From 2863859501945f485304c1df5f3868c7fd60e902 Mon Sep 17 00:00:00 2001 From: Ben Stull Date: Wed, 10 Jun 2026 20:36:13 -0700 Subject: [PATCH] update engineering/0016/SESSION-0016.0-TRANSCRIPT-2026-06-10T20-34--INPROGRESS.md --- ...TRANSCRIPT-2026-06-10T20-34--INPROGRESS.md | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/engineering/0016/SESSION-0016.0-TRANSCRIPT-2026-06-10T20-34--INPROGRESS.md b/engineering/0016/SESSION-0016.0-TRANSCRIPT-2026-06-10T20-34--INPROGRESS.md index 73c3edf..013a69c 100644 --- a/engineering/0016/SESSION-0016.0-TRANSCRIPT-2026-06-10T20-34--INPROGRESS.md +++ b/engineering/0016/SESSION-0016.0-TRANSCRIPT-2026-06-10T20-34--INPROGRESS.md @@ -17,6 +17,30 @@ Do the gitea VM service-account scope maintenance window (stop → set-service-a ``` +## Plan + +> Anchor: design specs/gitea-forge-backups.md (engineering#30, graduated; D-3 / §13 Q1: operator approved the maintenance window) + +Execute the gitea VM service-account scope maintenance window — the SLICE-1 +unblock (spec §7.2 SLICE-1, risk R-1). Procedure is canonical in +`infra/deploy-gitea-on-gcp.md` "Backups" box: + +1. Checkpoint-publish this transcript BEFORE the window (session-history lives + on the VM being stopped). +2. Pre-checks via `CLOUDSDK_ACTIVE_CONFIG_NAME=gitea` (§8.4): VM RUNNING, + record current SA (`1061347810527-compute@developer.gserviceaccount.com`) + + scopes (`devstorage.read_only`). +3. `gcloud compute instances stop gitea --zone=us-central1-a` +4. `gcloud compute instances set-service-account gitea --zone=us-central1-a --scopes=cloud-platform` +5. `gcloud compute instances start gitea --zone=us-central1-a` +6. Verify: scopes = cloud-platform, same SA email, forge healthy + (HTTPS git.wiggleverse.org + SSH :2222), on-VM ADC write-test to + `gs://wiggleverse-gitea-backups` (proves the unblock; spec D-3). +7. Update the runbook's PENDING box (DOC-2) → branch → PR → merge. + +Session runs isolated in worktree `gitea-vm-scope-window` (live concurrent +SESSION-0009 in flight). + ## Deferred decisions _Autonomous-mode low-confidence calls the driver made and would have