Record verified image release and acknowledged Forgejo source followthrough
This commit is contained in:
codex
parent
06494e7ebf
commit
eeb2c1f093
33 changed files with 1280 additions and 12 deletions
|
|
@ -231,7 +231,7 @@
|
|||
"proposal_id": "INFD-WP-0009-T04/purpose-overlay-v1",
|
||||
"trial_id": "infd-purpose-20261011-r1",
|
||||
"disposition": "accepted_unchanged",
|
||||
"outcome": "partial_execution_stopped_unverified",
|
||||
"outcome": "verified_with_rescue_and_independent_readonly_reconciliation",
|
||||
"proposal_ref": "informed-decision/docs/evidence/2026-10-11-purpose-image-release/decision-packet.md",
|
||||
"original_revision": "combined-ffa2679a",
|
||||
"original_digest": "fd78d486174670e12efb2f812bac02e68f294e7791b9302d0d458c053240f5a9",
|
||||
|
|
@ -287,13 +287,68 @@
|
|||
"backup_ref": "docs/evidence/2026-10-10-security-consolidation/infd-purpose-approved-drill-backup.json",
|
||||
"original_journal_retained": true,
|
||||
"retry_executed": false
|
||||
}
|
||||
},
|
||||
"revisions": [
|
||||
{
|
||||
"revision": "rescue-r2-d05d6e3b",
|
||||
"status": "actual_target_verified_with_refinement",
|
||||
"manifest_sha256": "d05d6e3b15df9acf1d7aef0ba2ec82a5a00d979ab1f324e981025cffe2cc753d",
|
||||
"memo_version": 2,
|
||||
"memo_sha256": "391330d062ede170a546415886d18b4895ba24d313a0dd50dcc1591c1aa3c2fa",
|
||||
"revision_request_sha256": "feb946218e9611e1b686c1672fd9142896c55fd88aa2e59fabc6cfadbe22e327",
|
||||
"revision_command_digest": "ccbeca292dd4ffcd0ed8a4669c82a93f9b773a30186966d3f146d5db8e5e6b8a",
|
||||
"source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2",
|
||||
"execution_bundle_sha256": "49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5",
|
||||
"execution_plan_sha256": "9ce5728a561e6d38f8497201baa2b840d11444a0af8ad6234dfc37428113f258",
|
||||
"delta": "Explicitly close WAL-aware readers; frozen zero-WAL hash-bound snapshot inspection uses immutable mode; distinct drill-copy-rescue-r1 and new linked journal preserve original uncertain attempt and SHM. Conditional remaining same-image phases only after new approval. Historical helper manifest label corrected.",
|
||||
"verification": "26 synthetic executor/reader tests plus independent scope, custody and replay counterexamples; actual live drill/rollout remains pending.",
|
||||
"rollback": "Deployment-only previous image/source recovery preserves latest database; old uncertain journal never rewritten.",
|
||||
"cost_estimate": "EUR0 recurring infrastructure; existing temporary private-copy storage and attended time unpriced.",
|
||||
"risk_estimate": "Existing approved snapshot contains private live data; metadata-only logging/private custody, no native sidecar deletion, no rollback over current database. Scoped Recreate restart and reversible Deployment-only image change conditional on actual compatibility drill.",
|
||||
"approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1",
|
||||
"disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751",
|
||||
"approved_at": "2026-10-11T06:53:43Z",
|
||||
"approved_source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2",
|
||||
"approval_version": 2,
|
||||
"review_version": 1,
|
||||
"review_memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f",
|
||||
"pre_actuation_attempts": [
|
||||
{
|
||||
"outcome": "refused_before_phase",
|
||||
"reason": "Root invocation supplied alternate receipt filenames instead of approved fixed interface",
|
||||
"rescue_journal_created": false,
|
||||
"native_operation_executed": false,
|
||||
"correction": "Invoke unchanged approved helper using its original fixed receipt paths; fresh native source2 authority refresh"
|
||||
}
|
||||
],
|
||||
"native_execution": true,
|
||||
"original_verify_phase_state": "UNCERTAIN",
|
||||
"original_failed_copy_state": "UNCERTAIN",
|
||||
"phase_replay_executed": false,
|
||||
"independent_verification_ref": "docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-verification-receipt.json",
|
||||
"actual_source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2",
|
||||
"actual_image": "sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
||||
"actual_pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662",
|
||||
"ready_replicas": 1,
|
||||
"rollback_executed": false,
|
||||
"actual_native_provider_allow": true,
|
||||
"synthetic_installed_refusal_variants": 8,
|
||||
"medium_finding_due": "2026-10-18T23:59:59Z",
|
||||
"product_acceptance_commit": "0693c40",
|
||||
"platform_actual_acceptance_commit": "d47cbd0",
|
||||
"task_closed": "INFD-WP-0009-T04",
|
||||
"workplan_status": "active",
|
||||
"risk_task": "INFD-WP-0009-T05",
|
||||
"live_unpromoted_verifier_residual": "INFD-IN-0010"
|
||||
}
|
||||
],
|
||||
"current_revision_status": "owner_scoped_task_acceptance_recorded"
|
||||
},
|
||||
{
|
||||
"proposal_id": "NK-FORGEJO-TYPE12-SOURCE-20261011-R1",
|
||||
"trial_id": "forgejo-type12-source-20261011-r1",
|
||||
"disposition": "pending",
|
||||
"outcome": "not_executed",
|
||||
"disposition": "accepted_unchanged",
|
||||
"outcome": "verified_source_acknowledgment_recorded",
|
||||
"proposal_ref": "/home/worsch/net-kingdom/docs/proposals/2026-10-11-forgejo-type12-acknowledgment/proposal.json",
|
||||
"original_revision": "final34-0b377d647ca748cd03c92f9792396412048055d4bde9f7bb06ff6d413f7acd68",
|
||||
"original_digest": "585cee731de30d2b37883a57abfd9eb32f023ee694e8d911989109d5caf80569",
|
||||
|
|
@ -307,7 +362,16 @@
|
|||
"cost_estimate_eur": 0.1,
|
||||
"risk_estimate": "Source-only decision. No credential exposure or live runtime change authorized.",
|
||||
"promotion_evidence": false,
|
||||
"native_execution": false
|
||||
"native_execution": false,
|
||||
"approved_digest": "585cee731de30d2b37883a57abfd9eb32f023ee694e8d911989109d5caf80569",
|
||||
"approved_revision": "final34-0b377d647ca748cd03c92f9792396412048055d4bde9f7bb06ff6d413f7acd68",
|
||||
"approved_at": "2026-10-11T06:47:39Z",
|
||||
"approval_ref": "8e9332c8-754a-420c-b8b7-445cb4fe6765",
|
||||
"human_disposition_id": "disp-315d54ad-20f1-40e6-862c-6c7d2e8f0ea8",
|
||||
"approved_source_revision": "584a964684a28e759edc19862a91938bda161cb3",
|
||||
"source_recording_commit": "f6856cd",
|
||||
"application_design_receipt_commit": "d349815",
|
||||
"followthrough_version_selection_commit": "bb9b9b5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -0,0 +1,34 @@
|
|||
{
|
||||
"disposition_count": 1,
|
||||
"dispositions": [
|
||||
{
|
||||
"approval_id": null,
|
||||
"approved_at": "2026-10-11T06:47:39+00:00",
|
||||
"decided_at": null,
|
||||
"disposition": {
|
||||
"actor": {
|
||||
"kind": "person",
|
||||
"sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local"
|
||||
},
|
||||
"approval_id": "8e9332c8-754a-420c-b8b7-445cb4fe6765",
|
||||
"at": "2026-10-11T06:47:39Z",
|
||||
"id": "disp-315d54ad-20f1-40e6-862c-6c7d2e8f0ea8",
|
||||
"memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd",
|
||||
"memo_version": 1,
|
||||
"note": null,
|
||||
"presentation_id": "pres-5a52f932-8c65-46cc-8054-0264f47f934a",
|
||||
"reasons": [],
|
||||
"verb": "accept"
|
||||
},
|
||||
"id": null,
|
||||
"submission_state": "confirmed"
|
||||
}
|
||||
],
|
||||
"memo_id": "infd-20261011-forgejo-type12-source-r1",
|
||||
"review": {
|
||||
"intake_state": "ready",
|
||||
"memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd",
|
||||
"path": "/review?memo_id=review-126c6c90-11ba-4609-b8d1-75e054c246cd",
|
||||
"stale": false
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
"human_dispositions": 0,
|
||||
"memo_id": "infd-20261011-forgejo-type12-source-r1",
|
||||
"outcome_review": {
|
||||
"intake_state": "not_submitted",
|
||||
"memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd",
|
||||
"stale": false
|
||||
},
|
||||
"publication_event_id": "cbe4a05f-c7ab-4770-8e6e-8b537b165f7e",
|
||||
"queue_detail": "queued",
|
||||
"queue_status": "pending",
|
||||
"register_event_id": "66d85468-6cd9-4a40-8c35-febc152758c0",
|
||||
"review_event_id": "5be59cf9-a207-43aa-9fe2-131dc1e53538",
|
||||
"review_memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd",
|
||||
"revision_event_id": null,
|
||||
"version": 1,
|
||||
"workspace_url": "https://decisions.coulomb.social/decisions/infd-20261011-forgejo-type12-source-r1?version=1"
|
||||
}
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
{
|
||||
"disposition_count": 0,
|
||||
"dispositions": [],
|
||||
"memo_id": "infd-20261011-forgejo-type12-source-r1",
|
||||
"review": {
|
||||
"intake_state": "ready",
|
||||
"memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd",
|
||||
"path": "/review?memo_id=review-126c6c90-11ba-4609-b8d1-75e054c246cd",
|
||||
"stale": false
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
{
|
||||
"proposal_id": "NK-FORGEJO-TYPE12-SOURCE-20261011-R1",
|
||||
"source_revision": "584a964684a28e759edc19862a91938bda161cb3",
|
||||
"manifest_sha256": "0b377d647ca748cd03c92f9792396412048055d4bde9f7bb06ff6d413f7acd68",
|
||||
"submission_digest": "585cee731de30d2b37883a57abfd9eb32f023ee694e8d911989109d5caf80569",
|
||||
"post_anchor_review_sha256": "0893b8fe936c72394147bc511c6a21af8e75866c96549ceec8af5d2abd1ee100",
|
||||
"execution_permitted": false,
|
||||
"canonical_case_status": "proposed",
|
||||
"source_only": true
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"id": "44f9e3e8-f414-5ed9-8cca-f52e7183e65c",
|
||||
"title": "Founder accepts exact Forgejo type 1.2 source-design package",
|
||||
"decision_type": "made",
|
||||
"status": "resolved",
|
||||
"decided_at": "2026-10-11T06:47:39Z"
|
||||
}
|
||||
|
|
@ -0,0 +1,31 @@
|
|||
{
|
||||
"additional_readonly_metadata_proof": true,
|
||||
"all_checks_pass": true,
|
||||
"canonical_controlled_values_sha256": "bb6e6ef2809d15ef27db05fa75cabd40fc4e4bfe43e1f7a3ac750ed69380adaa",
|
||||
"controlled_field_names": [
|
||||
"automountServiceAccountToken",
|
||||
"containers",
|
||||
"dnsPolicy",
|
||||
"hostIPC",
|
||||
"hostNetwork",
|
||||
"hostPID",
|
||||
"initContainers",
|
||||
"restartPolicy",
|
||||
"runtimeClassName",
|
||||
"schedulerName",
|
||||
"securityContext",
|
||||
"serviceAccount",
|
||||
"serviceAccountName",
|
||||
"shareProcessNamespace",
|
||||
"terminationGracePeriodSeconds",
|
||||
"volumes"
|
||||
],
|
||||
"controlled_pod_fields_match_sealed_candidate": true,
|
||||
"database_opened": false,
|
||||
"exact_one_container": true,
|
||||
"mutation_executed": false,
|
||||
"native_gid": 10001,
|
||||
"native_uid": 10001,
|
||||
"original_phase_replayed": false,
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662"
|
||||
}
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"native_and_offcluster_original_snapshots_retained": true,
|
||||
"only_disposable_offline_volume_removed": "infd-purpose-r1-restore-20261011"
|
||||
}
|
||||
|
|
@ -0,0 +1,53 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"accepted_at": "2026-10-11T06:53:43Z",
|
||||
"approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1",
|
||||
"disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751",
|
||||
"verified_at": "2026-10-11T06:58:48.455148+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"native_parent_private": true,
|
||||
"native_uid": 10001,
|
||||
"phase": "cutover-backup",
|
||||
"pod_name": "informed-decision-f557556df-mwpz7",
|
||||
"pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7",
|
||||
"raw_output_withheld": true,
|
||||
"snapshot_bytes": 21512192,
|
||||
"snapshot_file": "cutover.sqlite",
|
||||
"snapshot_readonly": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 56,
|
||||
"pending": 0,
|
||||
"records": 16
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 336
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 43
|
||||
}
|
||||
},
|
||||
"snapshot_sha256": "38e37c3b096117084c209763f166cf58c82849b0f24f9d22aee545f51d270b1f",
|
||||
"source_readonly_baseline": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 56,
|
||||
"pending": 0,
|
||||
"records": 16
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 336
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 43
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,36 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"accepted_at": "2026-10-11T06:53:43Z",
|
||||
"approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1",
|
||||
"disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751",
|
||||
"verified_at": "2026-10-11T06:59:19.173552+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"off_cluster_private_copy_verified": true,
|
||||
"phase": "cutover-copy",
|
||||
"pod_name": "informed-decision-f557556df-mwpz7",
|
||||
"pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7",
|
||||
"raw_output_withheld": true,
|
||||
"snapshot_bytes": 21512192,
|
||||
"snapshot_contents_output": false,
|
||||
"snapshot_file": "cutover.sqlite",
|
||||
"snapshot_readonly": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 56,
|
||||
"pending": 0,
|
||||
"records": 16
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 336
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 43
|
||||
}
|
||||
},
|
||||
"snapshot_sha256": "38e37c3b096117084c209763f166cf58c82849b0f24f9d22aee545f51d270b1f"
|
||||
}
|
||||
|
|
@ -0,0 +1,46 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"client_diff_sha256": "fdfc0a41a0b4baf1e77dfab673e688aa3a3bb6e9bf99cfd0eee6d58cd22a7fa1",
|
||||
"latest_live_database_retained": true,
|
||||
"live_counts_may_include_concurrent_commits": true,
|
||||
"live_readonly_schema_integrity_counts": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 56,
|
||||
"pending": 0,
|
||||
"records": 16
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 336
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 43
|
||||
}
|
||||
},
|
||||
"native_approval_verified_by_root": {
|
||||
"accepted_at": "2026-10-11T06:53:43Z",
|
||||
"approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1",
|
||||
"disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751",
|
||||
"verified_at": "2026-10-11T07:00:22.848375+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"operation_requested": true,
|
||||
"phase": "release",
|
||||
"pod_name": "informed-decision-f557556df-mwpz7",
|
||||
"pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7",
|
||||
"prune": false,
|
||||
"raw_output_withheld": true,
|
||||
"resources": [
|
||||
{
|
||||
"group": "apps",
|
||||
"kind": "Deployment",
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision"
|
||||
}
|
||||
],
|
||||
"rollout_verified": false,
|
||||
"source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2"
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"all_checks_pass": false,
|
||||
"failure": "fixed phase outcome uncertain; original evidence retained; no retry",
|
||||
"failure_class": "ValueError",
|
||||
"phase": "verify",
|
||||
"raw_output_withheld": true
|
||||
}
|
||||
|
|
@ -0,0 +1,68 @@
|
|||
{
|
||||
"admin_counts": {
|
||||
"lifecycle": {
|
||||
"events": 50,
|
||||
"pending": 0,
|
||||
"records": 15
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 320
|
||||
},
|
||||
"schema_version": 5,
|
||||
"submissions": {
|
||||
"confirmed": 41
|
||||
}
|
||||
},
|
||||
"all_checks_pass": true,
|
||||
"created_volume_identity": {
|
||||
"CreatedAt": "2026-10-11T08:57:37+02:00",
|
||||
"Driver": "local",
|
||||
"Labels": {
|
||||
"informed-decision.attempt": "b2e45df1-19fc-4fac-9153-920dc6153ee9",
|
||||
"informed-decision.case": "infd-purpose-20261011-r1",
|
||||
"informed-decision.use": "offline-restore-only"
|
||||
},
|
||||
"Name": "infd-purpose-r1-restore-20261011",
|
||||
"Scope": "local"
|
||||
},
|
||||
"network": "none",
|
||||
"offline_post_admin_readonly": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 50,
|
||||
"pending": 0,
|
||||
"records": 15
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 320
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 41
|
||||
}
|
||||
},
|
||||
"offline_readonly": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 50,
|
||||
"pending": 0,
|
||||
"records": 15
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 320
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 41
|
||||
}
|
||||
},
|
||||
"offline_volume": "infd-purpose-r1-restore-20261011",
|
||||
"original_snapshot_hash_unchanged": true,
|
||||
"original_snapshot_retained": true,
|
||||
"runtime_tokens_or_config_mounted": false,
|
||||
"service_entrypoint_started": false
|
||||
}
|
||||
|
|
@ -0,0 +1,36 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"native_approval_verified_by_root": {
|
||||
"accepted_at": "2026-10-11T06:53:43Z",
|
||||
"approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1",
|
||||
"disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751",
|
||||
"verified_at": "2026-10-11T06:56:35.092109+00:00"
|
||||
},
|
||||
"native_authenticated_grant": false,
|
||||
"off_cluster_private_copy_verified": true,
|
||||
"phase": "drill-copy-rescue-r1",
|
||||
"pod_name": "informed-decision-f557556df-mwpz7",
|
||||
"pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7",
|
||||
"raw_output_withheld": true,
|
||||
"snapshot_bytes": 19537920,
|
||||
"snapshot_contents_output": false,
|
||||
"snapshot_file": "drill.sqlite",
|
||||
"snapshot_readonly": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 50,
|
||||
"pending": 0,
|
||||
"records": 15
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 320
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 41
|
||||
}
|
||||
},
|
||||
"snapshot_sha256": "8756cf825df9e7b5b74bb4a0106a5027f5cff2c59ff45d7b48eed8522a7d33f3"
|
||||
}
|
||||
|
|
@ -0,0 +1,87 @@
|
|||
{
|
||||
"all_checks_pass": "diagnosis_only",
|
||||
"application_uid": "499868f2-eabc-4df4-ae31-b89ce58d750d",
|
||||
"configmap_uid": "90113d2d-54d9-4e82-b1d3-90b49ebed2b5",
|
||||
"dependency_seals_match": true,
|
||||
"deployment_uid": "a588e10a-90d2-4883-975e-6dd8b8feca92",
|
||||
"diagnostic_only": true,
|
||||
"fixture_exit_code": 0,
|
||||
"fixture_result": {
|
||||
"advisory_or_malformed_refused": 8,
|
||||
"binding_forms_allowed": 2,
|
||||
"installed_image_purpose_variants": 10,
|
||||
"native_provider": false,
|
||||
"synthetic_only": true
|
||||
},
|
||||
"generation": 25,
|
||||
"health": {
|
||||
"/healthz": 200,
|
||||
"/readyz": 200
|
||||
},
|
||||
"helper_source_amended": false,
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
||||
"independent_readonly_reconciliation": true,
|
||||
"module": {
|
||||
"is_regular": true,
|
||||
"mode": "0o644",
|
||||
"sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62",
|
||||
"uid": 0
|
||||
},
|
||||
"mutation_executed": false,
|
||||
"native_provider_allow_path_proof": "Separate root-authenticated outcomes readback after new Ready image; installed refusal checks below are synthetic",
|
||||
"native_uid": 10001,
|
||||
"operation": {
|
||||
"exact_resources": [
|
||||
{
|
||||
"group": "apps",
|
||||
"kind": "Deployment",
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision"
|
||||
}
|
||||
],
|
||||
"finished_at": "2026-10-11T07:00:30Z",
|
||||
"initiated_by": {
|
||||
"username": "custodian-codex"
|
||||
},
|
||||
"original_release_request_explicit_prune_false": true,
|
||||
"phase": "Succeeded",
|
||||
"prune_effective": false,
|
||||
"prune_field_present": false,
|
||||
"started_at": "2026-10-11T07:00:30Z",
|
||||
"sync_result_resources": [
|
||||
{
|
||||
"group": "apps",
|
||||
"kind": "Deployment",
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision",
|
||||
"status": "Synced",
|
||||
"syncPhase": "Sync"
|
||||
}
|
||||
]
|
||||
},
|
||||
"original_phase_replayed": false,
|
||||
"original_verify_journal_state": "UNCERTAIN_preserved",
|
||||
"pod_image_id": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
||||
"pod_name": "informed-decision-5557446c88-lvm88",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662",
|
||||
"pvc_uid": "d80b25b1-141a-441b-b205-98fa2fd98b7c",
|
||||
"readonly_counts": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 56,
|
||||
"pending": 0,
|
||||
"records": 16
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 336
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 43
|
||||
}
|
||||
},
|
||||
"ready_replicas": 1,
|
||||
"source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2"
|
||||
}
|
||||
|
|
@ -0,0 +1,84 @@
|
|||
{
|
||||
"all_checks_pass": true,
|
||||
"application_uid": "499868f2-eabc-4df4-ae31-b89ce58d750d",
|
||||
"configmap_uid": "90113d2d-54d9-4e82-b1d3-90b49ebed2b5",
|
||||
"database_opened_readonly": true,
|
||||
"dependency_seals_match": true,
|
||||
"deployment_uid": "a588e10a-90d2-4883-975e-6dd8b8feca92",
|
||||
"generation": 25,
|
||||
"health_statuses": {
|
||||
"/healthz": 200,
|
||||
"/readyz": 200
|
||||
},
|
||||
"helper_source_amended": false,
|
||||
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
||||
"independent_readonly_reconciliation": true,
|
||||
"installed_purpose_checks": {
|
||||
"advisory_or_malformed_refused": 8,
|
||||
"binding_forms_allowed": 2,
|
||||
"installed_image_purpose_variants": 10,
|
||||
"native_provider": false,
|
||||
"synthetic_only": true
|
||||
},
|
||||
"live_readonly_schema_integrity_counts": {
|
||||
"integrity": "ok",
|
||||
"lifecycle": {
|
||||
"events": 56,
|
||||
"pending": 0,
|
||||
"records": 16
|
||||
},
|
||||
"outbox": {
|
||||
"delivered": 336
|
||||
},
|
||||
"read_only_pre_open": true,
|
||||
"schema_version": 5,
|
||||
"store_constructed": false,
|
||||
"submissions": {
|
||||
"confirmed": 43
|
||||
}
|
||||
},
|
||||
"module_mode": "0644",
|
||||
"module_sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62",
|
||||
"module_uid": 0,
|
||||
"mutation_executed": false,
|
||||
"native_provider_allow_path_proof": "Separate root-authenticated outcomes readback after new Ready image; installed refusal checks below are synthetic",
|
||||
"native_uid": 10001,
|
||||
"operation": {
|
||||
"exact_resources": [
|
||||
{
|
||||
"group": "apps",
|
||||
"kind": "Deployment",
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision"
|
||||
}
|
||||
],
|
||||
"finished_at": "2026-10-11T07:00:30Z",
|
||||
"initiated_by": {
|
||||
"username": "custodian-codex"
|
||||
},
|
||||
"original_release_request_explicit_prune_false": true,
|
||||
"phase": "Succeeded",
|
||||
"prune_effective": false,
|
||||
"prune_field_present": false,
|
||||
"started_at": "2026-10-11T07:00:30Z",
|
||||
"sync_result_resources": [
|
||||
{
|
||||
"group": "apps",
|
||||
"kind": "Deployment",
|
||||
"name": "informed-decision",
|
||||
"namespace": "informed-decision",
|
||||
"status": "Synced",
|
||||
"syncPhase": "Sync"
|
||||
}
|
||||
]
|
||||
},
|
||||
"original_phase_replayed": false,
|
||||
"original_verify_journal_state": "UNCERTAIN_preserved",
|
||||
"pod_image_id": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
||||
"pod_name": "informed-decision-5557446c88-lvm88",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662",
|
||||
"pvc_uid": "d80b25b1-141a-441b-b205-98fa2fd98b7c",
|
||||
"ready_replicas": 1,
|
||||
"source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2",
|
||||
"store_or_admin_constructed": false
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"image": "quay.io/argoproj/argocd:v3.5.3",
|
||||
"kind": "StatefulSet",
|
||||
"name": "argocd-application-controller",
|
||||
"namespace": "argocd",
|
||||
"native_metadata_observed": true
|
||||
}
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
{
|
||||
"candidate_resources_unchanged": true,
|
||||
"cpu_request_percent": 86,
|
||||
"cpu_requested_millicores": 3460,
|
||||
"deployment_strategy": "Recreate",
|
||||
"memory_request_percent": 59,
|
||||
"memory_requested_mib": 9472,
|
||||
"scope": "read-only node allocation check before approved rollout",
|
||||
"verified_at": "2026-10-11T06:59:03.816754+00:00"
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"task_id": "0e1bb868-7bc2-5d4d-953c-e0edaf660ad0",
|
||||
"source_task": "INFD-WP-0009-T04",
|
||||
"status": "done",
|
||||
"needs_human": false,
|
||||
"human_wait_flag_changed": false
|
||||
}
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
"actual_native_provider_operation": true,
|
||||
"evidence_basis": "Authenticated native HTTP success after image rollout; installed LifecycleService.outcomes invokes _authorize/PolicyClient.check and current() before returning. Actual installed module hash and configuration seals independently verified.",
|
||||
"extra_provider_denial_probe_executed": false,
|
||||
"installed_module_sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62",
|
||||
"limitation": "Proves actual canonical allow-path preservation; does not claim provider emitted advisory responses or all refusal variants came from native provider.",
|
||||
"new_image": "sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
||||
"operation": "lifecycle.outcomes",
|
||||
"pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662",
|
||||
"service": "State Hub admitted memo dispatcher using internal mounted credential",
|
||||
"source_memo_id": "infd-20261011-purpose-overlay-r1",
|
||||
"source_memo_version": 2,
|
||||
"synthetic_installed_refusal_variants": 8,
|
||||
"synthetic_variant_check_is_native_provider_response": false,
|
||||
"transport": "fixed internal ORIGIN, no redirects, GET /v1/decisions/infd-20261011-purpose-overlay-r1/outcomes?version=2",
|
||||
"verification_kind": "post-rollout canonical provider-backed outcomes operation",
|
||||
"verified_at": "2026-10-11T07:01:37.243411+00:00"
|
||||
}
|
||||
|
|
@ -0,0 +1,8 @@
|
|||
{
|
||||
"approval_binding_digest_present": false,
|
||||
"approval_id": null,
|
||||
"memo_id": "infd-20261011-purpose-overlay-r1",
|
||||
"read_only_metadata": true,
|
||||
"sealed": false,
|
||||
"source_version": 1
|
||||
}
|
||||
|
|
@ -0,0 +1,34 @@
|
|||
{
|
||||
"disposition_count": 1,
|
||||
"dispositions": [
|
||||
{
|
||||
"approval_id": null,
|
||||
"approved_at": "2026-10-11T06:53:43+00:00",
|
||||
"decided_at": null,
|
||||
"disposition": {
|
||||
"actor": {
|
||||
"kind": "person",
|
||||
"sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local"
|
||||
},
|
||||
"approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1",
|
||||
"at": "2026-10-11T06:53:43Z",
|
||||
"id": "disp-c6529331-e9d7-4466-9528-2e839739e751",
|
||||
"memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f",
|
||||
"memo_version": 1,
|
||||
"note": null,
|
||||
"presentation_id": "pres-aff4dcb6-a282-4958-be22-2a8b9a8c96c8",
|
||||
"reasons": [],
|
||||
"verb": "accept"
|
||||
},
|
||||
"id": null,
|
||||
"submission_state": "confirmed"
|
||||
}
|
||||
],
|
||||
"memo_id": "infd-20261011-purpose-overlay-r1",
|
||||
"review": {
|
||||
"intake_state": "ready",
|
||||
"memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f",
|
||||
"path": "/review?memo_id=review-cda20761-f6ff-4d02-9c34-5097fc27539f",
|
||||
"stale": false
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
"human_dispositions": 0,
|
||||
"memo_id": "infd-20261011-purpose-overlay-r1",
|
||||
"outcome_review": {
|
||||
"intake_state": "not_submitted",
|
||||
"memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f",
|
||||
"stale": false
|
||||
},
|
||||
"publication_event_id": "7d93c9af-419a-4b9f-b897-f8df2655f485",
|
||||
"queue_detail": "queued",
|
||||
"queue_status": "pending",
|
||||
"register_event_id": null,
|
||||
"review_event_id": "51c2629b-8634-458f-9fb8-37a2e8c4325c",
|
||||
"review_memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f",
|
||||
"revision_event_id": "fd4e3142-29e7-44b5-b970-c59dd98fdb1b",
|
||||
"version": 2,
|
||||
"workspace_url": "https://decisions.coulomb.social/decisions/infd-20261011-purpose-overlay-r1?version=2"
|
||||
}
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
{
|
||||
"revision": "rescue-r2-d05d6e3b",
|
||||
"status": "prepared_pending_new_human_decision",
|
||||
"manifest_sha256": "d05d6e3b15df9acf1d7aef0ba2ec82a5a00d979ab1f324e981025cffe2cc753d",
|
||||
"memo_version": 2,
|
||||
"memo_sha256": "391330d062ede170a546415886d18b4895ba24d313a0dd50dcc1591c1aa3c2fa",
|
||||
"revision_request_sha256": "feb946218e9611e1b686c1672fd9142896c55fd88aa2e59fabc6cfadbe22e327",
|
||||
"revision_command_digest": "ccbeca292dd4ffcd0ed8a4669c82a93f9b773a30186966d3f146d5db8e5e6b8a",
|
||||
"source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2",
|
||||
"execution_bundle_sha256": "49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5",
|
||||
"execution_plan_sha256": "9ce5728a561e6d38f8497201baa2b840d11444a0af8ad6234dfc37428113f258",
|
||||
"delta": "Explicitly close WAL-aware readers; frozen zero-WAL hash-bound snapshot inspection uses immutable mode; distinct drill-copy-rescue-r1 and new linked journal preserve original uncertain attempt and SHM. Conditional remaining same-image phases only after new approval. Historical helper manifest label corrected.",
|
||||
"verification": "26 synthetic executor/reader tests plus independent scope, custody and replay counterexamples; actual live drill/rollout remains pending.",
|
||||
"rollback": "Deployment-only previous image/source recovery preserves latest database; old uncertain journal never rewritten.",
|
||||
"cost_estimate": "EUR0 recurring infrastructure; existing temporary private-copy storage and attended time unpriced.",
|
||||
"risk_estimate": "Existing approved snapshot contains private live data; metadata-only logging/private custody, no native sidecar deletion, no rollback over current database. Scoped Recreate restart and reversible Deployment-only image change conditional on actual compatibility drill."
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"id": "01fd1361-7d5f-52b7-91da-8eb620a8d627",
|
||||
"title": "Founder approves bounded purpose image rescue R2; deployed target independently verified",
|
||||
"decision_type": "made",
|
||||
"status": "resolved",
|
||||
"decided_at": "2026-10-11T06:53:43Z"
|
||||
}
|
||||
|
|
@ -0,0 +1,15 @@
|
|||
{
|
||||
"infd-approved-rescue-copy.json": "574edd84cac958d95e0f79691f7309369a0c9df18f75973242a2303eca387780",
|
||||
"infd-approved-offline-verify.json": "93c346828e16e440d8c8987f15919e62f047af3108f49dde8372fb7289d355bd",
|
||||
"infd-approved-cleanup-offline.json": "bcab38a565bb843f4e3ad543677251537757df9d158f72b201dc05a1736f7e74",
|
||||
"infd-approved-cutover-backup.json": "97a220951c59db74210fae80aee37c661278d20571c9004d5ac92bf9c02962f7",
|
||||
"infd-approved-cutover-copy.json": "c213e31762f1ddac3c90a20e654de98dcf347cfad96181e234cae6ebe46140f4",
|
||||
"infd-approved-image-release.json": "e4fa89393b329fecbd3f991e0298c9e8af77c1668d6a968192dfa24daabb98d8",
|
||||
"infd-approved-image-verify.json": "80c0a938838e4ad726e62651abdc90d94ade85985169a489f4b599d551f39fc8",
|
||||
"infd-independent-readonly-verification-receipt.json": "c3fc07400204a4821e65aebcbfd228ce571f2b0402a52e0719d29d3704ec0a60",
|
||||
"infd-independent-readonly-inner-diagnostic-receipt.json": "9ef8a2654ac600489b3e0121c5f138ee3eb58b0daeddaca595aca735040be8b5",
|
||||
"infd-post-rollout-native-provider-allow-path-receipt.json": "c534f5fa96d4d3e66b1a8f72cae9be15c62c4d0dd0b35fbefdfe13e3f51e89b7",
|
||||
"infd-native-rollout-cpu-headroom.json": "c0e12225ef28fcbe02cd4f5b00f39a8b630c2c1f5f075ce7ba39f2a061674a0d",
|
||||
"infd-installed-argocd-controller-version.json": "62b85702ca73d8c349a52be9c8196e2f85c6e9e0aafb07f17a15d5c988fee82b",
|
||||
"infd-rescue-pre-phase-diagnostic.json": "5cdc0d06af99de46fa3329d3648f58347ca7f03c33d82f6402fa0e2e8a6f50ae"
|
||||
}
|
||||
|
|
@ -0,0 +1,9 @@
|
|||
{
|
||||
"case_files": [],
|
||||
"diagnostic_only": true,
|
||||
"executor_files": [],
|
||||
"failure_before_phase": "Root supplied new paths instead of approved fixed receipt paths",
|
||||
"original_anchor": "pass",
|
||||
"owner_source_files": [],
|
||||
"rescue_journal_exists": false
|
||||
}
|
||||
|
|
@ -0,0 +1,42 @@
|
|||
{
|
||||
"metadata_only": true,
|
||||
"phase_states": {
|
||||
"drill-copy-rescue-r1": {
|
||||
"state": "COMPLETE",
|
||||
"attempt_id": "be542567-8c2d-4420-a824-a89a5796b3e7",
|
||||
"started_at": "2026-10-11T06:56:35.678452+00:00"
|
||||
},
|
||||
"offline-verify": {
|
||||
"state": "COMPLETE",
|
||||
"attempt_id": "b2e45df1-19fc-4fac-9153-920dc6153ee9",
|
||||
"started_at": "2026-10-11T06:57:37.405279+00:00"
|
||||
},
|
||||
"cleanup-offline": {
|
||||
"state": "COMPLETE",
|
||||
"attempt_id": "8f545d23-b54c-48d4-8c89-4579df2f0036",
|
||||
"started_at": "2026-10-11T06:58:31.193308+00:00"
|
||||
},
|
||||
"cutover-backup": {
|
||||
"state": "COMPLETE",
|
||||
"attempt_id": "712b22d7-ae5e-43e0-979c-321800ed7f2f",
|
||||
"started_at": "2026-10-11T06:58:48.671103+00:00"
|
||||
},
|
||||
"cutover-copy": {
|
||||
"state": "COMPLETE",
|
||||
"attempt_id": "1ad6c1c7-938c-4790-af97-3ca21b36d2fd",
|
||||
"started_at": "2026-10-11T06:59:27.120207+00:00"
|
||||
},
|
||||
"release": {
|
||||
"state": "COMPLETE",
|
||||
"attempt_id": "4cdf296a-8def-44ea-a164-81fbb65989e0",
|
||||
"started_at": "2026-10-11T07:00:23.064125+00:00"
|
||||
},
|
||||
"verify": {
|
||||
"state": "UNCERTAIN",
|
||||
"attempt_id": "2be2b4d7-7679-43f3-b9cb-f80ad1ff6016",
|
||||
"started_at": "2026-10-11T07:01:37.501508+00:00"
|
||||
}
|
||||
},
|
||||
"original_journal_preserved": true,
|
||||
"original_verify_state_rewritten": false
|
||||
}
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
{
|
||||
"id": "f9ebbce1-1f88-42d0-a355-4e18ea45618b",
|
||||
"event_type": "note",
|
||||
"author": "codex",
|
||||
"created_at": "2026-10-11T08:30:56.411091Z"
|
||||
}
|
||||
|
|
@ -0,0 +1,441 @@
|
|||
{
|
||||
"railiance-platform": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "RPF-WP-0015",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0027",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0035",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 7
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0036",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0036-platform-service-assurance.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 3
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0038",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0043",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0044",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 6
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0048",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0048-activity-core-gitops-adoption.md",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0053",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md",
|
||||
"status": "proposed",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 5
|
||||
},
|
||||
{
|
||||
"id": "RPF-WP-0055",
|
||||
"file": "/home/worsch/railiance-platform/workplans/RPF-WP-0055-keycape-client-secret-rotation-residual.md",
|
||||
"status": "backlog",
|
||||
"flavor": "residual",
|
||||
"unfinished_tasks": 1
|
||||
}
|
||||
],
|
||||
"open_plans": 10,
|
||||
"nonresidual_plans": 9,
|
||||
"residual_plans": 1,
|
||||
"unfinished_tasks": 30
|
||||
},
|
||||
"net-kingdom": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "NK-WP-0011",
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0011-enterprise-federation-saml.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 8
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0022",
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0027",
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0027-reef-placement-reconciliation.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 3
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0031",
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0031-deterministic-posture-feedback.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0035",
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0035-emission-cadence-security-profile.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0040",
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0040-execution-attribution-receipt.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "NK-WP-0048",
|
||||
"file": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
}
|
||||
],
|
||||
"open_plans": 7,
|
||||
"nonresidual_plans": 7,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 17
|
||||
},
|
||||
"access-engine": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "FLEX-WP-ADHOC-2026-10-03",
|
||||
"file": "/home/worsch/access-engine/workplans/ADHOC-2026-10-03.md",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "FLEX-WP-0020",
|
||||
"file": "/home/worsch/access-engine/workplans/FLEX-WP-0020-repository-identity-migration.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "FLEX-WP-0031",
|
||||
"file": "/home/worsch/access-engine/workplans/FLEX-WP-0031-decision-record-emission.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 4
|
||||
},
|
||||
{
|
||||
"id": "FLEX-WP-0036",
|
||||
"file": "/home/worsch/access-engine/workplans/FLEX-WP-0036-runtime-rename-access-engine.md",
|
||||
"status": "active",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 8
|
||||
}
|
||||
],
|
||||
"open_plans": 4,
|
||||
"nonresidual_plans": 4,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 14
|
||||
},
|
||||
"secrets-engine": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "SECRETS-WP-0006",
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0006-catalog-lane-adoption.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "SECRETS-WP-0007",
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0007-production-lifecycle-hardening.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "SECRETS-WP-0008",
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "SECRETS-WP-0009",
|
||||
"file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
}
|
||||
],
|
||||
"open_plans": 4,
|
||||
"nonresidual_plans": 4,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 5
|
||||
},
|
||||
"ops-mason": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "MASON-WP-0004",
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0004-credential-inventory-descriptions.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0005",
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0006",
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0006-readiness-tier-check.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0009",
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0009-keycape-secrets-engine-openbao-client-custody.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "MASON-WP-0010",
|
||||
"file": "/home/worsch/ops-mason/workplans/MASON-WP-0010-security-case-materialization.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
}
|
||||
],
|
||||
"open_plans": 5,
|
||||
"nonresidual_plans": 5,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 8
|
||||
},
|
||||
"ops-warden": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "WARDEN-WP-0027",
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0027-credential-governance-lockdown.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0034",
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0034-layer-model-v07-conformance.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0037",
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0040",
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md",
|
||||
"status": "blocked",
|
||||
"flavor": "planning",
|
||||
"unfinished_tasks": 3
|
||||
},
|
||||
{
|
||||
"id": "WARDEN-WP-0044",
|
||||
"file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0044-security-case-follow-through.md",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
}
|
||||
],
|
||||
"open_plans": 5,
|
||||
"nonresidual_plans": 5,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 8
|
||||
},
|
||||
"key-cape": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "KEY-WP-0038",
|
||||
"file": "/home/worsch/key-cape/workplans/KEY-WP-0038-forgejo-oidc-client.md",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "KEY-WP-0039",
|
||||
"file": "/home/worsch/key-cape/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
}
|
||||
],
|
||||
"open_plans": 2,
|
||||
"nonresidual_plans": 2,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 3
|
||||
},
|
||||
"user-engine": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "USER-WP-0026",
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0026-account-recovery.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0027",
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0027-account-journey-clarity.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0028",
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0028-user-journey-acceptance.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0035",
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0035-onboarding-handoff-findings.md",
|
||||
"status": "blocked",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
{
|
||||
"id": "USER-WP-0037",
|
||||
"file": "/home/worsch/user-engine/workplans/USER-WP-0037-hub-authority-lookup.md",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1
|
||||
}
|
||||
],
|
||||
"open_plans": 5,
|
||||
"nonresidual_plans": 5,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 7
|
||||
},
|
||||
"tenant-engine": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "TEN-WP-0012",
|
||||
"file": "/home/worsch/tenant-engine/workplans/TEN-WP-0012-external-conformance-waits.md",
|
||||
"status": "blocked",
|
||||
"flavor": "residual",
|
||||
"unfinished_tasks": 2
|
||||
}
|
||||
],
|
||||
"open_plans": 1,
|
||||
"nonresidual_plans": 0,
|
||||
"residual_plans": 1,
|
||||
"unfinished_tasks": 2
|
||||
},
|
||||
"gate-house": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "GH-WP-0004",
|
||||
"file": "/home/worsch/gate-house/workplans/GH-WP-0004-section-11-layer-declarations.md",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 1
|
||||
}
|
||||
],
|
||||
"open_plans": 1,
|
||||
"nonresidual_plans": 1,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
"kings-guard": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "KG-WP-0005",
|
||||
"file": "/home/worsch/kings-guard/workplans/KG-WP-0005-qonto-source-cadence-admission.md",
|
||||
"status": "blocked",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 1
|
||||
}
|
||||
],
|
||||
"open_plans": 1,
|
||||
"nonresidual_plans": 1,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 1
|
||||
},
|
||||
"policy-nexus": {
|
||||
"plans": [],
|
||||
"open_plans": 0,
|
||||
"nonresidual_plans": 0,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 0
|
||||
},
|
||||
"informed-decision": {
|
||||
"plans": [
|
||||
{
|
||||
"id": "INFD-WP-0008",
|
||||
"file": "/home/worsch/informed-decision/workplans/INFD-WP-0008-lifecycle-expansion-contracts.md",
|
||||
"status": "backlog",
|
||||
"flavor": null,
|
||||
"unfinished_tasks": 4
|
||||
},
|
||||
{
|
||||
"id": "INFD-WP-0009",
|
||||
"file": "/home/worsch/informed-decision/workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
}
|
||||
],
|
||||
"open_plans": 2,
|
||||
"nonresidual_plans": 2,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 6
|
||||
},
|
||||
"_total": {
|
||||
"plans": [],
|
||||
"open_plans": 0,
|
||||
"nonresidual_plans": 0,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 0
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
{
|
||||
"prior_per_repo_sum": {
|
||||
"open_plans": 47,
|
||||
"nonresidual_plans": 45,
|
||||
"residual_plans": 2,
|
||||
"unfinished_tasks": 102
|
||||
},
|
||||
"prior_cached_total_defect": "_total object incorrectly zeroed; original bytes retained in checkpoint",
|
||||
"current_recomputed_total": {
|
||||
"open_plans": 47,
|
||||
"nonresidual_plans": 45,
|
||||
"residual_plans": 2,
|
||||
"unfinished_tasks": 101
|
||||
},
|
||||
"delta": "INFD-WP-0009-T04 done; other tracked plan/task totals unchanged",
|
||||
"count_scope": "The same 13 owner repositories, current top-level workplan files with proposed/ready/active/blocked/backlog statuses; residual plans included and separated; done/cancel tasks excluded."
|
||||
}
|
||||
|
|
@ -423,19 +423,18 @@
|
|||
"file": "/home/worsch/informed-decision/workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md",
|
||||
"status": "active",
|
||||
"flavor": "implementation",
|
||||
"unfinished_tasks": 2
|
||||
"unfinished_tasks": 1
|
||||
}
|
||||
],
|
||||
"open_plans": 2,
|
||||
"nonresidual_plans": 2,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 6
|
||||
"unfinished_tasks": 5
|
||||
},
|
||||
"_total": {
|
||||
"plans": [],
|
||||
"open_plans": 0,
|
||||
"nonresidual_plans": 0,
|
||||
"residual_plans": 0,
|
||||
"unfinished_tasks": 0
|
||||
"open_plans": 47,
|
||||
"nonresidual_plans": 45,
|
||||
"residual_plans": 2,
|
||||
"unfinished_tasks": 101
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -486,3 +486,19 @@ metadata receipt693786bb is confirmed; no live workerwake or foreigntaskcopy.
|
|||
### Informed-decision image trial: verified backup, transfer stopped
|
||||
|
||||
The founder confirmed exact purpose-overlay R1 at 02:34:20Z on 2026-10-11. The approved native backup completed and verified schema 5, integrity and count consistency. The subsequent drill-copy entered UNCERTAIN before creating an off-cluster database file; no offline restore or image rollout ran. Metadata-only inspection confirms the frozen main snapshot retains its approved hash and size, with zero WAL bytes and a 32 KB SHM sidecar left by read-only inspection. Source owners are preparing a bounded correction; the original journal and failed outcome remain retained. The approved helper is unchanged and no phase was retried. See `docs/evidence/2026-10-10-security-consolidation/infd-purpose-drill-copy-diagnosis.json`.
|
||||
|
||||
### Forgejo dedicated consumer identity: exact source decision ready
|
||||
|
||||
NetKingdom source commit `584a964` records the complete proposed type 1.2 package, 22 passing package tests and reviewed six-object Forgejo render. The genuine native review `review-126c6c90-11ba-4609-b8d1-75e054c246cd` is ready for source acknowledgment. Old five rendered bodies remain unchanged; the new consumer role binds dedicated `forgejo/forgejo-keycape-forgejo-eso`, not shared workload `forgejo/default`. This does not implement the type, accept the canonical case, create credentials or authorize a native session. Existing ORGREF driver and owner tasks retain the remaining implementation and first-session work. The first physical review-file application preceded the existing-file task update; a retained explicit owner review after the completed T06 anchor now verifies exact actual source before human submission.
|
||||
|
||||
### Reviewed image rescue submitted as source version 2
|
||||
|
||||
The bounded existing-snapshot rescue is committed at informed-decision `c96b0c6` and published for a new exact founder decision. Product and Platform reviews verify all 134 source paths; 26 executor/reader tests and independent scope, custody and replay counterexamples passed. The original approved helper and the first rejected rescue packet remain immutable archived evidence. Source version 2 uses a new native review ID and preserves the original COMPLETE backup/UNCERTAIN copy journal. No rescue copy, restore drill, image rollout or extra provider probe has executed. The rescue uses zero-WAL, hash-bound immutable inspection only for the frozen snapshot; live and writable-clone inspection remains WAL-aware and explicitly closes connections. New source decision: `review-cda20761-f6ff-4d02-9c34-5097fc27539f`.
|
||||
|
||||
### Actual image accepted and task count reconciled
|
||||
|
||||
INFD Product and Platform independently accepted the exact deployed purpose image `763c3640…` at owner execution source `c96b0c6`. Deployment generation 25 is Ready with one replica; module `9d7c1be4…`, config/PVC identities and every controlled Pod field match, with native UID/GID 10001. Real protected offline compatibility, cleanup, fresh cutover backups/private copies and exact manual one-Deployment non-pruning Argo completion are retained. Schema 5/integrity and newer records remain intact. Actual authenticated post-rollout lifecycle.outcomes proves the canonical provider allow path; ten installed purpose fixtures include eight refusals and remain explicitly synthetic. Original drill-copy and final verifier UNCERTAIN outcomes stay unchanged; independent read-only reconciliation verifies actual target with refinement, not an unchanged execution success.
|
||||
|
||||
`INFD-WP-0009-T04` is done in source commit `0693c40`; T05 remains live for the inherited fixable MEDIUM zlib finding, due October 18. `INFD-IN-0010` is the unpromoted live handoff for the verifier omission defect before future reuse. WP0009 remains active. The same 13-owner source inventory now totals **47 open plans (45 nonresidual + 2 residual), 101 unfinished tasks**, compared with the previous per-repo sum of 47/102. A previously zeroed cached `_total` was corrected from authoritative per-repo arithmetic; the exact prior snapshot remains retained.
|
||||
|
||||
Forgejo source acknowledgment is recorded in Net commit `f6856cd` and the separate application-owner design receipt `d349815`. Explicit version selection is committed at `bb9b9b5`, with 43 loader/validator and 22 package compatibility tests passing. Both actual acknowledged types remain unimplemented and reject ordinary admission; canonical 1.1 and all native provider pins stay unchanged. Six-object materialization, authenticated provenance, adapters and first session remain under the existing ORGREF/owner gates.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue