diff --git a/docs/session-ledger.md b/docs/session-ledger.md index 5a18fbb..ea7b369 100644 --- a/docs/session-ledger.md +++ b/docs/session-ledger.md @@ -265,6 +265,22 @@ hardened: fail-open guard now covers the transit-iface existence AND the WAN bridge/uplink enslavement. - Harness: `site-headend-install` 49->54; `wan-bridge` covered by opentofu-validate S3. Records: D-125, SEC-010, model-a-fallback B->A delta (item 8 + revert), platform-traps 1g. + - **D-125 COMMITTED `d34ec94` + PUSHED** (operator "commit", then "push"). Branch + `dc-dc-stage3-phase2-dc-substrate` now carries `114d392` (A+B) + `5175365` (C+D) + `d34ec94` (D-125) + on origin. + +- **Doc drift-reconciliation batch (post-Model-B/D-125), all doc-only, COMMITTED + PUSHED:** + - `8496c2e` -- `dc-dc-deployment-workflow.md` Stage-3 section reconciled to D-121..125 + Model B + two-root (Build/Gate/Owns/Authoring-status/rulings-summary); gap-register D-113(a2) OPEN->DONE. + - `87f9d75` -- `opentofu/README.md`: authoritative STATUS-RECONCILED banner (two roots, added + `site-wan`/`wan-bridge`, instantiation reality) + neutralized the DELETED, dangerous OPNsense + config.xml/config-ISO path (D-112/D-113(a2)). + - `788911c` -- `runbooks/dc-dc-teardown-rollback.md`: Model B two-root teardown banner (site-down = + one `virsh destroy vvr1-dc0`; inner-then-outer order; maas-vm-host targets inner virsh). + - Repo-wide drift scan confirmed the deleted-file / old-node-count references elsewhere are all + immutable CHANGELOGS, decision-record supersession context, or deliberate tombstones + (`opentofu/templates/README.md`) -- NOT live drift. Deeper prose in the three reconciled docs + + the Stage-4/5 sections still lag Model B (flagged in-banner as historical), not yet rewritten. - **Phase D NOT STARTED** -- SEC-010 rack `ip_forward=0` + firewall artifact + mechanical pre-apply gate. - **Phase E NOT STARTED** -- operator assigns rack transit/30 + rack IP in office1-netbox (apex token), fill tfvars -> `tofu plan` renders.