QUEUED FINDINGS -- 2026-08-05 session close (vault init + ovn-central resolved + D-142 QoL saved)
First-surface items logged, NOT actioned this session (hard rule 1). Status authority = CURRENT-STATE.md.
F1 [FIRST SURFACE / LIVE CONVERGENCE ITEM] ceph-mon/2 + ceph-radosgw/0 stuck `allocating`
("waiting for machine") post-redeploy. Cascade: ceph-mon cannot reach 3-peer quorum ->
ceph-osd x4 "Incomplete relation: monitor" -> glance + nova-compute x2 "Incomplete
storage-backend". Likely the 08-03 apt-cacher-ng / cloud-init wedge class (same shape that
wedged mysql-innodb-cluster/1 -> remediated as mysql/3). NOT vault/ovn-related; vault init
and the ovn-central cert cascade completed independently. TRIAGE: appendix-A apt-wedge
procedure (proxy check + container remove/re-add) after this close. Separate from Stage-5
completion gating only for OVN; ceph/storage-backend convergence is still owed.
F2 [FIRST SURFACE / TOOLING GAP] `/background` is unavailable over Remote Control -- an
operator `/background` directive (dispatch a status-check agent) failed to execute and had
to be handled inline. Recording as a first-surface tooling limitation of the multi-
workstation / Remote Control path (see auto-memory multi-workstation-remote-control). Not
deploy-blocking; note for the operator's workflow.
F3 [CAPTURED IN D-142, restated here for the sweep] R2 off-host transport for
`~/vault-init/init.txt` is UNDEFINED -- the file lives inside the ephemeral vault/0
container. Surfaced verbally at the 2026-08-05 hand-off; operator saved by hand. Blocks
building the R2 save-gate until the operator's actual off-host practice is known. Home:
D-142 + docs/audit/vault-init-qol-proposal-20260805.md.
SECURITY HYGIENE (not a finding, a note): the child token printed by `vault token create
-field=token` appeared in plaintext in the operator's otherwise-redacted paste. ttl=10m,
unset after use, long expired by paste time -> dead/benign, no rotation. Lesson recorded in
the as-exec: redact token-create output too. Never stored/echoed/committed.
