Advance supervised agent records and close verified Secret annotation guard

docs/changes/CUST-WP-0073/orphan-secret-deletion.json

@@ -0,0 +1,27 @@
+{
+  "reviewed_at": "2026-09-28T14:30:16.548657+00:00",
+  "resource": "Secret",
+  "namespace": "platform-pg-drill",
+  "name": "drill-minio",
+  "uid": "2fcb66df-d90f-4776-8ea0-8ca1a04bd307",
+  "created_at": "2026-08-13T11:09:33Z",
+  "namespace_exists": false,
+  "pods_in_namespace": 0,
+  "delete_options": {
+    "apiVersion": "v1",
+    "kind": "DeleteOptions",
+    "preconditions": {
+      "uid": "2fcb66df-d90f-4776-8ea0-8ca1a04bd307"
+    }
+  },
+  "proposal": "Delete only this orphan drill Secret, using the UID precondition. Do not recreate namespace, delete PVC or alter other resources.",
+  "reason": "Namespace is absent; API refuses annotation-only metadata update. Secret is an August 13 scratch drill artifact; referencing Deployment has zero Ready replicas and no pods.",
+  "risk": "Deletion removes the remaining credential copy in this orphan Secret. No Secret value has been inspected or archived.",
+  "storage": "Bound 3Gi platform-pg-drill-1 PVC and its PV retained unchanged.",
+  "approval": "Founder explicitly selected: Delete only the orphan Secret",
+  "executed": true,
+  "server_dry_run_passed": true,
+  "executed_at": "2026-09-28T16:07:36.040146+00:00",
+  "verified_absent": true,
+  "pvc_unchanged": true
+}