simpletest/who_need_help
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: verify remote environment isolation

Browse Source
This commit is contained in:
SimpleTest 2026-07-23 23:59:26 +03:00
parent 194ac181e7
commit 08c59a565a
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/verification.md
View File

@ -48,7 +48,11 @@ edit, branch, or tag was made during this audit.
container database, and healthy application/database containers. Both
`https://test.whoneedhelp.com/healthz/ready` and
`https://whoneedhelp.com/healthz/ready` returned `ready`; no test,
production, public-Git, or Devpost mutation was performed.
production, public-Git, or Devpost mutation was performed. The server-side
`validate-deployment-isolation.sh` check also passed across the two checkouts,
confirming independent Git metadata and one mode-`0600` `.env` per
deployment, with separate Compose projects, images, databases, OAuth
clients, email paths, and application secrets.
- A separate manual application rollback command now consumes only a successful
release's mode-`0600` manifest. Its plan verifies current/previous commits,
old application/edge images, backup checksum/catalog, runtime identity, and