activities
4 minutes ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
f0289e6 D-137 ruling 4 EXECUTED: SEC-009 demoted to a pointer, policy moves to D-137
35 minutes ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
71e0551 D-137 ruling 1 EXECUTED: tier 1 wired as the blocking preflight P5
1 hour ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
35621eb D-137 phase 3: re-measure the register; SEC-024 opened
35a3cf2 D-137 phase 2: fix the eight confirmed false-greens, regression-lock each
17d5842 D-137 committee audit + phase 1: correct the record
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
6d43619 permissions: close the ssh 'virsh quoting gap (twin of the sudo gap)
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
1bbd588 D-137 tier 2: privileged sweep completed; permission gap fixed; 6 inferred filenames corrected
10 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
4ed0016 D-137 tier 2: wire --privileged escalation (run BLOCKED by the auto-mode classifier)
10 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
e37cc50 D-137 tier 2: live read-only sweep + two probe false-greens it exposed
492b1d6 D-137 tier 2 (EXISTENCE): declared-location bound, existence checks, widened globs
10 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
af1b682 D-137 tier 1 (STATIC): credential matrix, checker, harness -- RED by design
13 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
8e72ff1 audit: transcribe the full 55-row credential inventory in-repo (matrix seed)
13 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
ef2cdc4 D-137: repo-carried build spec for the fresh-session handoff
15 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
ec8fd85 D-137 sub-ruling 5 RULED + D-137 ADOPTED: implementation unblocked
15 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
db85531 D-137 sub-ruling 4 RULED (GA-R5): D-137 is the credential-lifecycle authority
16 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
aa67634 D-137 sub-ruling 3 RULED (GA-R5): remote discovery = declared locations only
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
df8fa21 D-137 sub-ruling 2 RULED (GA-R5): derive manifests from the matrix
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
a3a2d46 D-137 sub-ruling 1 RULED (GA-R5): enforcement = blocking in preflight
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
0eb2672 audit: credential creation-point inventory -- 12 declared secrets have NO mint command
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
a170f3d SEC-021/-022/-023: live credential defects found during D-137 matrix research
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
137b181 D-137 PROPOSED: credential mint-and-consolidate pipeline -- make consolidation structural [ARCH]
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
1155729 session-ledger: 2026-07-25 close bookend (SEC-020 MAAS admin recovery, 15 lines)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
b2b0c80 SEC-020: MAAS admin-account recovery -- consolidate `admin`, mint `operator`, creds-audit CLEAN x3
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
2ac3701 skill: stage-close sweep keeps the authoritative dir current + regenerates the Chat snapshot
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
4dcf898 settings: allowlist read-only whole-host budget calculator
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5c3e1a7 session-ledger: 2026-07-25 close block (GA-R4, 14 lines)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
87cec53 DOCFIX-203: mark D-134's superseded original band table in place
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
b362648 DOCFIX-202: demote buildout-scope section 5 to a D-111 pointer
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
531642b D-136 PROPOSED (NetBox-coupled render pipeline) + Ruling 3 + DOCFIX-201
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5365cb7 Ruling 2 recorded (GA-R5): keystone policy-override VERIFY-LIVE gate
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
53c3324 fix(lint): reword D-101 ruling-note header to clear L5 collision
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5cf15b3 Ruling 1 recorded (GA-R5): address-family policy (D-101 confirmed, no amendment)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
7b83b76 skill: consolidated openstack-cloud-ops snapshot for Chat/project upload
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
4ed29aa audit: full decision reconciliation record (IP/VLAN/node/decision-status)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
1f8db32 dc-mirror: note mirror.uoregon.edu as preferred upstream (future)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
bc9a2df netbox: office1-record dumper (source separation) + current apex snapshot
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
e898c3b vr1-dc1 bundle render (9-node role-separated) + expansion review record
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
c3970a9 provider-bundle-check: overlay merge + per-DC VIP bands + placement invariants
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
72cad5f Stage-5 dc1: committee review + Fork-1 ruling (D-104 amendment) + BUNDLEFIX-052
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
1b80a56 Session bookend 2026-07-24: DC1 proxy-build started, BLOCKED on bundle rework
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
116e9b2 Juju client setup on voffice1: vr1-maas cloud + both DC credentials
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
2e9ec25 dc1 VIP overlay drafted (overlays/vr1-dc1-vips.yaml)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
e498897 Per-DC MAAS service credentials created (SEC-018/-019)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
2f1fc42 phase-4 runbook: per-DC MAAS service-credential step (Step 2.0)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
83d9e6c DC1 cache proxy INSTALLED + verified (check PASS 8/8)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
f3f9542 D-135 amendment: DC1 interim apt caching proxy (dc-cache-proxy.sh)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
d0db020 caveman: disable on live host + SEC-017 + fail-closed compress guardrails
338c919 caveman plugin: off-by-default opt-in guard (repo + user CAVEMAN_DEFAULT_MODE=off)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
e2de501 Session bookend: Stage 4 open+carve+mirrors session CLOSED (ledger summary)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5399e9d Delivery batch: lib-hosts VR1 arms, D-133 guards, appendix-A pf entry, DoD 8-9 (gauntlet 77 GREEN)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
5643699 Mirrors installed both racks, syncs RUNNING; dc1 edge pf incident resolved; HOME fix (harness 19)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
a710350 dc-mirror.sh shipped (D-135 item 1): per-DC apt+UCA mirror, harness 18/18, gauntlet 77 ALL GREEN
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage4-phase3-maas-deploy at OpenStack/openstack-caracal-dc-dc
75593a4 L10 repair: CURRENT-STATE owed by the D-135 commit + owned lint-mask defect (item 8)