coulomb/the-custodian
4
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Orientation §2: bao.coulomb.social is retired, per railiance-platform RPF-WP-0025-T03
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
codex 2026-09-23 22:07:50 +02:00
parent 7980edd7e2
commit edb95db8fe
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/agent-environment-orientation.md
View file

@ -1,7 +1,7 @@
# Agent environment orientation
**Audience:** every coding agent working in this estate (Claude Code, Codex, Grok, custodian workers). It is tool-neutral.
**Owner:** the-custodian. **Last verified:** 2026-09-22.
**Owner:** the-custodian. **Last verified:** 2026-09-23.
These are facts about the *environment*: where things run, how to reach them, and the traps that cost real time. Each section names its owner. When a fact changes, fix it here and in the owner's record.
@ -28,10 +28,10 @@ Services are private by default (railiance-master ADR-0008) and are reached thro
| Service | Address on the workstation | Tunnel |
|---|---|---|
| State Hub API | `http://127.0.0.1:8000` (health: `/state/health`) | `state-hub-primary` |
| OpenBao | `http://127.0.0.1:18200` | `openbao-ui-railiance01` |
| OpenBao | `http://127.0.0.1:18200` (in-cluster: `openbao.openbao.svc:8200`) | `openbao-ui-railiance01` |
| k3s API | `https://127.0.0.1:16444` (`~/.kube/config` → `config-railiance01`) | `k3s-api-railiance01` |
**Trap (fixed on the workstation 2026-09-22):** `BAO_ADDR`/`VAULT_ADDR` used to default to `https://bao.coulomb.social`, which is **unreachable**: it resolves to railiance01, but Traefik serves its default self-signed certificate there and no route matches the host (`-k` still gives 404). `~/.bashrc` now exports `http://127.0.0.1:18200` for both. A shell opened before that change, or any other host, still needs the prefix on every `bao` command. Whether the public name should exist at all is railiance-platform's call (hub message `e8ccbc2f`).
**Retired name:** `bao.coulomb.social` is **retired**, not a trap to work around. Its public Ingress was retracted on 2026-09-15 (railiance-master RMASTER-WP-0020-T09); the self-signed Traefik cert and the 404 are leftovers of a dangling DNS record, and DNS withdrawal sits with railiance-infra. No certificate or route will be restored (railiance-platform RPF-WP-0025-T03). Operators use the tunnel `http://127.0.0.1:18200`, which `~/.bashrc` has exported as `BAO_ADDR`/`VAULT_ADDR` since 2026-09-22; workloads use `openbao.openbao.svc:8200`. A shell opened before that change still needs the prefix.
## 3. Permissions and the agent harness (Claude Code)