From 0ffc5af59146fb236f5abf8207a147c93068556b Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 30 Jul 2026 00:25:34 +0200 Subject: [PATCH] Record registry and offsite backup completion --- ...20-self-service-and-user-administration-portal.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md index 9e224c4..951bbb6 100644 --- a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md +++ b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md @@ -155,6 +155,18 @@ image and restoration of `user-engine:portal-2bcda7f`. The remaining production gaps are off-node backup custody and approved registry publication, so this task remains in progress. +2026-07-30 follow-up: the portal, provisioner, and prior rollback image are +published through the workload-scoped Forgejo credential and anonymously +verified by digest. The live portal and provisioner now use registry digests, +and rollback/roll-forward no longer depends on containerd retaining local +tags. An age-encrypted user-engine Postgres dump was uploaded through the +established activity-core offsite lane with plaintext cleanup. + +The remaining T05 item is migration of the portal edge marker and provisioner +service token from bootstrap Kubernetes Secrets into an OpenBao-owned, +ExternalSecret-delivered, rotatable lane. This requires the ops-mason +executive approval gate for new secret custody. + ## T06 - Security, accessibility, and workflow conformance ```task