# railiance-platform — Codex Instructions

**OAS Stack Level:** S3 Platform Services
**Scope:** Shared services supporting cluster workloads — PostgreSQL HA,
object storage, secret management, identity, message brokers, caches.

**Pre-condition:** `railiance-cluster` must be converged (k3s running,
Helm available) before deploying anything from this repo.

## Custodian State Hub Integration

Domain: **railiance** — topic ID: `ca369340-a64e-442e-98f1-a4fa7dc74a38`
State Hub: http://127.0.0.1:8000

### Session Protocol

**Step 1 — Orient**
```
get_domain_summary("railiance")
```

**Step 2 — Scan workplans**
```
ls workplans/   # read all active workplans; note todo/in_progress tasks
```

**Step 3 — Present brief**
1. Active workstreams for railiance with `[repo:railiance-platform]` tasks
2. Pending tasks from local workplans
3. Goal guidance from summary (needs_workplan / alignment_warnings)
4. Suggested next action

**During work:** use `record_decision()`, `add_progress_event()`, `resolve_decision()`.

**Session close:** `add_progress_event()` with topic_id and workstream_id.

> Design boundary: hub is read model. Bootstrap tools (create_workstream,
> create_task) are First Session Protocol only. Work originates as files
> per ADR-001.

### Repo Boundary Rule (ADR-003)

This repo owns **S3 Platform Services only**. Do not manage:
- OS-level concerns → `railiance-infra` (S1)
- Kubernetes runtime concerns → `railiance-cluster` (S2)
- CI/CD or developer tooling → `railiance-enablement` (S4)
- Application deployments → `railiance-apps` (S5)

Reference: `railiance-infra/docs/adr/ADR-003-railiance-5repo-stack-architecture.md`

### Workplan Convention (ADR-001)

File location: `workplans/RAIL-PL-WP-NNNN-<slug>.md`
Prefix: `RAIL-PL`

### SBOM

After updating dependencies:
```bash
cd ~/the-custodian/state-hub
make ingest-sbom REPO=railiance-platform SCAN=1 REPO_PATH=/home/worsch/railiance-platform
```

### Quick Reference

`~/the-custodian/state-hub/mcp_server/TOOLS.md`