teleo-infrastructure/docs/reports/leo-working-state-20260709/gcp-cloud-sql-t3-live-readonly-current.json
twentyOne2x fed5cb0805 Add guarded canonical claim application
- Normalize rich proposals into atomic reviewed canonical graph bundles with exact row verification.
- Harden reviewer/apply roles, upgrade ACLs, and prove generic plus Helmer lifecycles in isolated PostgreSQL.
- Publish repo-native VPS/GCP/Cory skills and live-readonly GCP inventory without changing the live VPS runtime.

`.agents/skills/crabbox/SKILL.md`
`.agents/skills/teleo-gcp-parity-ops/SKILL.md`
`.agents/skills/teleo-kb-db-change-workflow/SKILL.md`
`.agents/skills/teleo-leo-onboarding/SKILL.md`
`.agents/skills/teleo-vps-runtime-ops/SKILL.md`
`.agents/skills/working-leo-cory-outcomes/SKILL.md`
`docs/reports/leo-working-state-20260709/approve-claim-clone-canary-current.json`
`docs/reports/leo-working-state-20260709/approve-claim-clone-canary-current.md`
`docs/reports/leo-working-state-20260709/current-truth-index.md`
`docs/reports/leo-working-state-20260709/gcp-cloud-sql-t3-live-readonly-current.json`
`docs/reports/leo-working-state-20260709/gcp-cloud-sql-t3-live-readonly-current.md`
`docs/reports/leo-working-state-20260709/gcp-cloudsql-studio-parity-gate-current.json`
`docs/reports/leo-working-state-20260709/gcp-cloudsql-studio-parity-gate-current.md`
`docs/reports/leo-working-state-20260709/gcp-parallel-delegation-current.json`
`docs/reports/leo-working-state-20260709/helmer-approve-claim-clone-canary-current.json`
`docs/reports/leo-working-state-20260709/helmer-approve-claim-normalization-current.json`
`docs/reports/leo-working-state-20260709/skill-pack-manifest.json`
`docs/reports/leo-working-state-20260709/skill-pack-readme.md`
`docs/reports/leo-working-state-20260709/working-leo-current-state-20260709.md`
`docs/reports/leo-working-state-20260709/working-leo-definition-20260709.md`
`docs/reports/leo-working-state-20260709/working-leo-execution-plan-current.md`
`scripts/apply_proposal.py`
`scripts/apply_worker.py`
`scripts/approve_proposal.py`
`scripts/kb_apply_prereqs.sql`
`scripts/kb_proposal_normalize.py`
`scripts/probe_gcp_db_parity.py`
`scripts/run_approve_claim_clone_canary.py`
`scripts/run_approve_claim_isolated_container_canary.sh`
`tests/test_apply_proposal.py`
`tests/test_apply_worker.py`
`tests/test_approve_proposal.py`
`tests/test_kb_apply_prereqs.py`
`tests/test_kb_proposal_normalize.py`
`tests/test_kb_proposal_routes.py`
`tests/test_probe_gcp_db_parity.py`
`tests/test_repo_skill_pack.py`
2026-07-10 17:49:37 +02:00

127 lines
5.5 KiB
JSON

{
"schema": "teleo.gcpCloudSqlLiveReadonly.v1",
"captured_at_utc": "2026-07-10T06:52:27Z",
"source_thread_id": "019f47af-f2cc-7c10-b928-a9283afa2621",
"current_canary": "Open the authenticated Teleo Cloud SQL instances page with authuser=5 and retain the complete sanitized current inventory plus instance routing metadata.",
"required_tier": "T3_live_readonly",
"current_tier": "T3_live_readonly",
"status": "done_verified",
"strongest_claim_allowed": "Project teleo-501523 currently exposes exactly one Cloud SQL instance in the authenticated Console: teleo-pgvector-standby. It is runnable/available, PostgreSQL 16.14 Enterprise, single-zone in europe-west6-c, and reachable only through private connectivity on teleo-staging-net. This does not prove database contents, schema parity, row counts, application connectivity, or production cutover.",
"capture": {
"surface": "authenticated Google Cloud Console DOM readback",
"account": "b***@livingip.xyz",
"project_id": "teleo-501523",
"project_display_name": "Teleo",
"list_url": "https://console.cloud.google.com/sql/instances?authuser=5&project=teleo-501523",
"overview_url": "https://console.cloud.google.com/sql/instances/teleo-pgvector-standby/overview?authuser=5&project=teleo-501523",
"cli_authentication_used": false,
"secret_values_captured": false
},
"inventory": {
"instance_count": 1,
"zero_instances": false,
"instances": [
{
"instance_id": "teleo-pgvector-standby",
"status_ui": "Available; Runnable",
"engine": "PostgreSQL",
"major_version": "16",
"database_version": "PostgreSQL 16.14",
"cloud_sql_edition": "Enterprise",
"instance_role": "Primary instance",
"region": "europe-west6",
"zone": "europe-west6-c",
"availability": "Single zone",
"high_availability": false,
"machine": {
"vcpus": 1,
"memory_mb_ui": 628.74
},
"storage": {
"type": "SSD",
"provisioned_gb": 10,
"used_gb_ui": 2,
"automatic_storage_increase": true
},
"connectivity": {
"connection_name": "teleo-501523:europe-west6:teleo-pgvector-standby",
"private_ip_connectivity": true,
"private_service_access": true,
"associated_network": "projects/teleo-501523/global/networks/teleo-staging-net",
"vpc_network": "teleo-staging-net",
"allocated_ip_range": "Automatically assigned IP range",
"internal_ip": "10.61.0.3",
"public_ip_connectivity": false,
"public_ip": null,
"default_tcp_port": 5432,
"write_endpoint": null
},
"database_authentication": {
"cloudsql_iam_authentication": true,
"application_or_operator_principal_verified": false
},
"resilience_and_backup": {
"automated_backups": true,
"backup_tier": "Standard",
"point_in_time_recovery": true,
"deletion_prevention": true,
"latest_visible_backup_status": "Backup finished",
"latest_visible_backup_date_local": "2026-07-10"
},
"recent_visible_operations_sanitized": [
"Backup finished on 2026-07-10",
"Backup finished on 2026-07-09",
"Two imports succeeded on 2026-07-08",
"Database creation completed on 2026-07-08"
],
"observed_health_issues": [
"Auditing not enabled",
"No password policy",
"No user password policy"
],
"labels": [],
"maintenance": {
"window": "Sunday 06:00-07:00 CEST",
"scheduled_now": false,
"version_current": true
}
}
]
},
"db_parity_route": {
"target_instance": "teleo-pgvector-standby",
"required_network_surface": "A runtime or connector with private reachability to teleo-staging-net",
"private_endpoint": "10.61.0.3:5432",
"cloud_sql_connection_name": "teleo-501523:europe-west6:teleo-pgvector-standby",
"public_route_available": false,
"iam_database_authentication_enabled": true,
"database_name_proven_by_this_pass": false,
"next_readonly_owner_action": "From a verified teleo-staging-net-connected runtime, authenticate with an authorized database principal and run read-only database/schema/count parity queries against this instance. Do not attempt a public-IP connection because public connectivity is disabled."
},
"not_proven": [
"database names",
"database contents or row counts",
"schema parity with the VPS database",
"successful application-level connection from teleo-prod-1",
"production traffic cutover",
"high availability or cross-zone failover"
],
"actions": [
"Opened the exact Cloud SQL instances URL in the authorized authuser=5 Chrome session",
"Read the complete live instance treegrid and verified one and only one instance row",
"Opened the instance Overview through read-only navigation",
"Read status, engine/version, region/zone, machine, storage, connectivity, backup, IAM-authentication, and maintenance metadata",
"Did not activate Edit, Connect, Restart, Stop, Import, Export, Migrate, Clone, Delete, or failover controls"
],
"cleanup_readback": {
"browser_tab_finalized": true,
"browser_tab_disposition": "agent-created evidence tab closed; no handoff tab kept",
"gcp_writes": 0,
"database_writes": 0,
"service_restarts": 0,
"deploys": 0,
"iam_changes": 0,
"credential_or_key_creation": 0,
"telegram_sends": 0
}
}