From 80bcead168a24ca7c749eb6a77ed90e694f7e149 Mon Sep 17 00:00:00 2001 From: Fi3w0 Date: Fri, 28 Aug 2026 00:58:14 +0200 Subject: [PATCH] docs: record sealed cutover promotion --- docs/evidence.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/evidence.md b/docs/evidence.md index 1d466cc..6c80c1b 100644 --- a/docs/evidence.md +++ b/docs/evidence.md @@ -124,7 +124,10 @@ stopped, its disposable PVC and manually managed Secret were removed, and the committed `nereus-db` SealedSecret created the replacement Secret. The controller reported `Synced=True`, the new 5 GiB PVC bound, PostgreSQL reached one ready replica, three restarted API pods became ready, and both load -generators remained healthy after their rollouts. +generators became healthy after reseeding the empty database. The first +analysis attempts correctly rejected stale reset errors. After one full clean +Prometheus window, AnalysisRun `nereus-api-75d884b4dd-19-pre` passed all five +measurements and promoted revision `75d884b4dd` to the active Service. No plaintext credential was written to the repository, Terraform state, shell output, or evidence.