From eeb2c1f093f54547e858b0f5aaddacf70321f003 Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 11 Oct 2026 10:31:23 +0200 Subject: [PATCH] Record verified image release and acknowledged Forgejo source followthrough --- .../agents/custodian-codex/supervision.json | 74 ++- ...gejo-type12-native-acceptance-receipt.json | 34 ++ ...rgejo-type12-native-authoring-receipt.json | 18 + .../forgejo-type12-native-ready-receipt.json | 11 + .../forgejo-type12-source-decision-pin.json | 10 + ...gejo-type12-statehub-decision-receipt.json | 7 + ...ditional-pod-custody-readonly-receipt.json | 31 ++ .../infd-approved-cleanup-offline.json | 5 + .../infd-approved-cutover-backup.json | 53 +++ .../infd-approved-cutover-copy.json | 36 ++ .../infd-approved-image-release.json | 46 ++ .../infd-approved-image-verify.json | 7 + .../infd-approved-offline-verify.json | 68 +++ .../infd-approved-rescue-copy.json | 36 ++ ...ent-readonly-inner-diagnostic-receipt.json | 87 ++++ ...pendent-readonly-verification-receipt.json | 84 ++++ ...d-installed-argocd-controller-version.json | 7 + .../infd-native-rollout-cpu-headroom.json | 10 + ...ative-task-human-wait-closure-receipt.json | 7 + ...ut-native-provider-allow-path-receipt.json | 18 + ...pose-original-source-unbound-readback.json | 8 + ...pose-rescue-native-acceptance-receipt.json | 34 ++ ...rpose-rescue-native-authoring-receipt.json | 18 + .../infd-purpose-rescue-source-pin.json | 17 + ...pose-rescue-statehub-decision-receipt.json | 7 + ...rescue-actual-receipt-original-hashes.json | 15 + .../infd-rescue-pre-phase-diagnostic.json | 9 + ...-rescue-private-journal-state-summary.json | 42 ++ ...e-and-forgejo-source-progress-receipt.json | 6 + ...point-before-infd-native-task-closure.json | 441 ++++++++++++++++++ ...e-count-native-closure-reconciliation.json | 17 + .../source-current-2026-10-11.json | 13 +- ...ecurity-collaboration-review-2026-10-10.md | 16 + 33 files changed, 1280 insertions(+), 12 deletions(-) create mode 100644 docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-acceptance-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-authoring-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-ready-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/forgejo-type12-source-decision-pin.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/forgejo-type12-statehub-decision-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-additional-pod-custody-readonly-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-approved-cleanup-offline.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-backup.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-copy.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-approved-image-release.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-approved-image-verify.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-approved-offline-verify.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-approved-rescue-copy.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-inner-diagnostic-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-verification-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-installed-argocd-controller-version.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-native-rollout-cpu-headroom.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-native-task-human-wait-closure-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-post-rollout-native-provider-allow-path-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-purpose-original-source-unbound-readback.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-acceptance-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-authoring-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-source-pin.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-statehub-decision-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-rescue-actual-receipt-original-hashes.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-rescue-pre-phase-diagnostic.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/infd-rescue-private-journal-state-summary.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/native-purpose-and-forgejo-source-progress-receipt.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/source-checkpoint-before-infd-native-task-closure.json create mode 100644 docs/evidence/2026-10-10-security-consolidation/source-count-native-closure-reconciliation.json diff --git a/.kaizen/agents/custodian-codex/supervision.json b/.kaizen/agents/custodian-codex/supervision.json index fb3a206c..3acc9b78 100644 --- a/.kaizen/agents/custodian-codex/supervision.json +++ b/.kaizen/agents/custodian-codex/supervision.json @@ -231,7 +231,7 @@ "proposal_id": "INFD-WP-0009-T04/purpose-overlay-v1", "trial_id": "infd-purpose-20261011-r1", "disposition": "accepted_unchanged", - "outcome": "partial_execution_stopped_unverified", + "outcome": "verified_with_rescue_and_independent_readonly_reconciliation", "proposal_ref": "informed-decision/docs/evidence/2026-10-11-purpose-image-release/decision-packet.md", "original_revision": "combined-ffa2679a", "original_digest": "fd78d486174670e12efb2f812bac02e68f294e7791b9302d0d458c053240f5a9", @@ -287,13 +287,68 @@ "backup_ref": "docs/evidence/2026-10-10-security-consolidation/infd-purpose-approved-drill-backup.json", "original_journal_retained": true, "retry_executed": false - } + }, + "revisions": [ + { + "revision": "rescue-r2-d05d6e3b", + "status": "actual_target_verified_with_refinement", + "manifest_sha256": "d05d6e3b15df9acf1d7aef0ba2ec82a5a00d979ab1f324e981025cffe2cc753d", + "memo_version": 2, + "memo_sha256": "391330d062ede170a546415886d18b4895ba24d313a0dd50dcc1591c1aa3c2fa", + "revision_request_sha256": "feb946218e9611e1b686c1672fd9142896c55fd88aa2e59fabc6cfadbe22e327", + "revision_command_digest": "ccbeca292dd4ffcd0ed8a4669c82a93f9b773a30186966d3f146d5db8e5e6b8a", + "source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2", + "execution_bundle_sha256": "49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5", + "execution_plan_sha256": "9ce5728a561e6d38f8497201baa2b840d11444a0af8ad6234dfc37428113f258", + "delta": "Explicitly close WAL-aware readers; frozen zero-WAL hash-bound snapshot inspection uses immutable mode; distinct drill-copy-rescue-r1 and new linked journal preserve original uncertain attempt and SHM. Conditional remaining same-image phases only after new approval. Historical helper manifest label corrected.", + "verification": "26 synthetic executor/reader tests plus independent scope, custody and replay counterexamples; actual live drill/rollout remains pending.", + "rollback": "Deployment-only previous image/source recovery preserves latest database; old uncertain journal never rewritten.", + "cost_estimate": "EUR0 recurring infrastructure; existing temporary private-copy storage and attended time unpriced.", + "risk_estimate": "Existing approved snapshot contains private live data; metadata-only logging/private custody, no native sidecar deletion, no rollback over current database. Scoped Recreate restart and reversible Deployment-only image change conditional on actual compatibility drill.", + "approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1", + "disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751", + "approved_at": "2026-10-11T06:53:43Z", + "approved_source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2", + "approval_version": 2, + "review_version": 1, + "review_memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f", + "pre_actuation_attempts": [ + { + "outcome": "refused_before_phase", + "reason": "Root invocation supplied alternate receipt filenames instead of approved fixed interface", + "rescue_journal_created": false, + "native_operation_executed": false, + "correction": "Invoke unchanged approved helper using its original fixed receipt paths; fresh native source2 authority refresh" + } + ], + "native_execution": true, + "original_verify_phase_state": "UNCERTAIN", + "original_failed_copy_state": "UNCERTAIN", + "phase_replay_executed": false, + "independent_verification_ref": "docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-verification-receipt.json", + "actual_source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2", + "actual_image": "sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a", + "actual_pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662", + "ready_replicas": 1, + "rollback_executed": false, + "actual_native_provider_allow": true, + "synthetic_installed_refusal_variants": 8, + "medium_finding_due": "2026-10-18T23:59:59Z", + "product_acceptance_commit": "0693c40", + "platform_actual_acceptance_commit": "d47cbd0", + "task_closed": "INFD-WP-0009-T04", + "workplan_status": "active", + "risk_task": "INFD-WP-0009-T05", + "live_unpromoted_verifier_residual": "INFD-IN-0010" + } + ], + "current_revision_status": "owner_scoped_task_acceptance_recorded" }, { "proposal_id": "NK-FORGEJO-TYPE12-SOURCE-20261011-R1", "trial_id": "forgejo-type12-source-20261011-r1", - "disposition": "pending", - "outcome": "not_executed", + "disposition": "accepted_unchanged", + "outcome": "verified_source_acknowledgment_recorded", "proposal_ref": "/home/worsch/net-kingdom/docs/proposals/2026-10-11-forgejo-type12-acknowledgment/proposal.json", "original_revision": "final34-0b377d647ca748cd03c92f9792396412048055d4bde9f7bb06ff6d413f7acd68", "original_digest": "585cee731de30d2b37883a57abfd9eb32f023ee694e8d911989109d5caf80569", @@ -307,7 +362,16 @@ "cost_estimate_eur": 0.1, "risk_estimate": "Source-only decision. No credential exposure or live runtime change authorized.", "promotion_evidence": false, - "native_execution": false + "native_execution": false, + "approved_digest": "585cee731de30d2b37883a57abfd9eb32f023ee694e8d911989109d5caf80569", + "approved_revision": "final34-0b377d647ca748cd03c92f9792396412048055d4bde9f7bb06ff6d413f7acd68", + "approved_at": "2026-10-11T06:47:39Z", + "approval_ref": "8e9332c8-754a-420c-b8b7-445cb4fe6765", + "human_disposition_id": "disp-315d54ad-20f1-40e6-862c-6c7d2e8f0ea8", + "approved_source_revision": "584a964684a28e759edc19862a91938bda161cb3", + "source_recording_commit": "f6856cd", + "application_design_receipt_commit": "d349815", + "followthrough_version_selection_commit": "bb9b9b5" } ] } diff --git a/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-acceptance-receipt.json b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-acceptance-receipt.json new file mode 100644 index 00000000..68f7ae79 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-acceptance-receipt.json @@ -0,0 +1,34 @@ +{ + "disposition_count": 1, + "dispositions": [ + { + "approval_id": null, + "approved_at": "2026-10-11T06:47:39+00:00", + "decided_at": null, + "disposition": { + "actor": { + "kind": "person", + "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local" + }, + "approval_id": "8e9332c8-754a-420c-b8b7-445cb4fe6765", + "at": "2026-10-11T06:47:39Z", + "id": "disp-315d54ad-20f1-40e6-862c-6c7d2e8f0ea8", + "memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd", + "memo_version": 1, + "note": null, + "presentation_id": "pres-5a52f932-8c65-46cc-8054-0264f47f934a", + "reasons": [], + "verb": "accept" + }, + "id": null, + "submission_state": "confirmed" + } + ], + "memo_id": "infd-20261011-forgejo-type12-source-r1", + "review": { + "intake_state": "ready", + "memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd", + "path": "/review?memo_id=review-126c6c90-11ba-4609-b8d1-75e054c246cd", + "stale": false + } +} diff --git a/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-authoring-receipt.json b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-authoring-receipt.json new file mode 100644 index 00000000..6f6ac76f --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-authoring-receipt.json @@ -0,0 +1,18 @@ +{ + "human_dispositions": 0, + "memo_id": "infd-20261011-forgejo-type12-source-r1", + "outcome_review": { + "intake_state": "not_submitted", + "memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd", + "stale": false + }, + "publication_event_id": "cbe4a05f-c7ab-4770-8e6e-8b537b165f7e", + "queue_detail": "queued", + "queue_status": "pending", + "register_event_id": "66d85468-6cd9-4a40-8c35-febc152758c0", + "review_event_id": "5be59cf9-a207-43aa-9fe2-131dc1e53538", + "review_memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd", + "revision_event_id": null, + "version": 1, + "workspace_url": "https://decisions.coulomb.social/decisions/infd-20261011-forgejo-type12-source-r1?version=1" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-ready-receipt.json b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-ready-receipt.json new file mode 100644 index 00000000..efbc1402 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-native-ready-receipt.json @@ -0,0 +1,11 @@ +{ + "disposition_count": 0, + "dispositions": [], + "memo_id": "infd-20261011-forgejo-type12-source-r1", + "review": { + "intake_state": "ready", + "memo_id": "review-126c6c90-11ba-4609-b8d1-75e054c246cd", + "path": "/review?memo_id=review-126c6c90-11ba-4609-b8d1-75e054c246cd", + "stale": false + } +} diff --git a/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-source-decision-pin.json b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-source-decision-pin.json new file mode 100644 index 00000000..11080a4c --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-source-decision-pin.json @@ -0,0 +1,10 @@ +{ + "proposal_id": "NK-FORGEJO-TYPE12-SOURCE-20261011-R1", + "source_revision": "584a964684a28e759edc19862a91938bda161cb3", + "manifest_sha256": "0b377d647ca748cd03c92f9792396412048055d4bde9f7bb06ff6d413f7acd68", + "submission_digest": "585cee731de30d2b37883a57abfd9eb32f023ee694e8d911989109d5caf80569", + "post_anchor_review_sha256": "0893b8fe936c72394147bc511c6a21af8e75866c96549ceec8af5d2abd1ee100", + "execution_permitted": false, + "canonical_case_status": "proposed", + "source_only": true +} diff --git a/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-statehub-decision-receipt.json b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-statehub-decision-receipt.json new file mode 100644 index 00000000..6d467076 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/forgejo-type12-statehub-decision-receipt.json @@ -0,0 +1,7 @@ +{ + "id": "44f9e3e8-f414-5ed9-8cca-f52e7183e65c", + "title": "Founder accepts exact Forgejo type 1.2 source-design package", + "decision_type": "made", + "status": "resolved", + "decided_at": "2026-10-11T06:47:39Z" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-additional-pod-custody-readonly-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-additional-pod-custody-readonly-receipt.json new file mode 100644 index 00000000..4b03f4e7 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-additional-pod-custody-readonly-receipt.json @@ -0,0 +1,31 @@ +{ + "additional_readonly_metadata_proof": true, + "all_checks_pass": true, + "canonical_controlled_values_sha256": "bb6e6ef2809d15ef27db05fa75cabd40fc4e4bfe43e1f7a3ac750ed69380adaa", + "controlled_field_names": [ + "automountServiceAccountToken", + "containers", + "dnsPolicy", + "hostIPC", + "hostNetwork", + "hostPID", + "initContainers", + "restartPolicy", + "runtimeClassName", + "schedulerName", + "securityContext", + "serviceAccount", + "serviceAccountName", + "shareProcessNamespace", + "terminationGracePeriodSeconds", + "volumes" + ], + "controlled_pod_fields_match_sealed_candidate": true, + "database_opened": false, + "exact_one_container": true, + "mutation_executed": false, + "native_gid": 10001, + "native_uid": 10001, + "original_phase_replayed": false, + "pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-approved-cleanup-offline.json b/docs/evidence/2026-10-10-security-consolidation/infd-approved-cleanup-offline.json new file mode 100644 index 00000000..4944d4ab --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-approved-cleanup-offline.json @@ -0,0 +1,5 @@ +{ + "all_checks_pass": true, + "native_and_offcluster_original_snapshots_retained": true, + "only_disposable_offline_volume_removed": "infd-purpose-r1-restore-20261011" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-backup.json b/docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-backup.json new file mode 100644 index 00000000..51d43f7d --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-backup.json @@ -0,0 +1,53 @@ +{ + "all_checks_pass": true, + "native_approval_verified_by_root": { + "accepted_at": "2026-10-11T06:53:43Z", + "approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1", + "disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751", + "verified_at": "2026-10-11T06:58:48.455148+00:00" + }, + "native_authenticated_grant": false, + "native_parent_private": true, + "native_uid": 10001, + "phase": "cutover-backup", + "pod_name": "informed-decision-f557556df-mwpz7", + "pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7", + "raw_output_withheld": true, + "snapshot_bytes": 21512192, + "snapshot_file": "cutover.sqlite", + "snapshot_readonly": { + "integrity": "ok", + "lifecycle": { + "events": 56, + "pending": 0, + "records": 16 + }, + "outbox": { + "delivered": 336 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 43 + } + }, + "snapshot_sha256": "38e37c3b096117084c209763f166cf58c82849b0f24f9d22aee545f51d270b1f", + "source_readonly_baseline": { + "integrity": "ok", + "lifecycle": { + "events": 56, + "pending": 0, + "records": 16 + }, + "outbox": { + "delivered": 336 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 43 + } + } +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-copy.json b/docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-copy.json new file mode 100644 index 00000000..5f9745ef --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-approved-cutover-copy.json @@ -0,0 +1,36 @@ +{ + "all_checks_pass": true, + "native_approval_verified_by_root": { + "accepted_at": "2026-10-11T06:53:43Z", + "approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1", + "disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751", + "verified_at": "2026-10-11T06:59:19.173552+00:00" + }, + "native_authenticated_grant": false, + "off_cluster_private_copy_verified": true, + "phase": "cutover-copy", + "pod_name": "informed-decision-f557556df-mwpz7", + "pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7", + "raw_output_withheld": true, + "snapshot_bytes": 21512192, + "snapshot_contents_output": false, + "snapshot_file": "cutover.sqlite", + "snapshot_readonly": { + "integrity": "ok", + "lifecycle": { + "events": 56, + "pending": 0, + "records": 16 + }, + "outbox": { + "delivered": 336 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 43 + } + }, + "snapshot_sha256": "38e37c3b096117084c209763f166cf58c82849b0f24f9d22aee545f51d270b1f" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-approved-image-release.json b/docs/evidence/2026-10-10-security-consolidation/infd-approved-image-release.json new file mode 100644 index 00000000..59682172 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-approved-image-release.json @@ -0,0 +1,46 @@ +{ + "all_checks_pass": true, + "client_diff_sha256": "fdfc0a41a0b4baf1e77dfab673e688aa3a3bb6e9bf99cfd0eee6d58cd22a7fa1", + "latest_live_database_retained": true, + "live_counts_may_include_concurrent_commits": true, + "live_readonly_schema_integrity_counts": { + "integrity": "ok", + "lifecycle": { + "events": 56, + "pending": 0, + "records": 16 + }, + "outbox": { + "delivered": 336 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 43 + } + }, + "native_approval_verified_by_root": { + "accepted_at": "2026-10-11T06:53:43Z", + "approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1", + "disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751", + "verified_at": "2026-10-11T07:00:22.848375+00:00" + }, + "native_authenticated_grant": false, + "operation_requested": true, + "phase": "release", + "pod_name": "informed-decision-f557556df-mwpz7", + "pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7", + "prune": false, + "raw_output_withheld": true, + "resources": [ + { + "group": "apps", + "kind": "Deployment", + "name": "informed-decision", + "namespace": "informed-decision" + } + ], + "rollout_verified": false, + "source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-approved-image-verify.json b/docs/evidence/2026-10-10-security-consolidation/infd-approved-image-verify.json new file mode 100644 index 00000000..34e8770a --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-approved-image-verify.json @@ -0,0 +1,7 @@ +{ + "all_checks_pass": false, + "failure": "fixed phase outcome uncertain; original evidence retained; no retry", + "failure_class": "ValueError", + "phase": "verify", + "raw_output_withheld": true +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-approved-offline-verify.json b/docs/evidence/2026-10-10-security-consolidation/infd-approved-offline-verify.json new file mode 100644 index 00000000..05f7f0e9 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-approved-offline-verify.json @@ -0,0 +1,68 @@ +{ + "admin_counts": { + "lifecycle": { + "events": 50, + "pending": 0, + "records": 15 + }, + "outbox": { + "delivered": 320 + }, + "schema_version": 5, + "submissions": { + "confirmed": 41 + } + }, + "all_checks_pass": true, + "created_volume_identity": { + "CreatedAt": "2026-10-11T08:57:37+02:00", + "Driver": "local", + "Labels": { + "informed-decision.attempt": "b2e45df1-19fc-4fac-9153-920dc6153ee9", + "informed-decision.case": "infd-purpose-20261011-r1", + "informed-decision.use": "offline-restore-only" + }, + "Name": "infd-purpose-r1-restore-20261011", + "Scope": "local" + }, + "network": "none", + "offline_post_admin_readonly": { + "integrity": "ok", + "lifecycle": { + "events": 50, + "pending": 0, + "records": 15 + }, + "outbox": { + "delivered": 320 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 41 + } + }, + "offline_readonly": { + "integrity": "ok", + "lifecycle": { + "events": 50, + "pending": 0, + "records": 15 + }, + "outbox": { + "delivered": 320 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 41 + } + }, + "offline_volume": "infd-purpose-r1-restore-20261011", + "original_snapshot_hash_unchanged": true, + "original_snapshot_retained": true, + "runtime_tokens_or_config_mounted": false, + "service_entrypoint_started": false +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-approved-rescue-copy.json b/docs/evidence/2026-10-10-security-consolidation/infd-approved-rescue-copy.json new file mode 100644 index 00000000..2cbb96d1 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-approved-rescue-copy.json @@ -0,0 +1,36 @@ +{ + "all_checks_pass": true, + "native_approval_verified_by_root": { + "accepted_at": "2026-10-11T06:53:43Z", + "approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1", + "disposition_id": "disp-c6529331-e9d7-4466-9528-2e839739e751", + "verified_at": "2026-10-11T06:56:35.092109+00:00" + }, + "native_authenticated_grant": false, + "off_cluster_private_copy_verified": true, + "phase": "drill-copy-rescue-r1", + "pod_name": "informed-decision-f557556df-mwpz7", + "pod_uid": "e8561ae0-4b09-4455-924d-64c27b625fc7", + "raw_output_withheld": true, + "snapshot_bytes": 19537920, + "snapshot_contents_output": false, + "snapshot_file": "drill.sqlite", + "snapshot_readonly": { + "integrity": "ok", + "lifecycle": { + "events": 50, + "pending": 0, + "records": 15 + }, + "outbox": { + "delivered": 320 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 41 + } + }, + "snapshot_sha256": "8756cf825df9e7b5b74bb4a0106a5027f5cff2c59ff45d7b48eed8522a7d33f3" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-inner-diagnostic-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-inner-diagnostic-receipt.json new file mode 100644 index 00000000..11ddc18e --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-inner-diagnostic-receipt.json @@ -0,0 +1,87 @@ +{ + "all_checks_pass": "diagnosis_only", + "application_uid": "499868f2-eabc-4df4-ae31-b89ce58d750d", + "configmap_uid": "90113d2d-54d9-4e82-b1d3-90b49ebed2b5", + "dependency_seals_match": true, + "deployment_uid": "a588e10a-90d2-4883-975e-6dd8b8feca92", + "diagnostic_only": true, + "fixture_exit_code": 0, + "fixture_result": { + "advisory_or_malformed_refused": 8, + "binding_forms_allowed": 2, + "installed_image_purpose_variants": 10, + "native_provider": false, + "synthetic_only": true + }, + "generation": 25, + "health": { + "/healthz": 200, + "/readyz": 200 + }, + "helper_source_amended": false, + "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a", + "independent_readonly_reconciliation": true, + "module": { + "is_regular": true, + "mode": "0o644", + "sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62", + "uid": 0 + }, + "mutation_executed": false, + "native_provider_allow_path_proof": "Separate root-authenticated outcomes readback after new Ready image; installed refusal checks below are synthetic", + "native_uid": 10001, + "operation": { + "exact_resources": [ + { + "group": "apps", + "kind": "Deployment", + "name": "informed-decision", + "namespace": "informed-decision" + } + ], + "finished_at": "2026-10-11T07:00:30Z", + "initiated_by": { + "username": "custodian-codex" + }, + "original_release_request_explicit_prune_false": true, + "phase": "Succeeded", + "prune_effective": false, + "prune_field_present": false, + "started_at": "2026-10-11T07:00:30Z", + "sync_result_resources": [ + { + "group": "apps", + "kind": "Deployment", + "name": "informed-decision", + "namespace": "informed-decision", + "status": "Synced", + "syncPhase": "Sync" + } + ] + }, + "original_phase_replayed": false, + "original_verify_journal_state": "UNCERTAIN_preserved", + "pod_image_id": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a", + "pod_name": "informed-decision-5557446c88-lvm88", + "pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662", + "pvc_uid": "d80b25b1-141a-441b-b205-98fa2fd98b7c", + "readonly_counts": { + "integrity": "ok", + "lifecycle": { + "events": 56, + "pending": 0, + "records": 16 + }, + "outbox": { + "delivered": 336 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 43 + } + }, + "ready_replicas": 1, + "source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-verification-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-verification-receipt.json new file mode 100644 index 00000000..59fb6cf1 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-independent-readonly-verification-receipt.json @@ -0,0 +1,84 @@ +{ + "all_checks_pass": true, + "application_uid": "499868f2-eabc-4df4-ae31-b89ce58d750d", + "configmap_uid": "90113d2d-54d9-4e82-b1d3-90b49ebed2b5", + "database_opened_readonly": true, + "dependency_seals_match": true, + "deployment_uid": "a588e10a-90d2-4883-975e-6dd8b8feca92", + "generation": 25, + "health_statuses": { + "/healthz": 200, + "/readyz": 200 + }, + "helper_source_amended": false, + "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a", + "independent_readonly_reconciliation": true, + "installed_purpose_checks": { + "advisory_or_malformed_refused": 8, + "binding_forms_allowed": 2, + "installed_image_purpose_variants": 10, + "native_provider": false, + "synthetic_only": true + }, + "live_readonly_schema_integrity_counts": { + "integrity": "ok", + "lifecycle": { + "events": 56, + "pending": 0, + "records": 16 + }, + "outbox": { + "delivered": 336 + }, + "read_only_pre_open": true, + "schema_version": 5, + "store_constructed": false, + "submissions": { + "confirmed": 43 + } + }, + "module_mode": "0644", + "module_sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62", + "module_uid": 0, + "mutation_executed": false, + "native_provider_allow_path_proof": "Separate root-authenticated outcomes readback after new Ready image; installed refusal checks below are synthetic", + "native_uid": 10001, + "operation": { + "exact_resources": [ + { + "group": "apps", + "kind": "Deployment", + "name": "informed-decision", + "namespace": "informed-decision" + } + ], + "finished_at": "2026-10-11T07:00:30Z", + "initiated_by": { + "username": "custodian-codex" + }, + "original_release_request_explicit_prune_false": true, + "phase": "Succeeded", + "prune_effective": false, + "prune_field_present": false, + "started_at": "2026-10-11T07:00:30Z", + "sync_result_resources": [ + { + "group": "apps", + "kind": "Deployment", + "name": "informed-decision", + "namespace": "informed-decision", + "status": "Synced", + "syncPhase": "Sync" + } + ] + }, + "original_phase_replayed": false, + "original_verify_journal_state": "UNCERTAIN_preserved", + "pod_image_id": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a", + "pod_name": "informed-decision-5557446c88-lvm88", + "pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662", + "pvc_uid": "d80b25b1-141a-441b-b205-98fa2fd98b7c", + "ready_replicas": 1, + "source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2", + "store_or_admin_constructed": false +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-installed-argocd-controller-version.json b/docs/evidence/2026-10-10-security-consolidation/infd-installed-argocd-controller-version.json new file mode 100644 index 00000000..efa08a07 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-installed-argocd-controller-version.json @@ -0,0 +1,7 @@ +{ + "image": "quay.io/argoproj/argocd:v3.5.3", + "kind": "StatefulSet", + "name": "argocd-application-controller", + "namespace": "argocd", + "native_metadata_observed": true +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-native-rollout-cpu-headroom.json b/docs/evidence/2026-10-10-security-consolidation/infd-native-rollout-cpu-headroom.json new file mode 100644 index 00000000..1026e4ec --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-native-rollout-cpu-headroom.json @@ -0,0 +1,10 @@ +{ + "candidate_resources_unchanged": true, + "cpu_request_percent": 86, + "cpu_requested_millicores": 3460, + "deployment_strategy": "Recreate", + "memory_request_percent": 59, + "memory_requested_mib": 9472, + "scope": "read-only node allocation check before approved rollout", + "verified_at": "2026-10-11T06:59:03.816754+00:00" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-native-task-human-wait-closure-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-native-task-human-wait-closure-receipt.json new file mode 100644 index 00000000..78e1a59e --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-native-task-human-wait-closure-receipt.json @@ -0,0 +1,7 @@ +{ + "task_id": "0e1bb868-7bc2-5d4d-953c-e0edaf660ad0", + "source_task": "INFD-WP-0009-T04", + "status": "done", + "needs_human": false, + "human_wait_flag_changed": false +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-post-rollout-native-provider-allow-path-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-post-rollout-native-provider-allow-path-receipt.json new file mode 100644 index 00000000..99eb2391 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-post-rollout-native-provider-allow-path-receipt.json @@ -0,0 +1,18 @@ +{ + "actual_native_provider_operation": true, + "evidence_basis": "Authenticated native HTTP success after image rollout; installed LifecycleService.outcomes invokes _authorize/PolicyClient.check and current() before returning. Actual installed module hash and configuration seals independently verified.", + "extra_provider_denial_probe_executed": false, + "installed_module_sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62", + "limitation": "Proves actual canonical allow-path preservation; does not claim provider emitted advisory responses or all refusal variants came from native provider.", + "new_image": "sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a", + "operation": "lifecycle.outcomes", + "pod_uid": "c4cb1550-feda-4097-9de4-d891a657b662", + "service": "State Hub admitted memo dispatcher using internal mounted credential", + "source_memo_id": "infd-20261011-purpose-overlay-r1", + "source_memo_version": 2, + "synthetic_installed_refusal_variants": 8, + "synthetic_variant_check_is_native_provider_response": false, + "transport": "fixed internal ORIGIN, no redirects, GET /v1/decisions/infd-20261011-purpose-overlay-r1/outcomes?version=2", + "verification_kind": "post-rollout canonical provider-backed outcomes operation", + "verified_at": "2026-10-11T07:01:37.243411+00:00" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-purpose-original-source-unbound-readback.json b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-original-source-unbound-readback.json new file mode 100644 index 00000000..2b0a383f --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-original-source-unbound-readback.json @@ -0,0 +1,8 @@ +{ + "approval_binding_digest_present": false, + "approval_id": null, + "memo_id": "infd-20261011-purpose-overlay-r1", + "read_only_metadata": true, + "sealed": false, + "source_version": 1 +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-acceptance-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-acceptance-receipt.json new file mode 100644 index 00000000..1391c517 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-acceptance-receipt.json @@ -0,0 +1,34 @@ +{ + "disposition_count": 1, + "dispositions": [ + { + "approval_id": null, + "approved_at": "2026-10-11T06:53:43+00:00", + "decided_at": null, + "disposition": { + "actor": { + "kind": "person", + "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local" + }, + "approval_id": "7a34e7cc-5bad-40ea-a2f5-d6d269dc56f1", + "at": "2026-10-11T06:53:43Z", + "id": "disp-c6529331-e9d7-4466-9528-2e839739e751", + "memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f", + "memo_version": 1, + "note": null, + "presentation_id": "pres-aff4dcb6-a282-4958-be22-2a8b9a8c96c8", + "reasons": [], + "verb": "accept" + }, + "id": null, + "submission_state": "confirmed" + } + ], + "memo_id": "infd-20261011-purpose-overlay-r1", + "review": { + "intake_state": "ready", + "memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f", + "path": "/review?memo_id=review-cda20761-f6ff-4d02-9c34-5097fc27539f", + "stale": false + } +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-authoring-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-authoring-receipt.json new file mode 100644 index 00000000..48dd1d44 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-native-authoring-receipt.json @@ -0,0 +1,18 @@ +{ + "human_dispositions": 0, + "memo_id": "infd-20261011-purpose-overlay-r1", + "outcome_review": { + "intake_state": "not_submitted", + "memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f", + "stale": false + }, + "publication_event_id": "7d93c9af-419a-4b9f-b897-f8df2655f485", + "queue_detail": "queued", + "queue_status": "pending", + "register_event_id": null, + "review_event_id": "51c2629b-8634-458f-9fb8-37a2e8c4325c", + "review_memo_id": "review-cda20761-f6ff-4d02-9c34-5097fc27539f", + "revision_event_id": "fd4e3142-29e7-44b5-b970-c59dd98fdb1b", + "version": 2, + "workspace_url": "https://decisions.coulomb.social/decisions/infd-20261011-purpose-overlay-r1?version=2" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-source-pin.json b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-source-pin.json new file mode 100644 index 00000000..30b3d904 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-source-pin.json @@ -0,0 +1,17 @@ +{ + "revision": "rescue-r2-d05d6e3b", + "status": "prepared_pending_new_human_decision", + "manifest_sha256": "d05d6e3b15df9acf1d7aef0ba2ec82a5a00d979ab1f324e981025cffe2cc753d", + "memo_version": 2, + "memo_sha256": "391330d062ede170a546415886d18b4895ba24d313a0dd50dcc1591c1aa3c2fa", + "revision_request_sha256": "feb946218e9611e1b686c1672fd9142896c55fd88aa2e59fabc6cfadbe22e327", + "revision_command_digest": "ccbeca292dd4ffcd0ed8a4669c82a93f9b773a30186966d3f146d5db8e5e6b8a", + "source_revision": "c96b0c6d881e855d1d158003c6de90ef390262e2", + "execution_bundle_sha256": "49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5", + "execution_plan_sha256": "9ce5728a561e6d38f8497201baa2b840d11444a0af8ad6234dfc37428113f258", + "delta": "Explicitly close WAL-aware readers; frozen zero-WAL hash-bound snapshot inspection uses immutable mode; distinct drill-copy-rescue-r1 and new linked journal preserve original uncertain attempt and SHM. Conditional remaining same-image phases only after new approval. Historical helper manifest label corrected.", + "verification": "26 synthetic executor/reader tests plus independent scope, custody and replay counterexamples; actual live drill/rollout remains pending.", + "rollback": "Deployment-only previous image/source recovery preserves latest database; old uncertain journal never rewritten.", + "cost_estimate": "EUR0 recurring infrastructure; existing temporary private-copy storage and attended time unpriced.", + "risk_estimate": "Existing approved snapshot contains private live data; metadata-only logging/private custody, no native sidecar deletion, no rollback over current database. Scoped Recreate restart and reversible Deployment-only image change conditional on actual compatibility drill." +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-statehub-decision-receipt.json b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-statehub-decision-receipt.json new file mode 100644 index 00000000..a9da4718 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-purpose-rescue-statehub-decision-receipt.json @@ -0,0 +1,7 @@ +{ + "id": "01fd1361-7d5f-52b7-91da-8eb620a8d627", + "title": "Founder approves bounded purpose image rescue R2; deployed target independently verified", + "decision_type": "made", + "status": "resolved", + "decided_at": "2026-10-11T06:53:43Z" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-rescue-actual-receipt-original-hashes.json b/docs/evidence/2026-10-10-security-consolidation/infd-rescue-actual-receipt-original-hashes.json new file mode 100644 index 00000000..14c657a9 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-rescue-actual-receipt-original-hashes.json @@ -0,0 +1,15 @@ +{ + "infd-approved-rescue-copy.json": "574edd84cac958d95e0f79691f7309369a0c9df18f75973242a2303eca387780", + "infd-approved-offline-verify.json": "93c346828e16e440d8c8987f15919e62f047af3108f49dde8372fb7289d355bd", + "infd-approved-cleanup-offline.json": "bcab38a565bb843f4e3ad543677251537757df9d158f72b201dc05a1736f7e74", + "infd-approved-cutover-backup.json": "97a220951c59db74210fae80aee37c661278d20571c9004d5ac92bf9c02962f7", + "infd-approved-cutover-copy.json": "c213e31762f1ddac3c90a20e654de98dcf347cfad96181e234cae6ebe46140f4", + "infd-approved-image-release.json": "e4fa89393b329fecbd3f991e0298c9e8af77c1668d6a968192dfa24daabb98d8", + "infd-approved-image-verify.json": "80c0a938838e4ad726e62651abdc90d94ade85985169a489f4b599d551f39fc8", + "infd-independent-readonly-verification-receipt.json": "c3fc07400204a4821e65aebcbfd228ce571f2b0402a52e0719d29d3704ec0a60", + "infd-independent-readonly-inner-diagnostic-receipt.json": "9ef8a2654ac600489b3e0121c5f138ee3eb58b0daeddaca595aca735040be8b5", + "infd-post-rollout-native-provider-allow-path-receipt.json": "c534f5fa96d4d3e66b1a8f72cae9be15c62c4d0dd0b35fbefdfe13e3f51e89b7", + "infd-native-rollout-cpu-headroom.json": "c0e12225ef28fcbe02cd4f5b00f39a8b630c2c1f5f075ce7ba39f2a061674a0d", + "infd-installed-argocd-controller-version.json": "62b85702ca73d8c349a52be9c8196e2f85c6e9e0aafb07f17a15d5c988fee82b", + "infd-rescue-pre-phase-diagnostic.json": "5cdc0d06af99de46fa3329d3648f58347ca7f03c33d82f6402fa0e2e8a6f50ae" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-rescue-pre-phase-diagnostic.json b/docs/evidence/2026-10-10-security-consolidation/infd-rescue-pre-phase-diagnostic.json new file mode 100644 index 00000000..87c402ca --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-rescue-pre-phase-diagnostic.json @@ -0,0 +1,9 @@ +{ + "case_files": [], + "diagnostic_only": true, + "executor_files": [], + "failure_before_phase": "Root supplied new paths instead of approved fixed receipt paths", + "original_anchor": "pass", + "owner_source_files": [], + "rescue_journal_exists": false +} diff --git a/docs/evidence/2026-10-10-security-consolidation/infd-rescue-private-journal-state-summary.json b/docs/evidence/2026-10-10-security-consolidation/infd-rescue-private-journal-state-summary.json new file mode 100644 index 00000000..68451593 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/infd-rescue-private-journal-state-summary.json @@ -0,0 +1,42 @@ +{ + "metadata_only": true, + "phase_states": { + "drill-copy-rescue-r1": { + "state": "COMPLETE", + "attempt_id": "be542567-8c2d-4420-a824-a89a5796b3e7", + "started_at": "2026-10-11T06:56:35.678452+00:00" + }, + "offline-verify": { + "state": "COMPLETE", + "attempt_id": "b2e45df1-19fc-4fac-9153-920dc6153ee9", + "started_at": "2026-10-11T06:57:37.405279+00:00" + }, + "cleanup-offline": { + "state": "COMPLETE", + "attempt_id": "8f545d23-b54c-48d4-8c89-4579df2f0036", + "started_at": "2026-10-11T06:58:31.193308+00:00" + }, + "cutover-backup": { + "state": "COMPLETE", + "attempt_id": "712b22d7-ae5e-43e0-979c-321800ed7f2f", + "started_at": "2026-10-11T06:58:48.671103+00:00" + }, + "cutover-copy": { + "state": "COMPLETE", + "attempt_id": "1ad6c1c7-938c-4790-af97-3ca21b36d2fd", + "started_at": "2026-10-11T06:59:27.120207+00:00" + }, + "release": { + "state": "COMPLETE", + "attempt_id": "4cdf296a-8def-44ea-a164-81fbb65989e0", + "started_at": "2026-10-11T07:00:23.064125+00:00" + }, + "verify": { + "state": "UNCERTAIN", + "attempt_id": "2be2b4d7-7679-43f3-b9cb-f80ad1ff6016", + "started_at": "2026-10-11T07:01:37.501508+00:00" + } + }, + "original_journal_preserved": true, + "original_verify_state_rewritten": false +} diff --git a/docs/evidence/2026-10-10-security-consolidation/native-purpose-and-forgejo-source-progress-receipt.json b/docs/evidence/2026-10-10-security-consolidation/native-purpose-and-forgejo-source-progress-receipt.json new file mode 100644 index 00000000..1c9857ef --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/native-purpose-and-forgejo-source-progress-receipt.json @@ -0,0 +1,6 @@ +{ + "id": "f9ebbce1-1f88-42d0-a355-4e18ea45618b", + "event_type": "note", + "author": "codex", + "created_at": "2026-10-11T08:30:56.411091Z" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-checkpoint-before-infd-native-task-closure.json b/docs/evidence/2026-10-10-security-consolidation/source-checkpoint-before-infd-native-task-closure.json new file mode 100644 index 00000000..cbee1fd7 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-checkpoint-before-infd-native-task-closure.json @@ -0,0 +1,441 @@ +{ + "railiance-platform": { + "plans": [ + { + "id": "RPF-WP-0015", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 2 + }, + { + "id": "RPF-WP-0027", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 2 + }, + { + "id": "RPF-WP-0035", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 7 + }, + { + "id": "RPF-WP-0036", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0036-platform-service-assurance.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 3 + }, + { + "id": "RPF-WP-0038", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "RPF-WP-0043", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0043-policy-nexus-argocd-onboarding.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 2 + }, + { + "id": "RPF-WP-0044", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 6 + }, + { + "id": "RPF-WP-0048", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0048-activity-core-gitops-adoption.md", + "status": "blocked", + "flavor": null, + "unfinished_tasks": 1 + }, + { + "id": "RPF-WP-0053", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0053-coulomb-paired-backup-admission.md", + "status": "proposed", + "flavor": null, + "unfinished_tasks": 5 + }, + { + "id": "RPF-WP-0055", + "file": "/home/worsch/railiance-platform/workplans/RPF-WP-0055-keycape-client-secret-rotation-residual.md", + "status": "backlog", + "flavor": "residual", + "unfinished_tasks": 1 + } + ], + "open_plans": 10, + "nonresidual_plans": 9, + "residual_plans": 1, + "unfinished_tasks": 30 + }, + "net-kingdom": { + "plans": [ + { + "id": "NK-WP-0011", + "file": "/home/worsch/net-kingdom/workplans/NK-WP-0011-enterprise-federation-saml.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 8 + }, + { + "id": "NK-WP-0022", + "file": "/home/worsch/net-kingdom/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "NK-WP-0027", + "file": "/home/worsch/net-kingdom/workplans/NK-WP-0027-reef-placement-reconciliation.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 3 + }, + { + "id": "NK-WP-0031", + "file": "/home/worsch/net-kingdom/workplans/NK-WP-0031-deterministic-posture-feedback.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "NK-WP-0035", + "file": "/home/worsch/net-kingdom/workplans/NK-WP-0035-emission-cadence-security-profile.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "NK-WP-0040", + "file": "/home/worsch/net-kingdom/workplans/NK-WP-0040-execution-attribution-receipt.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 1 + }, + { + "id": "NK-WP-0048", + "file": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md", + "status": "active", + "flavor": "implementation", + "unfinished_tasks": 2 + } + ], + "open_plans": 7, + "nonresidual_plans": 7, + "residual_plans": 0, + "unfinished_tasks": 17 + }, + "access-engine": { + "plans": [ + { + "id": "FLEX-WP-ADHOC-2026-10-03", + "file": "/home/worsch/access-engine/workplans/ADHOC-2026-10-03.md", + "status": "blocked", + "flavor": null, + "unfinished_tasks": 1 + }, + { + "id": "FLEX-WP-0020", + "file": "/home/worsch/access-engine/workplans/FLEX-WP-0020-repository-identity-migration.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 1 + }, + { + "id": "FLEX-WP-0031", + "file": "/home/worsch/access-engine/workplans/FLEX-WP-0031-decision-record-emission.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 4 + }, + { + "id": "FLEX-WP-0036", + "file": "/home/worsch/access-engine/workplans/FLEX-WP-0036-runtime-rename-access-engine.md", + "status": "active", + "flavor": null, + "unfinished_tasks": 8 + } + ], + "open_plans": 4, + "nonresidual_plans": 4, + "residual_plans": 0, + "unfinished_tasks": 14 + }, + "secrets-engine": { + "plans": [ + { + "id": "SECRETS-WP-0006", + "file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0006-catalog-lane-adoption.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 2 + }, + { + "id": "SECRETS-WP-0007", + "file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0007-production-lifecycle-hardening.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "SECRETS-WP-0008", + "file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "SECRETS-WP-0009", + "file": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + } + ], + "open_plans": 4, + "nonresidual_plans": 4, + "residual_plans": 0, + "unfinished_tasks": 5 + }, + "ops-mason": { + "plans": [ + { + "id": "MASON-WP-0004", + "file": "/home/worsch/ops-mason/workplans/MASON-WP-0004-credential-inventory-descriptions.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 2 + }, + { + "id": "MASON-WP-0005", + "file": "/home/worsch/ops-mason/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 2 + }, + { + "id": "MASON-WP-0006", + "file": "/home/worsch/ops-mason/workplans/MASON-WP-0006-readiness-tier-check.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "MASON-WP-0009", + "file": "/home/worsch/ops-mason/workplans/MASON-WP-0009-keycape-secrets-engine-openbao-client-custody.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 1 + }, + { + "id": "MASON-WP-0010", + "file": "/home/worsch/ops-mason/workplans/MASON-WP-0010-security-case-materialization.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 2 + } + ], + "open_plans": 5, + "nonresidual_plans": 5, + "residual_plans": 0, + "unfinished_tasks": 8 + }, + "ops-warden": { + "plans": [ + { + "id": "WARDEN-WP-0027", + "file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0027-credential-governance-lockdown.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "WARDEN-WP-0034", + "file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0034-layer-model-v07-conformance.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "WARDEN-WP-0037", + "file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 1 + }, + { + "id": "WARDEN-WP-0040", + "file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md", + "status": "blocked", + "flavor": "planning", + "unfinished_tasks": 3 + }, + { + "id": "WARDEN-WP-0044", + "file": "/home/worsch/ops-warden/workplans/WARDEN-WP-0044-security-case-follow-through.md", + "status": "active", + "flavor": "implementation", + "unfinished_tasks": 2 + } + ], + "open_plans": 5, + "nonresidual_plans": 5, + "residual_plans": 0, + "unfinished_tasks": 8 + }, + "key-cape": { + "plans": [ + { + "id": "KEY-WP-0038", + "file": "/home/worsch/key-cape/workplans/KEY-WP-0038-forgejo-oidc-client.md", + "status": "active", + "flavor": "implementation", + "unfinished_tasks": 2 + }, + { + "id": "KEY-WP-0039", + "file": "/home/worsch/key-cape/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md", + "status": "active", + "flavor": "implementation", + "unfinished_tasks": 1 + } + ], + "open_plans": 2, + "nonresidual_plans": 2, + "residual_plans": 0, + "unfinished_tasks": 3 + }, + "user-engine": { + "plans": [ + { + "id": "USER-WP-0026", + "file": "/home/worsch/user-engine/workplans/USER-WP-0026-account-recovery.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "USER-WP-0027", + "file": "/home/worsch/user-engine/workplans/USER-WP-0027-account-journey-clarity.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 2 + }, + { + "id": "USER-WP-0028", + "file": "/home/worsch/user-engine/workplans/USER-WP-0028-user-journey-acceptance.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 2 + }, + { + "id": "USER-WP-0035", + "file": "/home/worsch/user-engine/workplans/USER-WP-0035-onboarding-handoff-findings.md", + "status": "blocked", + "flavor": "implementation", + "unfinished_tasks": 1 + }, + { + "id": "USER-WP-0037", + "file": "/home/worsch/user-engine/workplans/USER-WP-0037-hub-authority-lookup.md", + "status": "blocked", + "flavor": null, + "unfinished_tasks": 1 + } + ], + "open_plans": 5, + "nonresidual_plans": 5, + "residual_plans": 0, + "unfinished_tasks": 7 + }, + "tenant-engine": { + "plans": [ + { + "id": "TEN-WP-0012", + "file": "/home/worsch/tenant-engine/workplans/TEN-WP-0012-external-conformance-waits.md", + "status": "blocked", + "flavor": "residual", + "unfinished_tasks": 2 + } + ], + "open_plans": 1, + "nonresidual_plans": 0, + "residual_plans": 1, + "unfinished_tasks": 2 + }, + "gate-house": { + "plans": [ + { + "id": "GH-WP-0004", + "file": "/home/worsch/gate-house/workplans/GH-WP-0004-section-11-layer-declarations.md", + "status": "active", + "flavor": "implementation", + "unfinished_tasks": 1 + } + ], + "open_plans": 1, + "nonresidual_plans": 1, + "residual_plans": 0, + "unfinished_tasks": 1 + }, + "kings-guard": { + "plans": [ + { + "id": "KG-WP-0005", + "file": "/home/worsch/kings-guard/workplans/KG-WP-0005-qonto-source-cadence-admission.md", + "status": "blocked", + "flavor": null, + "unfinished_tasks": 1 + } + ], + "open_plans": 1, + "nonresidual_plans": 1, + "residual_plans": 0, + "unfinished_tasks": 1 + }, + "policy-nexus": { + "plans": [], + "open_plans": 0, + "nonresidual_plans": 0, + "residual_plans": 0, + "unfinished_tasks": 0 + }, + "informed-decision": { + "plans": [ + { + "id": "INFD-WP-0008", + "file": "/home/worsch/informed-decision/workplans/INFD-WP-0008-lifecycle-expansion-contracts.md", + "status": "backlog", + "flavor": null, + "unfinished_tasks": 4 + }, + { + "id": "INFD-WP-0009", + "file": "/home/worsch/informed-decision/workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md", + "status": "active", + "flavor": "implementation", + "unfinished_tasks": 2 + } + ], + "open_plans": 2, + "nonresidual_plans": 2, + "residual_plans": 0, + "unfinished_tasks": 6 + }, + "_total": { + "plans": [], + "open_plans": 0, + "nonresidual_plans": 0, + "residual_plans": 0, + "unfinished_tasks": 0 + } +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-count-native-closure-reconciliation.json b/docs/evidence/2026-10-10-security-consolidation/source-count-native-closure-reconciliation.json new file mode 100644 index 00000000..acfb07b0 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-count-native-closure-reconciliation.json @@ -0,0 +1,17 @@ +{ + "prior_per_repo_sum": { + "open_plans": 47, + "nonresidual_plans": 45, + "residual_plans": 2, + "unfinished_tasks": 102 + }, + "prior_cached_total_defect": "_total object incorrectly zeroed; original bytes retained in checkpoint", + "current_recomputed_total": { + "open_plans": 47, + "nonresidual_plans": 45, + "residual_plans": 2, + "unfinished_tasks": 101 + }, + "delta": "INFD-WP-0009-T04 done; other tracked plan/task totals unchanged", + "count_scope": "The same 13 owner repositories, current top-level workplan files with proposed/ready/active/blocked/backlog statuses; residual plans included and separated; done/cancel tasks excluded." +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-current-2026-10-11.json b/docs/evidence/2026-10-10-security-consolidation/source-current-2026-10-11.json index cbee1fd7..77c42899 100644 --- a/docs/evidence/2026-10-10-security-consolidation/source-current-2026-10-11.json +++ b/docs/evidence/2026-10-10-security-consolidation/source-current-2026-10-11.json @@ -423,19 +423,18 @@ "file": "/home/worsch/informed-decision/workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md", "status": "active", "flavor": "implementation", - "unfinished_tasks": 2 + "unfinished_tasks": 1 } ], "open_plans": 2, "nonresidual_plans": 2, "residual_plans": 0, - "unfinished_tasks": 6 + "unfinished_tasks": 5 }, "_total": { - "plans": [], - "open_plans": 0, - "nonresidual_plans": 0, - "residual_plans": 0, - "unfinished_tasks": 0 + "open_plans": 47, + "nonresidual_plans": 45, + "residual_plans": 2, + "unfinished_tasks": 101 } } diff --git a/docs/security-collaboration-review-2026-10-10.md b/docs/security-collaboration-review-2026-10-10.md index eac31aea..9304ce26 100644 --- a/docs/security-collaboration-review-2026-10-10.md +++ b/docs/security-collaboration-review-2026-10-10.md @@ -486,3 +486,19 @@ metadata receipt693786bb is confirmed; no live workerwake or foreigntaskcopy. ### Informed-decision image trial: verified backup, transfer stopped The founder confirmed exact purpose-overlay R1 at 02:34:20Z on 2026-10-11. The approved native backup completed and verified schema 5, integrity and count consistency. The subsequent drill-copy entered UNCERTAIN before creating an off-cluster database file; no offline restore or image rollout ran. Metadata-only inspection confirms the frozen main snapshot retains its approved hash and size, with zero WAL bytes and a 32 KB SHM sidecar left by read-only inspection. Source owners are preparing a bounded correction; the original journal and failed outcome remain retained. The approved helper is unchanged and no phase was retried. See `docs/evidence/2026-10-10-security-consolidation/infd-purpose-drill-copy-diagnosis.json`. + +### Forgejo dedicated consumer identity: exact source decision ready + +NetKingdom source commit `584a964` records the complete proposed type 1.2 package, 22 passing package tests and reviewed six-object Forgejo render. The genuine native review `review-126c6c90-11ba-4609-b8d1-75e054c246cd` is ready for source acknowledgment. Old five rendered bodies remain unchanged; the new consumer role binds dedicated `forgejo/forgejo-keycape-forgejo-eso`, not shared workload `forgejo/default`. This does not implement the type, accept the canonical case, create credentials or authorize a native session. Existing ORGREF driver and owner tasks retain the remaining implementation and first-session work. The first physical review-file application preceded the existing-file task update; a retained explicit owner review after the completed T06 anchor now verifies exact actual source before human submission. + +### Reviewed image rescue submitted as source version 2 + +The bounded existing-snapshot rescue is committed at informed-decision `c96b0c6` and published for a new exact founder decision. Product and Platform reviews verify all 134 source paths; 26 executor/reader tests and independent scope, custody and replay counterexamples passed. The original approved helper and the first rejected rescue packet remain immutable archived evidence. Source version 2 uses a new native review ID and preserves the original COMPLETE backup/UNCERTAIN copy journal. No rescue copy, restore drill, image rollout or extra provider probe has executed. The rescue uses zero-WAL, hash-bound immutable inspection only for the frozen snapshot; live and writable-clone inspection remains WAL-aware and explicitly closes connections. New source decision: `review-cda20761-f6ff-4d02-9c34-5097fc27539f`. + +### Actual image accepted and task count reconciled + +INFD Product and Platform independently accepted the exact deployed purpose image `763c3640…` at owner execution source `c96b0c6`. Deployment generation 25 is Ready with one replica; module `9d7c1be4…`, config/PVC identities and every controlled Pod field match, with native UID/GID 10001. Real protected offline compatibility, cleanup, fresh cutover backups/private copies and exact manual one-Deployment non-pruning Argo completion are retained. Schema 5/integrity and newer records remain intact. Actual authenticated post-rollout lifecycle.outcomes proves the canonical provider allow path; ten installed purpose fixtures include eight refusals and remain explicitly synthetic. Original drill-copy and final verifier UNCERTAIN outcomes stay unchanged; independent read-only reconciliation verifies actual target with refinement, not an unchanged execution success. + +`INFD-WP-0009-T04` is done in source commit `0693c40`; T05 remains live for the inherited fixable MEDIUM zlib finding, due October 18. `INFD-IN-0010` is the unpromoted live handoff for the verifier omission defect before future reuse. WP0009 remains active. The same 13-owner source inventory now totals **47 open plans (45 nonresidual + 2 residual), 101 unfinished tasks**, compared with the previous per-repo sum of 47/102. A previously zeroed cached `_total` was corrected from authoritative per-repo arithmetic; the exact prior snapshot remains retained. + +Forgejo source acknowledgment is recorded in Net commit `f6856cd` and the separate application-owner design receipt `d349815`. Explicit version selection is committed at `bb9b9b5`, with 43 loader/validator and 22 package compatibility tests passing. Both actual acknowledged types remain unimplemented and reject ordinary admission; canonical 1.1 and all native provider pins stay unchanged. Six-object materialization, authenticated provenance, adapters and first session remain under the existing ORGREF/owner gates.