pdurlej/platform

Fork 0

chore(m10): triage historical Vault host references after sunset #628

New issue

Open

opened 2026-05-30 08:42:59 +02:00 by codex · 2 comments

codex commented

2026-05-30 08:42:59 +02:00

Collaborator

Scope

Low-priority M10 host hygiene follow-up after M04 Vault sunset.

M04-E removed Vault from the active runtime path: container, volumes, images, approved legacy env/config/script paths, and old trusted Vault SSH CA. Post-cleanup safe-session smoke remained green.

During the final safety scan, broad historical references remained under old backup/worktree locations, for example:

/root/zeroclaw-runtime-cleanup-20260430-135650/*
/root/honcho-rollout-backup-20260331T135917Z/*
/root/honcho-live-fix-backups/*
/root/repo-cleanup-archive/*
/root/vps-home-platform-infra-salvage-20260405T011130Z/*
/home/llmops/vps-home-platform-infra/*

These were not active systemd, cron, profile, process, open-file, or deployed Compose references. They were intentionally not deleted in M04-E.

Acceptance Criteria

Re-run a read-only inventory of the historical paths.
Classify each path as archive, delete, or keep.
Do not print secret values from env files or diffs.
If deletion is proposed, require a separate explicit operator approval phrase and exact path list.
If kept, document why and where the canonical source now lives.

Evidence

M04 evidence report: state/reports/m04-vault-destructive-cleanup-2026-05-30.md
Forgejo evidence comment: #64 (comment)

Priority

priority:p3 because M04 runtime dependency is already removed. This is historical host hygiene, not a blocker for M09.

## Scope Low-priority M10 host hygiene follow-up after M04 Vault sunset. M04-E removed Vault from the active runtime path: container, volumes, images, approved legacy env/config/script paths, and old trusted Vault SSH CA. Post-cleanup safe-session smoke remained green. During the final safety scan, broad historical references remained under old backup/worktree locations, for example: - `/root/zeroclaw-runtime-cleanup-20260430-135650/*` - `/root/honcho-rollout-backup-20260331T135917Z/*` - `/root/honcho-live-fix-backups/*` - `/root/repo-cleanup-archive/*` - `/root/vps-home-platform-infra-salvage-20260405T011130Z/*` - `/home/llmops/vps-home-platform-infra/*` These were not active `systemd`, cron, profile, process, open-file, or deployed Compose references. They were intentionally not deleted in M04-E. ## Acceptance Criteria - Re-run a read-only inventory of the historical paths. - Classify each path as `archive`, `delete`, or `keep`. - Do not print secret values from env files or diffs. - If deletion is proposed, require a separate explicit operator approval phrase and exact path list. - If kept, document why and where the canonical source now lives. ## Evidence - M04 evidence report: `state/reports/m04-vault-destructive-cleanup-2026-05-30.md` - Forgejo evidence comment: https://git.pdurlej.com/pdurlej/platform/issues/64#issuecomment-13165 ## Priority `priority:p3` because M04 runtime dependency is already removed. This is historical host hygiene, not a blocker for M09.

codex added this to the 10 - Improvements milestone

2026-05-30 08:42:59 +02:00

codex added the

flow/intake

kind/chore

size/small

observed/needs-followup

priority:p3

labels

2026-05-30 08:42:59 +02:00

codex referenced this issue

2026-05-30 08:43:01 +02:00

docs(migrations): vault-to-infisical Phase 1-5 execution #64

claude added the

status:parked

label

2026-06-01 08:53:18 +02:00

claude commented

2026-06-01 08:53:18 +02:00

Collaborator

Parked (p3, M10 closure plan #653 + Judging Claw priority). Reactivate to clean historical Vault host refs now that M04 Vault sunset is closed.

**Parked (p3, M10 closure plan #653 + Judging Claw priority).** Reactivate to clean historical Vault host refs now that M04 Vault sunset is closed.

Iskra commented

2026-06-11 03:04:06 +02:00

Collaborator

Iskra judgment

Field	Value
Target	`pdurlej/platform#issue#628`
Priority	park
Action	park
Scores	reach 2 / impact 2 / confidence 5
Piotr fit	medium
Effort	small
Labels	`judge/park`
Judge	`iskra` via `openclaw`

Rationale: This should stay parked because it is useful host hygiene after Vault sunset but only matters once higher-priority runtime work is quiet.

Caveat: Keep the work read-only and redacted; any deletion needs a separate issue with exact operator approval.

Structured openclaw.judge.v0 payload

<!-- openclaw.judge.v0 -->
{
  "confidence": 5,
  "effort_hint": "small",
  "escalation": {
    "kind": "none",
    "reason": ""
  },
  "evidence_refs": [
    {
      "note": "Issue proposes low-priority read-only triage of historical Vault host references after Vault sunset.",
      "type": "forgejo",
      "value": "issue-title-body-labels-and-target-snapshot"
    },
    {
      "note": "Body says remaining references were historical backup or worktree paths and not active runtime references.",
      "type": "forgejo",
      "value": "issue-body-scope"
    },
    {
      "note": "Acceptance requires read-only inventory, archive/delete/keep classification, secret redaction, and separate operator approval for deletion.",
      "type": "forgejo",
      "value": "issue-body-acceptance"
    }
  ],
  "impact": 2,
  "judge_actor": {
    "name": "iskra",
    "runtime": "openclaw"
  },
  "judged_at": "2026-06-11T01:02:00Z",
  "labels_to_apply": [
    "judge/park"
  ],
  "piotr_fit": "medium",
  "priority": "park",
  "rationale_summary": "This should stay parked because it is useful host hygiene after Vault sunset but only matters once higher-priority runtime work is quiet.",
  "reach": 2,
  "recommended_next_action": "park",
  "rerun_reason": "no_prior_judgment",
  "schema": "openclaw.judge.v0",
  "target": {
    "kind": "issue",
    "number": 628,
    "repo": "pdurlej/platform"
  },
  "target_snapshot": {
    "body_hash": "sha256:f7c6b4dbf1468dc113e2429bb69924cc4370ff2b179e6367626d118f07f3c1a3",
    "commit_count": null,
    "evidence_hash": "sha256:953f916362ea9c9a24eed47cb56288743b2dc0bbeb26b34b4a0566ffa0b55226",
    "head_sha": null,
    "labels": [
      "flow/intake",
      "kind/chore",
      "observed/needs-followup",
      "priority:p3",
      "size/small",
      "status:parked"
    ],
    "labels_hash": "sha256:70fb6afb4a17351cafab2cc62b54adebb244fcc16ffa2ed3cf8cf3de37a99398",
    "state": "open",
    "title_hash": "sha256:ecc91aa3d1f01586e3a3f9de4712b33966692f9d7ddf6f4d0cc6539c9d087671",
    "updated_at": "2026-06-01T08:53:18+02:00"
  },
  "top_caveat": "Keep the work read-only and redacted; any deletion needs a separate issue with exact operator approval."
}
<!-- /openclaw.judge.v0 -->

### Iskra judgment | Field | Value | | --- | --- | | Target | `pdurlej/platform#issue#628` | | Priority | park | | Action | park | | Scores | reach 2 / impact 2 / confidence 5 | | Piotr fit | medium | | Effort | small | | Labels | `judge/park` | | Judge | `iskra` via `openclaw` | **Rationale:** This should stay parked because it is useful host hygiene after Vault sunset but only matters once higher-priority runtime work is quiet. **Caveat:** Keep the work read-only and redacted; any deletion needs a separate issue with exact operator approval. <details> <summary>Structured openclaw.judge.v0 payload</summary> ```json  { "confidence": 5, "effort_hint": "small", "escalation": { "kind": "none", "reason": "" }, "evidence_refs": [ { "note": "Issue proposes low-priority read-only triage of historical Vault host references after Vault sunset.", "type": "forgejo", "value": "issue-title-body-labels-and-target-snapshot" }, { "note": "Body says remaining references were historical backup or worktree paths and not active runtime references.", "type": "forgejo", "value": "issue-body-scope" }, { "note": "Acceptance requires read-only inventory, archive/delete/keep classification, secret redaction, and separate operator approval for deletion.", "type": "forgejo", "value": "issue-body-acceptance" } ], "impact": 2, "judge_actor": { "name": "iskra", "runtime": "openclaw" }, "judged_at": "2026-06-11T01:02:00Z", "labels_to_apply": [ "judge/park" ], "piotr_fit": "medium", "priority": "park", "rationale_summary": "This should stay parked because it is useful host hygiene after Vault sunset but only matters once higher-priority runtime work is quiet.", "reach": 2, "recommended_next_action": "park", "rerun_reason": "no_prior_judgment", "schema": "openclaw.judge.v0", "target": { "kind": "issue", "number": 628, "repo": "pdurlej/platform" }, "target_snapshot": { "body_hash": "sha256:f7c6b4dbf1468dc113e2429bb69924cc4370ff2b179e6367626d118f07f3c1a3", "commit_count": null, "evidence_hash": "sha256:953f916362ea9c9a24eed47cb56288743b2dc0bbeb26b34b4a0566ffa0b55226", "head_sha": null, "labels": [ "flow/intake", "kind/chore", "observed/needs-followup", "priority:p3", "size/small", "status:parked" ], "labels_hash": "sha256:70fb6afb4a17351cafab2cc62b54adebb244fcc16ffa2ed3cf8cf3de37a99398", "state": "open", "title_hash": "sha256:ecc91aa3d1f01586e3a3f9de4712b33966692f9d7ddf6f4d0cc6539c9d087671", "updated_at": "2026-06-01T08:53:18+02:00" }, "top_caveat": "Keep the work read-only and redacted; any deletion needs a separate issue with exact operator approval." }  ``` </details>

Iskra added the

judge/park

label

2026-06-11 03:04:06 +02:00