openstack-caracal-dc-dc / docs / audit /
..
commissioning-committee-20260720.md Session close 2026-07-21: commissioning RESOLVED 9/9 Ready; D-131 proposed; SEC-014 opened 6 days ago
commissioning-diag-20260721.txt Session close 2026-07-21: commissioning RESOLVED 9/9 Ready; D-131 proposed; SEC-014 opened 6 days ago
committee-20260724-track2-bundle-render.md Stage-5 dc1: committee review + Fork-1 ruling (D-104 amendment) + BUNDLEFIX-052 2 days ago
creds-consolidation-audit-20260727.txt creds consolidation batch: SEC-021(b) dc0 power key, SEC-025 NetBox GUI, V2 ruled deferral 12 hours ago
creds-creation-points-20260725.md audit: transcribe the full 55-row credential inventory in-repo (matrix seed) 1 day ago
d125-egress-gate-20260720-matrix.txt D-125 egress isolation gate: PASS / CLOSED -- bridge-in proven end to end (2 identical runs) 7 days ago
d125-egress-gate-20260720.txt D-125 egress gate executed (throwaway VM, as ruled): bridge-in PROVEN, upstream NAT egress fails -- gate OPEN pending one sudo measurement 7 days ago
d125-egress-gate-20260722-dc1.txt G12 dc1: D-125 egress gate PASS (two identical runs, isolation confirmed) 4 days ago
d129-plugins-20260720.txt D-129 edge profile APPLIED on 26.7: qga channel shipped, plugins installed, agent ANSWERS guest-ping 7 days ago
d131-sub3-dhcpd-option6-20260721.txt D-131 sub-3 RESOLVED (no dhcpd option-6 defect); pin DNS arch review; file D-132 (Roosevelt MAAS topology) 5 days ago
d137-location-listing-20260726.txt D-137 committee audit + phase 1: correct the record 1 day ago
d137-tier2-postcommittee-20260726.txt D-137 phase 3: re-measure the register; SEC-024 opened 1 day ago
d137-tier2-privileged-20260726.txt D-137 tier 2: privileged sweep completed; permission gap fixed; 6 inferred filenames corrected 1 day ago
d137-tier2-sweep-20260726.txt D-137 tier 2: live read-only sweep + two probe false-greens it exposed 1 day ago
d137-tier3-probe-20260726.txt D-137 tier 3 behavioural half: V2 declared-state + creds-probe.sh 21 hours ago
d137-tier3-provenance-20260726.txt D-137 tier 3 (VALIDITY) BUILT: cross-copy sha256 provenance 1 day ago
dc-rack-net-install-20260721.txt dc-rack-net installed on the rack: EXIT 0, check 10/10, SOA probe answers 6 days ago
dc1-apex-confirm-20260721.txt G12 dc1: apex confirm-free captured; dc-rack-mgmt-import gains per-site (--site) dc1 support 5 days ago
dc1-commissioning-verify-20260723.txt G12 dc1: SEC-016 power key wired + commissioning 9/9 READY -- [V] leg complete 4 days ago
dc1-mirror-teardown-20260727.txt dc1 full mirror REMOVED (D-135 amendment); dc-cache-proxy.sh now owns its net layer 11 hours ago
dc1-rack-import-commit-20260722.txt G12 dc1: apex --commit executed + substrate step A applied (5/0/0 exact, converged) 5 days ago
dc1-rack-import-dryrun-20260721.txt G12 dc1: apex confirm-free captured; dc-rack-mgmt-import gains per-site (--site) dc1 support 5 days ago
dc1-rack-import-dryrun-20260722.txt G12 dc1: apex --commit executed + substrate step A applied (5/0/0 exact, converged) 5 days ago
dc1-rack-net-install-20260723.txt G12 dc1: rack-net install + region MAAS config + SEC-016 power-key ruling 4 days ago
dc1-stepB-check-20260722-final.txt G12 dc1 step B COMPLETE: transit live, rack enrolled, SEC-010 both ends, 26.7 staged 4 days ago
dc1-stepB-check-20260722.txt G12 dc1 step B COMPLETE: transit live, rack enrolled, SEC-010 both ends, 26.7 staged 4 days ago
decision-recon-20260725.md D-136 PROPOSED (NetBox-coupled render pipeline) + Ruling 3 + DOCFIX-201 2 days ago
env-snapshot-20260718.md GA-F15: ledger-scan counter self-inflation by audit outputs -- found, reworded, re-verified 9 days ago
g13-close-20260723.txt G13 CLOSED: office1 edge bundle -- qga channel live, 26.7.1, os-iperf in (operator-approved) 4 days ago
ga-rulings.md Vocabulary RATIFIED: Option A + H1 (utterance quoted) -- PHASE 4 COMPLETE; G2 CLOSED 9 days ago
gauntlet-20260722-g12-dropstate.txt Session bookend (successor-landed): G12 dc1-authoring session disconnected mid-item-3 5 days ago
gauntlet-20260722-g12-reconcile.txt G12 dc1: item-3 substrate landed + harness reconcile (gauntlet 76 ALL GREEN) 5 days ago
gauntlet-20260723-stage4-dcmirror.txt dc-mirror.sh shipped (D-135 item 1): per-DC apt+UCA mirror, harness 18/18, gauntlet 77 ALL GREEN 3 days ago
grounding-audit-20260718.md Batch 3 CLOSE: memory hygiene (GA-F05..F08 memory surfaces) + G1 review; GA-F16 registered 8 days ago
grounding-audit-charter.md GA: grounding-audit charter + proposed skill additions (freeze in effect; audit session charter) 9 days ago
h1-token-map-20260719.md GA-F10/H1 + GA-R1/R6: token migration, State-line demotions, E1 type tags (2.5+2.6) 8 days ago
incident-20260721-pod-delete-cascade.txt Ruling 1: vr1-dc0-maas RETIRED (repo removed); INCIDENT: pod delete cascaded to 9 machine records 6 days ago
incident-20260721-recovery-verify.txt Recovery COMPLETE: 9/9 Ready again (shapes exact, power=virsh); retire-fully fully executed; SEC-013 narrowed 6 days ago
inner-apply-20260720-stepC-run2.txt Deploy step C COMPLETE: inner apply 28/28 from voffice1, converged zero diff; 9 nodes + 26.7 edge RUNNING at depth-4; three first-real-apply fixes 7 days ago
inner-apply-20260720-stepC-run3.txt Deploy step C COMPLETE: inner apply 28/28 from voffice1, converged zero diff; 9 nodes + 26.7 edge RUNNING at depth-4; three first-real-apply fixes 7 days ago
inner-apply-20260720-stepC-run4.txt Deploy step C COMPLETE: inner apply 28/28 from voffice1, converged zero diff; 9 nodes + 26.7 edge RUNNING at depth-4; three first-real-apply fixes 7 days ago
inner-apply-20260720-stepC.txt Deploy step C COMPLETE: inner apply 28/28 from voffice1, converged zero diff; 9 nodes + 26.7 edge RUNNING at depth-4; three first-real-apply fixes 7 days ago
inner-apply-20260721-macpin.txt MAC-pin apply executed on voffice1: exact 0/9/0, convergence zero diff 6 days ago
inner-converge-20260720-stepC.txt Deploy step C COMPLETE: inner apply 28/28 from voffice1, converged zero diff; 9 nodes + 26.7 edge RUNNING at depth-4; three first-real-apply fixes 7 days ago
inner-converge-20260722-dc1-stepC.txt G12 dc1 step C COMPLETE: 28/28 inner resources, 10/10 domains running 4 days ago
inner-plan-20260720-stepC.txt Deploy step C COMPLETE: inner apply 28/28 from voffice1, converged zero diff; 9 nodes + 26.7 edge RUNNING at depth-4; three first-real-apply fixes 7 days ago
inner-plan-20260721-macpin-guarded.txt MAC-pin apply executed on voffice1: exact 0/9/0, convergence zero diff 6 days ago
inner-plan-20260721-macpin.txt node-vm: MAAS owns node power -- ignore_changes on running (operator-ruled) 6 days ago
inner-plan-20260722-dc1-stepC.txt G12 dc1 step C COMPLETE: 28/28 inner resources, 10/10 domains running 4 days ago
lp-draft-20260721-maas-agent-resolver.md Incident docs: 2 appendix-A entries, platform-traps MAC-regen corollary, LP draft 6 days ago
maas-admin-recovery-20260725.txt SEC-020: MAAS admin-account recovery -- consolidate `admin`, mint `operator`, creds-audit CLEAN x3 2 days ago
mtu-budget-20260727.txt R3 RULED: finish the jumbo underlay; first recorded MTU budget verdict 4 hours ago
netem-sudo-install-20260721.txt Disconnect collapse: predecessor bookend landed; netem-tc install VERIFIED (step E unblocked) 6 days ago
octavia-ipv6-research-20260727.md R8 RULED: Octavia creates and owns its own IPv6 network (D-101 note; sub-ruling closed) 2 hours ago
operating-model-plan-20260725.md Chat session 2 days ago
outer-apply-20260719-voffice1-transit.txt Step B transit reach ESTABLISHED: voffice1 .1/30 applied (Kea re-key incident fixed); vvr1-dc0 netplan set-name root cause fixed; zero-diff converged 7 days ago
outer-apply-20260719-vvr1dc0-netplan-fix.txt Step B transit reach ESTABLISHED: voffice1 .1/30 applied (Kea re-key incident fixed); vvr1-dc0 netplan set-name root cause fixed; zero-diff converged 7 days ago
outer-apply-20260721-netem.txt Step E netem DONE -- G10 CLOSED; netem-link local mode; G16 opened (office1 channels residual) 6 days ago
outer-plan-20260718.txt GA Phase 1: deterministic record inventory + measured evidence (freeze upheld) 9 days ago
outer-plan-20260719-baseline.txt D-130 ADOPTED (a) + implemented: seed-volume ignore_changes guard (GA-F01, G4+G5 CLOSED) 8 days ago
outer-plan-20260719-phase6-exit.txt Batch 6: exit runs 1/2/4/5 -- archive exclusion (operator-ruled), adjudication, plan==triple, S2 8 days ago
outer-plan-20260719-postA-converged.txt DC0 deploy STEP A EXECUTED: outer apply 6/0/6 exact; G8+G9 CLOSED; convergence zero 8 days ago
outer-plan-20260719-postG6.txt G6 reconcile EXECUTED (state surgery, operator-ruled) + G7 triple 6/0/6 recorded 8 days ago
outer-plan-20260719-preapply.txt DC0 deploy STEP A EXECUTED: outer apply 6/0/6 exact; G8+G9 CLOSED; convergence zero 8 days ago
outer-plan-20260719-v8-ignorechanges.txt D-130 ADOPTED (a) + implemented: seed-volume ignore_changes guard (GA-F01, G4+G5 CLOSED) 8 days ago
outer-plan-20260719-voffice1-transit.txt Step B prereq: voffice1 transit NIC authored (172.31.0.1/30 region end, D-124); ruling recorded; expected plan 1/1/1 7 days ago
outer-plan-20260719-vvr1dc0-netplan-fix.txt Step B transit reach ESTABLISHED: voffice1 .1/30 applied (Kea re-key incident fixed); vvr1-dc0 netplan set-name root cause fixed; zero-diff converged 7 days ago
outer-plan-20260720-postfix-converged.txt Step B transit reach ESTABLISHED: voffice1 .1/30 applied (Kea re-key incident fixed); vvr1-dc0 netplan set-name root cause fixed; zero-diff converged 7 days ago
outer-plan-20260721-netem-targeted.txt Step E netem DONE -- G10 CLOSED; netem-link local mode; G16 opened (office1 channels residual) 6 days ago
outer-plan-20260721-netem-wire.txt Step E netem DONE -- G10 CLOSED; netem-link local mode; G16 opened (office1 channels residual) 6 days ago
outer-plan-20260721-postE-residual.txt Step E netem DONE -- G10 CLOSED; netem-link local mode; G16 opened (office1 channels residual) 6 days ago
outer-plan-20260721-postG16-converged.txt G16 CLOSED: office1 channels residual reconciled by operator-ruled state surgery; outer plan ZERO DIFF 6 days ago
outer-plan-20260722-dc1-substrate.txt G12 dc1: apex --commit executed + substrate step A applied (5/0/0 exact, converged) 5 days ago
outer-plan-20260722-postdc1-converged.txt G12 dc1: apex --commit executed + substrate step A applied (5/0/0 exact, converged) 5 days ago
outer-plan-20260722-voffice1-dc1nic.txt G12 dc1 step B COMPLETE: transit live, rack enrolled, SEC-010 both ends, 26.7 staged 4 days ago
outer-plan-20260723-office1-qga.txt G13 CLOSED: office1 edge bundle -- qga channel live, 26.7.1, os-iperf in (operator-approved) 4 days ago
outer-plan-20260723-postqga-converged.txt G13 CLOSED: office1 edge bundle -- qga channel live, 26.7.1, os-iperf in (operator-approved) 4 days ago
outer-plan-20260727-stage5-audit.txt Stage-5 grounding audit: live measurement sweep + first five lens returns 9 hours ago
phase3-grounding-test-20260718.md GA Phase 3: grounding test PASSED -- 3 probes, 21/21; scorecard + line-neutral amendments 9 days ago
phase5-sweep-plan.md Sweep plan AMENDED per external review (S1-S5, single commit); G3 row updated 9 days ago
phase6-exit-runs-20260719.md AUDIT EXIT: operator re-signed CURRENT-STATE; G3+G11 CLOSED, G9 OPEN; session close (GA-R4) 8 days ago
preflight-20260727-stage5-audit.txt Stage-5 grounding audit: live measurement sweep + first five lens returns 9 hours ago
queued-findings-20260726.txt close-out sweep: capture what existed only in the session transcript 14 hours ago
queued-findings-20260727.txt close-out durability sweep: 4 transcript-only items landed; dc1-is-not-a-mirror warning 9 hours ago
queued-rulings-20260727.md R7 RULED: per-DC independent Octavia PKI (D-109 amendment) 3 hours ago
r6-r15-measurements-20260727.txt Pre-ruling measurements for R6-R15: measure before asking, all ten 4 hours ago
record-inventory.md GA Phase 1: deterministic record inventory + measured evidence (freeze upheld) 9 days ago
sec010-reassert-20260723.txt SEC-010 live re-assert: idempotent nft file on voffice1 + both DC racks (operator-approved) 4 days ago
skill-additions-proposed.md GA: grounding-audit charter + proposed skill additions (freeze in effect; audit session charter) 9 days ago
skill-divergence-20260725.md Chat session 2 days ago
skill-sweep-checklist-20260719.md Batch 5: skill sweep -- GA-R1..R7 implemented in openstack-cloud-ops (single commit) 8 days ago
sprygit-requirements-inputs-20260725.md Chat session 2 days ago
stage4-carve-residue-cleanup-20260727.txt Stage 4 cleanup: carve residue 108 fabrics -> 17; dc1 leftover nginx purged 10 hours ago
stage4-carve-verify-20260723.txt Stage 4 carve EXECUTED both DCs: D-133 flat statics + D-134 bands live in MAAS 4 days ago
stage4-discovery-20260723.txt Stage 4 OPEN + D-133 ADOPTED: flat per-NIC carve (VR1), hw-faithful NICs next deployment 4 days ago
stage4-mirror-gate-20260727.txt close-out durability sweep: 4 transcript-only items landed; dc1-is-not-a-mirror warning 9 hours ago
stage5-committee-raw-20260727.md Stage-5 grounding audit: lens 5 + the three deliverables 6 hours ago
stage5-controller-capacity-20260724.txt Stage-5 dc1: committee review + Fork-1 ruling (D-104 amendment) + BUNDLEFIX-052 2 days ago
stage5-creds-privileged-20260727.txt Stage-5 grounding audit: lens 4 (gate integrity) + privileged creds re-run 8 hours ago
stage5-expansion-review-20260724.md D-136 PROPOSED (NetBox-coupled render pipeline) + Ruling 3 + DOCFIX-201 2 days ago
stage5-grounding-audit-scope-20260727.md Stage-5 grounding audit: land the scope charter before spawning any agent 9 hours ago
stage5-live-measurement-20260727.txt Stage-5 grounding audit: lens 4 (gate integrity) + privileged creds re-run 8 hours ago
stage5-readiness-20260727.md Stage-5 grounding audit: post-review corrections + dc1 egress MEASURED 6 hours ago
stage5-unmeasured-register-20260727.md Second gap sweep: U15-U17 closed; DC data path has no IPv6 at ANY layer 5 hours ago
stepB-bootstrap-20260720-run2.txt Deploy step B COMPLETE: rack bootstrapped + enrolled, SEC-010 CLOSED both ends (operator-ruled), OPNsense 26.7 base staged (operator-ruled); ledger-scan fail-open hardening 7 days ago
stepB-bootstrap-20260720.txt Deploy step B COMPLETE: rack bootstrapped + enrolled, SEC-010 CLOSED both ends (operator-ruled), OPNsense 26.7 base staged (operator-ruled); ledger-scan fail-open hardening 7 days ago
stepB-check-20260720-final.txt Deploy step B COMPLETE: rack bootstrapped + enrolled, SEC-010 CLOSED both ends (operator-ruled), OPNsense 26.7 base staged (operator-ruled); ledger-scan fail-open hardening 7 days ago
stepB-check-20260720.txt Deploy step B COMPLETE: rack bootstrapped + enrolled, SEC-010 CLOSED both ends (operator-ruled), OPNsense 26.7 base staged (operator-ruled); ledger-scan fail-open hardening 7 days ago
stepB-opnsense-prep-20260720.txt Deploy step B COMPLETE: rack bootstrapped + enrolled, SEC-010 CLOSED both ends (operator-ruled), OPNsense 26.7 base staged (operator-ruled); ledger-scan fail-open hardening 7 days ago
stepD-enlistment-20260720.txt INCIDENT RESOLVED + G10 depth-4 boot gate PASS: all 9 DC0 nodes enlisted in MAAS 7 days ago
stepD-power-20260720.txt STEP D COMPLETE: per-machine power tooling shipped; commissioning works, nodes reaching Ready 7 days ago
stepD-vmhost-20260720.txt Pod path chased to root cause: MAAS virsh pods incompatible with node-vm volume-ref disks; per-machine power PROVEN working 7 days ago
stepE-netem-20260721.txt Step E netem DONE -- G10 CLOSED; netem-link local mode; G16 opened (office1 channels residual) 6 days ago
throwaway-v7-20260719.txt D-130 ADOPTED (a) + implemented: seed-volume ignore_changes guard (GA-F01, G4+G5 CLOSED) 8 days ago