27f0289db1",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/docs/adr/ADR-0015-netkingdom-railiance-workload-packaging-and-relational-platform.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "net-kingdom",
|
||||
"path": "sso-mfa/k8s/identity-provisioner/deployment.yaml",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:807878e939967c8b88dafd4746c2a321b373d9f552083a82248fa917d4d9ea73",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/sso-mfa/k8s/identity-provisioner/deployment.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "net-kingdom",
|
||||
"path": "docs/identity-provisioner-bind-repair.md",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:df1e39eca8573cb06dae61386aa6ade316533947a0959f07fe4a03ea503fd148",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/docs/identity-provisioner-bind-repair.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "net-kingdom",
|
||||
"path": "sso-mfa/k8s/lldap/GROUP-MAINTENANCE.md",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:03be1481f387d9fddbdeff550abbc2cbaa120db4105877c909acc7b3f00f8046",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/sso-mfa/k8s/lldap/GROUP-MAINTENANCE.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "net-kingdom",
|
||||
"path": "sso-mfa/k8s/lldap/ingress.yaml",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:7cb1f0e09f22004adcdd66d617857123d08276aa685d677b0c6e81e0aabe5290",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/sso-mfa/k8s/lldap/ingress.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "ops-mason",
|
||||
"path": "docs/directory-group-binding.md",
|
||||
"revision": "57411f25b990f0d70dcfdcbd07778f6219bb9bf8",
|
||||
"sha256": "sha256:b050e19ccabebf2fd27d7052cf4b6ecd2f9015874566230727674c1c75894fdf",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/ops-mason/src/commit/57411f25b990f0d70dcfdcbd07778f6219bb9bf8/docs/directory-group-binding.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "ops-mason",
|
||||
"path": "registry/capabilities/capability.security.structure-construction.md",
|
||||
"revision": "57411f25b990f0d70dcfdcbd07778f6219bb9bf8",
|
||||
"sha256": "sha256:000ceac5b4c71569aed1c9af970980a0c72a34db13fdca40671c9ddbfe97409d",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/ops-mason/src/commit/57411f25b990f0d70dcfdcbd07778f6219bb9bf8/registry/capabilities/capability.security.structure-construction.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "ops-warden",
|
||||
"path": "registry/routing/catalog.yaml",
|
||||
"revision": "d97652a3bb5fa733b063d71a1b74068efcccf572",
|
||||
"sha256": "sha256:c47065c0892fd0bd07c2bffab95884e7e907832eef3623c4d69d6ad3b01ebc53",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/ops-warden/src/commit/d97652a3bb5fa733b063d71a1b74068efcccf572/registry/routing/catalog.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "railiance-platform",
|
||||
"path": "docs/rapp-postgres-boundary.md",
|
||||
"revision": "08c1f036f2750097750f435efd76e8f6ee6df393",
|
||||
"sha256": "sha256:6d80877d2eb7cef79a11f1d8ee40e8bb7fabdbdd122494a7aaa39b6d931e610d",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-platform/src/commit/08c1f036f2750097750f435efd76e8f6ee6df393/docs/rapp-postgres-boundary.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "railiance-platform",
|
||||
"path": "INTENT.md",
|
||||
"revision": "08c1f036f2750097750f435efd76e8f6ee6df393",
|
||||
"sha256": "sha256:12c6540735af591f7a4a9fe85ff10d3cd00eec55b5b6b1ddf148abf2d3ac9a9c",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-platform/src/commit/08c1f036f2750097750f435efd76e8f6ee6df393/INTENT.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "declarations/rapp.yaml",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:a5811e9fa994ae5815214e81440b3be2a32b58236c09ec1887c54d0a7f9f3dce",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/declarations/rapp.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "scripts/render_consumers.py",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:5d83e29e5ec675b3c78c0129d9e12213b624146f5883534a7e5c99aaaa057f61",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/scripts/render_consumers.py"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "docs/adr/ADR-0004-platform-pg-cell-ceiling.md",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:1f1eb521f8e6690bfdf650257308a6139540a65ca65d822a8def5f7a90fde82b",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/docs/adr/ADR-0004-platform-pg-cell-ceiling.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "docs/adr/ADR-0001-consumer-boundary-and-tenant-isolation.md",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:3474c0e1b411ce65a4fee63288b22101662370db737ca7e41158263bf310eb06",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/docs/adr/ADR-0001-consumer-boundary-and-tenant-isolation.md"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "consumers/tenant-engine.yaml",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:92f36d587f001c86ff401aedd25cb49fa171d49e000b0a6ab551e182e5c11448",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/consumers/tenant-engine.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "consumers/audit-core.yaml",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:a2db53f901df056546b2c028f287f8fc50486e6e6cd81026b9e926b6b64272b3",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/consumers/audit-core.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "consumers/core-hub.yaml",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:8fe3e8b4488548b2f5e01f1d46edd9fd5fe4f0e4f65a3821f172adbfb5ae1d84",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/consumers/core-hub.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "consumers/isolation-probe.yaml",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:8ea24d3bd04ab683b47ceff2586932ea4fdb0d45c49896167bb5b352a67a5cfb",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/consumers/isolation-probe.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "consumers/sbom-nexus.yaml",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:0b21d05fe7b9d21cbc9eb761f455329739ceb71f8dd3d1200971426962c11236",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/consumers/sbom-nexus.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rapp-postgres",
|
||||
"path": "consumers/canned-prompts.yaml",
|
||||
"revision": "a9f569c96d74aa384ac8d3ac4aa960e4061550b5",
|
||||
"sha256": "sha256:97d4b439cec7e788b7c1fa2c7181c2606ed098dcf37a38c1f73f7393e6046429",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rapp-postgres/src/commit/a9f569c96d74aa384ac8d3ac4aa960e4061550b5/consumers/canned-prompts.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "reef-railiance",
|
||||
"path": "bindings/rapps.yaml",
|
||||
"revision": "33b840faac109f134bf1115d631d5b1242052d9a",
|
||||
"sha256": "sha256:796007c68f0eda1d50cebddf9e11a2c123a8814ebaf67f739ed5d2af2d6fa3f1",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/reef-railiance/src/commit/33b840faac109f134bf1115d631d5b1242052d9a/bindings/rapps.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "group_storage",
|
||||
"repo": "rail-kubernetes",
|
||||
"path": "docs/wave-1-contract.md",
|
||||
"revision": "5fad47fdfb7d4cabc21cf10f52ac733ef59803b0",
|
||||
"sha256": "sha256:2974f8bd9096fe1f096e9f557fbbc2c29fc80462c46d693462b2258abdc9fbff",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/rail-kubernetes/src/commit/5fad47fdfb7d4cabc21cf10f52ac733ef59803b0/docs/wave-1-contract.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "net-kingdom",
|
||||
"path": "sso-mfa/k8s/keycape/ingress.yaml",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:bc5c7524a82de5e8b9755e7d7d408b4a66e034424cb2663c1d21352d292d5a72",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/sso-mfa/k8s/keycape/ingress.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "net-kingdom",
|
||||
"path": "tools/bootstrap-recovery/identity-backup-profile.json",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:40f9e5b5bb957e5b23e03b31701702b850502d16a92a0fa0ebf92618cc3f18a1",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/tools/bootstrap-recovery/identity-backup-profile.json"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "net-kingdom",
|
||||
"path": "sso-mfa/k8s/keycape/secrets-engine-openbao-client-rollout.py",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:8b834e5f0353a5e11797637420609e06e7bf7de47777c7e78b774f74d4a6afbd",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/sso-mfa/k8s/keycape/secrets-engine-openbao-client-rollout.py"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "net-kingdom",
|
||||
"path": "sso-mfa/k8s/keycape/deployment.yaml",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:83777942bc922c7d1719b0ad0b09e873105c342dae3b013bb65eeccf6d905626",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/sso-mfa/k8s/keycape/deployment.yaml"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "net-kingdom",
|
||||
"path": "workplans/NK-WP-0046-secrets-engine-openbao-client-registration.md",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:ef38481d26e599802d94f8b06a4d89c7c99a83c81ca5be9bcf7422b885867479",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/workplans/NK-WP-0046-secrets-engine-openbao-client-registration.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "net-kingdom",
|
||||
"path": "sso-mfa/k8s/keycape/README.md",
|
||||
"revision": "878abc93588e12b6da1bac055cfbb3abb8d7adf1",
|
||||
"sha256": "sha256:e7a002996fd57477f6bcd054264076fe04da17f8685095163c1c80dd57b753f2",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/net-kingdom/src/commit/878abc93588e12b6da1bac055cfbb3abb8d7adf1/sso-mfa/k8s/keycape/README.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "key-cape",
|
||||
"path": "workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md",
|
||||
"revision": "834b0d06a13bb2ece9cc98392cb39ba0e2167ecb",
|
||||
"sha256": "sha256:3a90a0c460fc439570820b96d1ddc3b7f8646c557ca3a8aa27c6d546bb1a845a",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/key-cape/src/commit/834b0d06a13bb2ece9cc98392cb39ba0e2167ecb/workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "key-cape",
|
||||
"path": "docs/evidence/2026-10-07-secrets-engine-openbao-issuance.json",
|
||||
"revision": "834b0d06a13bb2ece9cc98392cb39ba0e2167ecb",
|
||||
"sha256": "sha256:a405ef5289159c525695352ba71da7eca8e897b6f2dc7e5795f9b239361d8068",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/key-cape/src/commit/834b0d06a13bb2ece9cc98392cb39ba0e2167ecb/docs/evidence/2026-10-07-secrets-engine-openbao-issuance.json"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "secrets-engine",
|
||||
"path": "docs/evidence/2026-10-10-keycape-openbao-probe.json",
|
||||
"revision": "535681052cd55ca613706ecc60c39d299929b3c5",
|
||||
"sha256": "sha256:bf0b5df9f030499d96770f1d9fb2091a8d37da71422a6d456be7200d3a1a1782",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/535681052cd55ca613706ecc60c39d299929b3c5/docs/evidence/2026-10-10-keycape-openbao-probe.json"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "secrets-engine",
|
||||
"path": "docs/keycape-openbao-consumer-custody.md",
|
||||
"revision": "535681052cd55ca613706ecc60c39d299929b3c5",
|
||||
"sha256": "sha256:73efdd549f3feaccc53eefd6f1b95c8b9eb7091648f94ad80978ba5381be9124",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/535681052cd55ca613706ecc60c39d299929b3c5/docs/keycape-openbao-consumer-custody.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "railiance-cluster",
|
||||
"path": "SCOPE.md",
|
||||
"revision": "cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0",
|
||||
"sha256": "sha256:e4f6a8dd3d72a1f04f0d94721d57ca2a4c7e98790a8373876a5005b87ec5d8a6",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-cluster/src/commit/cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0/SCOPE.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "railiance-cluster",
|
||||
"path": "docs/rail-kubernetes-substrate-profile.md",
|
||||
"revision": "cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0",
|
||||
"sha256": "sha256:75beeca7ef9670efc0b92c1ef8a33e24b72acbcdee06ee8de3c6492cb69d4f6b",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-cluster/src/commit/cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0/docs/rail-kubernetes-substrate-profile.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "railiance-cluster",
|
||||
"path": "tools/cmd/railiance-backup-s2",
|
||||
"revision": "cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0",
|
||||
"sha256": "sha256:35c60b7ccccd7b4d5a1cf2134c1f2ca78c45040a7ffcc55f2c32c385a0a682a3",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-cluster/src/commit/cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0/tools/cmd/railiance-backup-s2"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "railiance-cluster",
|
||||
"path": "tools/cmd/railiance-restore-s2",
|
||||
"revision": "cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0",
|
||||
"sha256": "sha256:25be58968fee3eeb6069e5af08abe601e8f60f04241e8de4bb917a7c639882e5",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-cluster/src/commit/cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0/tools/cmd/railiance-restore-s2"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "railiance-cluster",
|
||||
"path": "docs/backup-restore.md",
|
||||
"revision": "cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0",
|
||||
"sha256": "sha256:4d0bbaad3d69f10179ba9590d3fa12fba2967202c756ecf1952436d1e27de902",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-cluster/src/commit/cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0/docs/backup-restore.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "railiance-master",
|
||||
"path": "docs/rail-kubernetes-boundary.md",
|
||||
"revision": "a0be0d3142b5392f1fb6271cf91325ce91a0f9d4",
|
||||
"sha256": "sha256:b7a382622e241c174b11a8645aba1801693f22950bb132760b2170fcb828ced1",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-master/src/commit/a0be0d3142b5392f1fb6271cf91325ce91a0f9d4/docs/rail-kubernetes-boundary.md"
|
||||
},
|
||||
{
|
||||
"lane": "tls_registration",
|
||||
"repo": "railiance-platform",
|
||||
"path": "docs/backup-provider-coverage.md",
|
||||
"revision": "08c1f036f2750097750f435efd76e8f6ee6df393",
|
||||
"sha256": "sha256:f5983aac1e8cc1828e9f73340b1f66c0e67cdcddc1a1e49cbe6f5e39e90c6641",
|
||||
"source": "https://forgejo.coulomb.social/coulomb/railiance-platform/src/commit/08c1f036f2750097750f435efd76e8f6ee6df393/docs/backup-provider-coverage.md"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,207 @@
|
|||
{
|
||||
"schema": "custodian.target-source-results.v1",
|
||||
"observed_at": "2026-10-16T22:42:25.642867+00:00",
|
||||
"scope": "Reviewed owner source plus generated local/disposable compatibility fixtures; no target gate closed",
|
||||
"canonical_tests": {
|
||||
"group_provisioner": {
|
||||
"passed": 65,
|
||||
"seconds": 8.55
|
||||
},
|
||||
"recovery_preparation": {
|
||||
"passed": 111,
|
||||
"seconds": 14.5
|
||||
},
|
||||
"staged_scanner": {
|
||||
"passed": 42,
|
||||
"seconds": 31.66
|
||||
}
|
||||
},
|
||||
"recovery_limitations": {
|
||||
"legacy_custody_tests_passed": 94,
|
||||
"legacy_real_sops_skipped": 61,
|
||||
"actual_owner_held_recovery": false,
|
||||
"private_admission_complete": false,
|
||||
"named_file_mode_parent_loss_fixed": false,
|
||||
"sealed_child_fd_lives_until_child_exit": true
|
||||
},
|
||||
"group_native_fixture": {
|
||||
"schema": "nk48.synthetic-groups-native-result.v1",
|
||||
"status": "synthetic_native_compatibility_passed",
|
||||
"manifest_sha256": "sha256:8a0514f5f14137355972400cd4852f48c892316d28e3abd3c86635d7cb81eef2",
|
||||
"production_contacted": false,
|
||||
"actual_credentials_used": false,
|
||||
"native_acceptance_claimed": false,
|
||||
"session": {
|
||||
"run_id": "ee97d0d3572a4d28971d9b19c6d4de78",
|
||||
"containers": [
|
||||
"nk49-kc-ee97d0d3572a4d28971d9b19c6d4de78-groups-lldap",
|
||||
"nk49-kc-ee97d0d3572a4d28971d9b19c6d4de78-groups-probe"
|
||||
],
|
||||
"label": "net-kingdom.recovery-run=ee97d0d3572a4d28971d9b19c6d4de78"
|
||||
},
|
||||
"containment_verified_before_private_import": true,
|
||||
"checks": {
|
||||
"only_loopback_and_no_external_routes": true,
|
||||
"actual_graphql_ensure_verified": true,
|
||||
"created_inventory_exact": true,
|
||||
"preexisting_membership_excluded": true,
|
||||
"separate_process_sqlite_restart_verified": true,
|
||||
"actual_graphql_revoke_verified": true,
|
||||
"preexisting_empty_and_shared_groups_preserved": true,
|
||||
"all_preexisting_users_and_memberships_preserved": true,
|
||||
"rollback_replay_nonmutating": true,
|
||||
"rolledback_key_cannot_recreate": true,
|
||||
"shared_membership_drift_refused_before_undo": true,
|
||||
"lost_actual_graphql_response_retains_intent": true,
|
||||
"reopened_uncertainty_refuses_ensure_and_revoke": true,
|
||||
"unknown_and_cross_case_receipts_refused": true
|
||||
},
|
||||
"container_cleanup_obligations": [
|
||||
{
|
||||
"container": "nk49-kc-ee97d0d3572a4d28971d9b19c6d4de78-groups-probe",
|
||||
"status": "absence_verified"
|
||||
},
|
||||
{
|
||||
"container": "nk49-kc-ee97d0d3572a4d28971d9b19c6d4de78-groups-lldap",
|
||||
"status": "absence_verified"
|
||||
}
|
||||
],
|
||||
"container_cleanup_verified": true
|
||||
},
|
||||
"original_group_receipt_sha256": "sha256:da93ca03cec2ad1bae639cc9863bbcaada331e4433ca101372d6bbce05c33382",
|
||||
"independent_group_cleanup": {
|
||||
"engine": "74f93783-6cef-43a8-a3c4-f62586cd3bc1",
|
||||
"exact_container_names_absent": true,
|
||||
"exact_run_label_inventory_empty": true,
|
||||
"hard_parent_loss_claim": false
|
||||
},
|
||||
"configured_hooks": {
|
||||
"status": "verified",
|
||||
"scope": "actual configured shared and Custodian hooks; generated alternate-index fixtures only",
|
||||
"source_sha256": "sha256:e709c658f779534fcab093207b0a78e49d54fc584c515fdf7ac535ce75f6c400",
|
||||
"scanner_sha256": "sha256:88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509",
|
||||
"hook_sha256": "sha256:d50cf763dc9814383c6886e30b6650bbbdcb49ddd78889082e3fda3626a2cbfd",
|
||||
"provider_calls": 0,
|
||||
"real_credentials_read": false,
|
||||
"real_index_opened": false,
|
||||
"actual_hook_unavailable_scanner": "pending; no host scanner mutation performed",
|
||||
"cases": [
|
||||
{
|
||||
"repo": "repo-manager",
|
||||
"cases": [
|
||||
{
|
||||
"case": "clean",
|
||||
"status": "clean",
|
||||
"exit_code": 0,
|
||||
"scanned_blobs": 1
|
||||
},
|
||||
{
|
||||
"case": "generated-private-key",
|
||||
"status": "blocked",
|
||||
"exit_code": 1,
|
||||
"scanned_blobs": 1
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"repo": "the-custodian",
|
||||
"cases": [
|
||||
{
|
||||
"case": "clean",
|
||||
"status": "clean",
|
||||
"exit_code": 0,
|
||||
"scanned_blobs": 1
|
||||
},
|
||||
{
|
||||
"case": "generated-private-key",
|
||||
"status": "blocked",
|
||||
"exit_code": 1,
|
||||
"scanned_blobs": 1
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"fixture_removed": true,
|
||||
"new_scan_storage_absent": true,
|
||||
"real_index_stat_unchanged": true,
|
||||
"real_head_unchanged": true,
|
||||
"routing_and_artifacts_unchanged": true,
|
||||
"driver_sha256": "sha256:c91d2dc83f04ec17147c0e1410e42f4817b69e4cc5a02201682e5fa7b021b6f4"
|
||||
},
|
||||
"original_hook_receipt_sha256": "sha256:c6541e459b239cf21cb87234fecf7b5c9754dfc55064e07ab87903e3761959a8",
|
||||
"scanner_parity": {
|
||||
"exact_old_new_cases": 13,
|
||||
"fixture_removed": true
|
||||
},
|
||||
"scanner_performance": {
|
||||
"observations": [
|
||||
{
|
||||
"case": "clean-1x1KiB",
|
||||
"bytes": 1024,
|
||||
"unique_blobs": 1,
|
||||
"warm_samples": 7,
|
||||
"warm_p50_ms": 835.286,
|
||||
"warm_p95_nearest_rank_ms": 931.695,
|
||||
"warm_median_MiB_per_second": 0.001
|
||||
},
|
||||
{
|
||||
"case": "clean-16x1KiB",
|
||||
"bytes": 16384,
|
||||
"unique_blobs": 16,
|
||||
"warm_samples": 7,
|
||||
"warm_p50_ms": 884.239,
|
||||
"warm_p95_nearest_rank_ms": 965.383,
|
||||
"warm_median_MiB_per_second": 0.018
|
||||
},
|
||||
{
|
||||
"case": "clean-64x1KiB",
|
||||
"bytes": 65536,
|
||||
"unique_blobs": 64,
|
||||
"warm_samples": 7,
|
||||
"warm_p50_ms": 904.024,
|
||||
"warm_p95_nearest_rank_ms": 1144.16,
|
||||
"warm_median_MiB_per_second": 0.069
|
||||
},
|
||||
{
|
||||
"case": "clean-1x1MiB",
|
||||
"bytes": 1048576,
|
||||
"unique_blobs": 1,
|
||||
"warm_samples": 7,
|
||||
"warm_p50_ms": 1902.956,
|
||||
"warm_p95_nearest_rank_ms": 2524.1,
|
||||
"warm_median_MiB_per_second": 0.525
|
||||
},
|
||||
{
|
||||
"case": "synthetic-private-key",
|
||||
"bytes": 1675,
|
||||
"unique_blobs": 1,
|
||||
"warm_samples": 7,
|
||||
"warm_p50_ms": 882.714,
|
||||
"warm_p95_nearest_rank_ms": 949.596,
|
||||
"warm_median_MiB_per_second": 0.002
|
||||
}
|
||||
],
|
||||
"original_receipt_sha256": "sha256:0dae6e12f4067b95864e1d62f8760e6aece302304f2aee4ce0b90144fce64143",
|
||||
"warm_repetitions": 7,
|
||||
"percentiles": "nearest rank; descriptive small sample",
|
||||
"baseline_p50_ms": {
|
||||
"clean-1x1KiB": 702.358,
|
||||
"clean-16x1KiB": 12065.334,
|
||||
"clean-64x1KiB": 49171.849,
|
||||
"clean-1x1MiB": 2548.887
|
||||
},
|
||||
"single_blob_slowdown_retained": true,
|
||||
"receive_ci_or_workload_claim": false
|
||||
},
|
||||
"review_refinements_retained": [
|
||||
"Group exactly-one intent row update and database identity checks",
|
||||
"Definite before-write refusal preserves evidence and releases active fence",
|
||||
"Scanner batches and reports moved to verified private tmpfs with parent-death cleanup",
|
||||
"SQLite-on-PVC production guidance corrected before publication against accepted ADR-0015"
|
||||
],
|
||||
"production_deployments": false,
|
||||
"actual_credentials_used": false,
|
||||
"native_target_acceptance": false,
|
||||
"all_sixteen_target_gates_remain_open": true,
|
||||
"encoding": "Published checksum strings carry explicit sha256: type prefixes; original receipt bytes remain workspace-local and separately hashed."
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue