Preserve the private database endpoint and publish live deployment receipts #8

Merged

PlasticDigits merged 5 commits from ops/portal-runtime-receipts into main

2026-10-31 03:37:42 +00:00

PlasticDigits commented

2026-10-31 03:34:20 +00:00

Owner

The shared Coolify proxy network contains an unrelated postgres alias, so the API needs this deployment's unique private database hostname. Preserve the independently reviewed host-only runtime hook on every release, with the same protected password, project/volumes and trust settings. The release helper reuses a tested immutable image, verifies command readback and the platform's command-length limit, and fails if the pinned hook download fails.

Publishes sanitized exact-image storage and live receipts: workload e44569e45b15dbee4b0347dff742f92bd85bedb2, immutable manifest sha256:07b476118ac7ca8a8af9653471026d02c0e615ace174231bd50aea06392b607e, separately pinned ops hook b8aa303154b25d3017816c258b0daeb8954b7b26, migrations 1–5, 13 storage/restore assertions and 16 live owned-wallet checks. Current workload/image are unchanged. Helper syntax/help and worst-case command length checked; independent source/live review is recorded.

Issue #4 stays open: off-host encrypted backup and key-recovery proof remain agent-owned continuation. Provider enrollment/delivery and verified contract deployments remain gated and owned separately. No real-recipient messages or chain transactions were sent.

The shared Coolify proxy network contains an unrelated `postgres` alias, so the API needs this deployment's unique private database hostname. Preserve the independently reviewed host-only runtime hook on every release, with the same protected password, project/volumes and trust settings. The release helper reuses a tested immutable image, verifies command readback and the platform's command-length limit, and fails if the pinned hook download fails. Publishes sanitized exact-image storage and live receipts: workload `e44569e45b15dbee4b0347dff742f92bd85bedb2`, immutable manifest `sha256:07b476118ac7ca8a8af9653471026d02c0e615ace174231bd50aea06392b607e`, separately pinned ops hook `b8aa303154b25d3017816c258b0daeb8954b7b26`, migrations 1–5, 13 storage/restore assertions and 16 live owned-wallet checks. Current workload/image are unchanged. Helper syntax/help and worst-case command length checked; independent source/live review is recorded. Issue #4 stays open: off-host encrypted backup and key-recovery proof remain agent-owned continuation. Provider enrollment/delivery and verified contract deployments remain gated and owned separately. No real-recipient messages or chain transactions were sent.

PlasticDigits added 5 commits

2026-10-31 03:34:20 +00:00

Provide reviewed unique database hostname runtime overlay 46252890bb

Preserve reviewed runtime hostname repair and tested manifest reuse 03e41faa80

Record final image migration and owned storage restore evidence d3554e7d38

Record independently verified live portal deployment evidence a8ee5c54c3

Fail a release hook pipeline when its pinned download fails 04e75cfcb5

PlasticDigits merged commit b17f19e768 into main

2026-10-31 03:37:42 +00:00

PlasticDigits referenced this pull request

2026-10-31 03:40:23 +00:00

Rust/PostgreSQL wallet security service: signed identity, delayed assignments and chain reconciliation #1