Deploy schema-six email runtime with verified owned delivery and recovery #19

Merged

PlasticDigits merged 9 commits from ops/provider-runtime-release into main 2026-11-01 03:17:09 +00:00

Conversation 1 Commits 9 Files changed 3 +194

PlasticDigits commented 2026-11-01 01:45:54 +00:00

Owner

• Copy link
• Copy Markdown

Deploy the independently reviewed schema6 mail runtime while preserving the exact existing database volume and fencing old delivery workers. Coolify may remove old services before the custom hook; successful empty inventories are accepted, while failed or ambiguous inventories and foreign volumes are rejected. SMTP credentials reach only the isolated worker. Owned sandbox and production modes are explicit.

Actual evidence: image4fbe039 manifestff9dc660/config296ada1e passed13 exact-image storage assertions; schema6 production job2m1j26wruzlryqvry8heju3j finished with runtime boundary checks. All3 owned notices passed; fresh schema6 encrypted offhost restore preserved their transport/first-attempt metadata and timers. Public receipt is deploy/receipts/2026-11-01-mail-runtime-4fbe039.json. Source and actual evidence independently reviewed.

Telegram credentials and on-chain security activation (0/35) remain separate. Reboot-safe operator connectivity is unverified; backup schedule enrollment has its own receipt and host/VPN assumptions. References: issues1–4; these acceptance details remain tracked there.

Deploy the independently reviewed schema6 mail runtime while preserving the exact existing database volume and fencing old delivery workers. Coolify may remove old services before the custom hook; successful empty inventories are accepted, while failed or ambiguous inventories and foreign volumes are rejected. SMTP credentials reach only the isolated worker. Owned sandbox and production modes are explicit. Actual evidence: image4fbe039 manifestff9dc660/config296ada1e passed13 exact-image storage assertions; schema6 production job2m1j26wruzlryqvry8heju3j finished with runtime boundary checks. All3 owned notices passed; fresh schema6 encrypted offhost restore preserved their transport/first-attempt metadata and timers. Public receipt is deploy/receipts/2026-11-01-mail-runtime-4fbe039.json. Source and actual evidence independently reviewed. Telegram credentials and on-chain security activation (0/35) remain separate. Reboot-safe operator connectivity is unverified; backup schedule enrollment has its own receipt and host/VPN assumptions. References: issues1–4; these acceptance details remain tracked there.

PlasticDigits added 4 commits 2026-11-01 01:45:55 +00:00

Stage reviewed schema-six mail runtime with fenced legacy workers 40325ab70c

Make explicit staged and owned-sandbox modes safe to repeat fca87750aa

Bind Compose to checked artifact and proven gateway identity fc4347892d

Pin owned smoke recipient and verify runtime credential isolation d505798cd8

PlasticDigits added 1 commit 2026-11-01 01:49:04 +00:00

Verify upgraded worker resolves only the fixed internal gateway e99ac5597e

PlasticDigits added 2 commits 2026-11-01 02:02:06 +00:00

Preserve owned volume when Coolify has fenced and removed old services 44954008af

Fail closed on inventory errors and report exact recovery stage 5c6e750676

PlasticDigits added 1 commit 2026-11-01 02:49:27 +00:00

Record verified production mail runtime and schema-six offhost recovery 8a83d06d87

PlasticDigits added 1 commit 2026-11-01 03:14:15 +00:00

Integrate reviewed backup and notification evidence with runtime notes ebafb610a7

PlasticDigits changed title from WIP: stage schema-six mail runtime with a fixed owned canary to Deploy schema-six email runtime with verified delivery and recovery 2026-11-01 03:14:57 +00:00

PlasticDigits changed title from Deploy schema-six email runtime with verified delivery and recovery to Deploy schema-six email runtime with verified owned delivery and recovery 2026-11-01 03:17:06 +00:00

PlasticDigits commented 2026-11-01 03:17:07 +00:00

Author

Owner

• Copy link
• Copy Markdown

Parent integration verified exact reviewed head ebafb610a71aa8ce4f8d424e7d68447263599266 and independently accepted scoped actual evidence. No additional tests or sends were run for integration; full acceptance remains separately tracked for Telegram, chain activation and operator reboot availability. Source merge preserves the pinned live application image4fbe039.

Parent integration verified exact reviewed head `ebafb610a71aa8ce4f8d424e7d68447263599266` and independently accepted scoped actual evidence. No additional tests or sends were run for integration; full acceptance remains separately tracked for Telegram, chain activation and operator reboot availability. Source merge preserves the pinned live application image4fbe039.

PlasticDigits merged commit f177b3c1b3 into main 2026-11-01 03:17:09 +00:00

PlasticDigits referenced this pull request from a commit 2026-11-01 03:17:09 +00:00

Merge pull request 'Deploy schema-six email runtime with verified owned delivery and recovery' (#19) from ops/provider-runtime-release into main

PlasticDigits referenced this pull request from code/cw20-mintable 2026-11-01 03:20:50 +00:00

Security upgrade: incident-driven CW20 protections and wallet security portal #3

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

code/cl8y-wallet-security!19

No description provided.