coulomb/the-custodian
4
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions
2407 commits 1 branch 0 tags 5.7 MiB
Commit graph

157 commits

Author SHA1 Message Date
codex
7980edd7e2 Orientation §2: record why bao.coulomb.social fails and the fixed workstation default
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 8s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-22 22:32:57 +02:00
codex
13f75e75d8 Orientation §1: explain and fix the workstation kube context trap.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details 
Non-interactive shells skipped the .bashrc KUBECONFIG export and fell back
to ~/.kube/config (retired coulombcore tunnel :16443). ~/.kube/config now
links to config-railiance01; the old default is config-coulombcore-legacy.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-22 16:19:28 +02:00
codex
c820e31620 Orientation: fleet-wide guidance goes out as a standing notice.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-22 00:47:04 +02:00
codex
c5f7f2df23 Add a tool-neutral environment orientation for all coding agents.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Collects the verified environment facts and traps from 2026-09-21:
workstation vs railiance01 kube context, tunnels, harness permissions,
change gate and rollout headroom, attended OpenBao login, secret-read
hazards, ArgoCD layout, and vocabulary. Linked from AGENTS.md and the
session protocol.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 21:33:04 +02:00
codex
f2ca7fb883 Record the ESO store recovery and the warden login findings.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 19:41:06 +02:00
codex
c635b381ef Record target-revenue adoption, the ESO auth runbook, and the last-applied annotation exposure.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 19:22:36 +02:00
codex
e1ac9c6016 Record phase B start (T02, T03), ArgoCD resources, and the external-secrets release repair.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 5s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 19:10:40 +02:00
codex
994aac3df3 Record State Hub's CPU request restored to 250m (helm rev 64).
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 18:37:51 +02:00
codex
79de54cab1 Record the released CPU requests on railiance01: backups running again.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 7s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 18:31:34 +02:00
codex
bc0963868a Record ArgoCD v3.5.3 core install on railiance01 (blueprint 5.6: adopt) and the exhausted-CPU finding.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 15:58:49 +02:00
codex
28bd1be8ec Record that ArgoCD is not on railiance01 (read-only check, 2026-09-21).
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 15:48:29 +02:00
codex
e98dd26153 Place the whitehat namespace in the non-production tier (founder).
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details 
An explicit placement overrides the unmapped-is-production default for
that target only; it unblocks ops-mason's only bundle without loosening
the default for platform objects.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 15:47:36 +02:00
codex
9ba6e65654 Settle the change gate's edge cases and withdraw an unintended rail-to-layer mapping.
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details 
Founder rulings: unmapped targets are production-tier until mapped;
an evidence lapse does not loosen the path; deprecated keeps its tier.
The contact is realm:kubernetes with no layer assigned (statute 20.3 stays
unset per ADR-0009 D4). ArgoCD on railiance01 is unverified; until the
production row has a working path, the transition rule covers every
production-tier target. Resolves the conflict gate-house noted between the
two founder records.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 14:38:58 +02:00
codex
e3d0d13253 Record the Kubernetes change gate in Mode of Authority terms; drop bare 'operator'. 
Option C: the gate on ADMINISTER @ realm:kubernetes is tiered by ADR-0006
readiness state. Below production-approved, activation=APPROVED by founder
plan approval; at production-approved, CONSTRUCT via ArgoCD for
external-audited evidence, direct apply only as activation=BREAK_GLASS.
rapp-policy-nexus gets a dated transition to 2026-12-21.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 14:07:30 +02:00
codex
4e58927dac Record the operator's acceptance of ops-mason's plan-approval gate. 
Founder plan approval is accepted as the gate for ops-mason's phase-4
protected writes, as an operator-accepted exception to section 6.4, not a
change to the standard. Review 2026-12-21.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 13:44:35 +02:00
codex
a7f550c219 Record the operator's A11 r2 / A12 r3 approval and the GH-DEC-2026-021 follow-ups. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 13:06:55 +02:00
codex
5764669645 Record GH-DEC-2026-021 and the closing of B2. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 12:44:25 +02:00
codex
69802056cd Correct the VALIDATED_AGAINST count: six on v0.7, not five. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 11:33:17 +02:00
codex
2a13c9ef71 Record the GH-DEC-2026-020 round and the detector divergence. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 11:33:06 +02:00
codex
665b7d92f1 Correct the checker count: six copies, not seven.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 07:43:59 +02:00
codex
3553bf4f93 Record the second application round and the measured A12 split. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 07:43:50 +02:00
codex
ff2058fe8f Record the application of GH-DEC-2026-017 across four repositories. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 06:38:46 +02:00
codex
61613f666a Record the section 11 rulings and the scope defect in the custodian's own sweep. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 02:22:23 +02:00
codex
fcc86bda0e Correct the layer-declaration record: Taxonomy is a section 3 layer. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 02:13:09 +02:00
codex
736a740286 Record the estate-wide view of flex-auth's layer-declaration boundaries review. 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-09-21 02:02:21 +02:00
codex
4187b4c69a Note RAIL-HO-WP-0013 as planning after host UTC consolidation.
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details
2026-09-14 15:53:28 +02:00
codex
f820ced5c9 Finish CUST-WP-0072: coverage evidence, templates, intake join.
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details 
Record the flavor backfill cohort, residual-intake join, and agent
convention that default views omit residuals.
 2026-09-14 15:51:06 +02:00
codex
1fff598581 Reconcile live Railiance allocation for CUST-WP-0071-T01.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Join scheduler-effective cluster requests with owner/service/tenant.
Host and cluster CPUs counted once. Residual millicores are not
admission. T02–T05 remain waiting on Vergabe measurements.
 2026-09-14 11:45:34 +02:00
codex
de317f1848 Record live Railiance CPU reservations and overview gaps
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-11 17:30:23 +02:00
codex
ce984af48d Record native factory sender proof and deployment defect correction
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-11 14:26:23 +02:00
codex
dbcf6c8134 docs: record successful factory audit delivery continuation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
2026-09-11 10:34:18 +02:00
codex
c403487aad docs: record factory sender provisioning and delivery continuation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-11 10:12:08 +02:00
codex
46cd54558d docs: retain archived terminal states and record projection residual
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
2026-09-09 14:28:47 +02:00
codex
9244dee128 docs: retain primary sync and historical identity verification receipts
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
2026-09-09 14:24:57 +02:00
codex
22f5f67f13 docs: record factory runtime proof and preserve historical identities
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Python Tests / pytest (push) Successful in 26s
Details
2026-09-09 14:17:32 +02:00
codex
3d5027678d docs: retain legacy Custodian projection refusal explicitly
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-09 10:18:31 +02:00
codex
9be665e133 docs: record replay acceptance and bounded factory operating review 2026-09-09 10:16:31 +02:00
codex
6a95e66a1a docs: record factory approval consumer progress and next gate
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-09 07:28:37 +02:00
codex
b14cbf2a8b docs: record completed factory verifier identity milestone
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-09 02:30:11 +02:00
codex
cc0badb64b Record completed issuer pin and actionable custody review handoff
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-09 00:58:41 +02:00
codex
06382a3156 Record verified live upstream issuer and completed probe cleanup
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-09 00:15:25 +02:00
codex
a632b7aa87 docs(factory): record executable issuer probe and pending live admission
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-08 23:32:39 +02:00
codex
e52c47ff39 docs(factory): record installed runtime and attended custody preflight
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-08 22:52:56 +02:00
codex
d60f5a1274 docs(factory): retain verified critical-path execution and admission handoff
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-08 20:49:06 +02:00
codex
f3cd554ad6 Retain final factory publication and progress verification
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-08 15:24:34 +02:00
codex
c1298bd476 Publish factory efficiency return and point to canonical project
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-08 14:54:13 +02:00
codex
389f7e7f1d Assess factory backlog and record first implemented delivery
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-09-08 14:20:48 +02:00
codex
5c6d8df755 docs: record central fleet projection reset (CUST-WP-0068-T09)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Image main-54b09ee. the-custodian reset-ack then fleet refuse-mode:
52 applied, 69 noop, 2 identifier-collision refusals, 0 retirements.
Fleet-ack not run — nothing was refused for retirement.
 2026-08-28 21:42:05 +02:00
codex
6cd450fa55 finish CUST-WP-0068: recover, disposition, discard the cache
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Close T02–T06 from live hub evidence, disposition clay-borg product
records as not workplans, lift the task-reset restriction in state-hub,
dump and remove the retired local Postgres instance, and record ADR-010's
work-record divergence as closed.
 2026-08-28 21:06:25 +02:00
codex
93b8174abd finish three custodian workplans from live hub evidence
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Python Tests / pytest (push) Successful in 21s
Details 
Close CUST-WP-0064 after the 2026-08-24 unassisted fire ingested
clay-borg, close CUST-WP-0065 now that all 120 active repos project a
classification, and close ADHOC-2026-08-25. Mark CUST-WP-0067 T02/T10
done (reverse relays already gone; work-record recovery lives on 0068).
Park the later no-checkout SBOM regression as CUST-IN-0015. Teach the
classification gate to use this host's checkout path.
 2026-08-28 20:27:05 +02:00