teleo/teleo-infrastructure
8
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions 1

Record PR 182 rebuild state

Browse source
This commit is contained in:
fwazb 2026-07-20 18:05:26 -07:00
parent d980b25198
commit 3e59845454
1 changed files with 11 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
docs/workstreams/gcp-leoclean/goals.md
View file

@ -20,25 +20,24 @@ cut over safely and retire the VPS after soak.
- Complete: PR #179 least-privilege PostgreSQL authority is merged on main. - Complete: PR #179 least-privilege PostgreSQL authority is merged on main.
- Complete: the revision-bound, structurally no-send runtime from PR #183 is - Complete: the revision-bound, structurally no-send runtime from PR #183 is
merged into `main` at `2d88c9765bd9b43641d1efb04a1118c5ce0bce39`. merged into `main` at `2d88c9765bd9b43641d1efb04a1118c5ce0bce39`.
- Published for human review: PR #182 was rebuilt directly on that baseline at - Rebuilt from current `main`: PR #182 contains only the four functional
`5bcdaa4`; the required identity and OCI corrections are being integrated no-send service-package commits. The two stale proof-only commits were not
locally before exact-revision review. replayed; this file is the single replacement evidence update.
- PR #193 is source material only. It must not be merged wholesale; only the - PR #193 is source material only. It must not be merged wholesale; only the
required identity-binding and OCI-lifecycle corrections belong in the narrow required identity-binding and OCI-lifecycle corrections belong in the narrow
#182/#183 stack. #182/#183 stack.
- In progress locally: the narrow package correction based on `d962555` now - Complete in the rebuilt code candidate: the narrow package correction binds
binds every packaged and synthetic-identity source byte to its reviewed Git every packaged and synthetic-identity source byte to its reviewed Git blob;
blob and makes container health bind the packaged/live config plus the exact container health binds the packaged/live config plus the exact sealed
sealed no-send tool and plugin surface. Independent review found these gaps; no-send tool and plugin surface; and the disposable image smoke binds the
the corrective diff still requires exact-revision tests before publication. bootstrap user, entrypoint, command, healthcheck, and stop signal.
- Separate follow-up: candidate release finalization does not inspect Artifact - Separate follow-up: candidate release finalization does not inspect Artifact
Registry. A narrow deployment-evidence slice must bind the immutable remote Registry. A narrow deployment-evidence slice must bind the immutable remote
digest, `linux/amd64` manifest/config, labels, input hash, and source revision digest, `linux/amd64` manifest/config, labels, input hash, and source revision
before any unit can be installed. before any unit can be installed.
- Next gate: commit the local correction with the configured human Git - Current gate: obtain a clean exact-head CI run and exact-revision human
identity, run focused/full and disposable OCI proof against that exact review. Rebuilding or publishing the branch does not authorize merge or
revision, then stop for publication approval. No publication, merge, or deployment.
deployment is implied by local validation.
- Not yet live-proven: staging VM/container engine, IAM/Secret Manager, Cloud - Not yet live-proven: staging VM/container engine, IAM/Secret Manager, Cloud
SQL effective identity, restart behavior, or model/database parity. SQL effective identity, restart behavior, or model/database parity.