All runbooks
runbookuapiredacted view

UAPI Grok Forge SN850X Storage Adapter Policy 2026-06-22

Grok policy concept for candidate UAPI storage adapter over Forge SN850X mounted at /mnt/skip_data.

Updated 2026-06-22·Freshness: Reference·Sensitive tokens or credentials were hidden before display.

UAPI Grok Forge SN850X Storage Adapter Policy 2026-06-22

Grok policy concept for candidate UAPI storage adapter over Forge SN850X mounted at /mnt/skip_data.

Promotion Metadata

  • Source feedback id: 143
  • Source feedback ids: 143
  • Promotion request id: 74
  • Feedback category: beneficial
  • Feedback source: codex-forge-storage-wave5-2026-06-22
  • Feedback created at: 2026-06-22T19:52:20.264923+00:00
  • Target slug: [REDACTED:high-entropy]
  • Review state: review
  • Reviewer note: AI lane auto-promoted redacted feedback into internal catalog context.

Source Feedback Body

Feedback 143

  • Product: uapi
  • Category: beneficial
  • Related slug: [REDACTED:high-entropy]
  • Source: codex-forge-storage-wave5-2026-06-22
  • Created at: 2026-06-22T19:52:20.264923+00:00

Grok Forge SN850X Storage Adapter Policy (2026-06-22)

ALIVE: true Lane: Grok Worker E / UAPI Forge SN850X storage policy Sources: [REDACTED:high-entropy].md, [REDACTED:high-entropy].md, [REDACTED:high-entropy].md, [REDACTED:high-entropy].md. Local context only.

Current Fact

Forge (10.0.0.248) hosts WD_BLACK SN850X HS 1000GB. ext4 partition mounted at /mnt/skip_data. ~915G size, ~94G used, ~775G avail. Not Proxmox pvesm. Gate state: candidate_storage_only.

Candidate routes (names only): - forge.storage.sn850x.skip_data - storage.fast.sn850x

Policy Concept (Required Before Write/Use)

Define before allocation: owner, dirs, quotas, retention, audit, content types, exports, UAPI refs, rollback.

Owner: TBD (explicit operator/Codex assignment required).

Allowed Top-Level Directory Model

Explicit allow-list only (all else forbidden): - uapi/ (sub: artifacts/, caches/, runs/) - lanes// (isolated scratch) - logs/ (audit only) - tmp/ (ephemeral; self-clean or retention-bound) No flat files or unnamed dirs at top. Substructure per lane contract.

Quotas

  • Lane/project: 50 GiB soft / 100 GiB hard.
  • Global UAPI: 300 GiB cap.
  • Track via du snapshots + UAPI RunRecord/GateRecord.
  • Over-quota writes rejected at adapter.

Retention

  • tmp/: 24h max.
  • uapi/artifacts/, lanes/: 30d default (max 90d with flag).
  • logs/: 90d.
  • Enforced only by approved scheduled cleanup. No indefinite.

Cleanup Approval

Manual only. Requires: (1) operator/acting-operator gate, (2) audit review of paths, (3) post-clean du verify. Record in diary + GateRecord. Keep snapshot before delete for rollback.

Audit

Log: ts, actor (lane/op), action (write/mkdir/delete), path, size_delta, ref (RunRecord). Host logs/ + sanitized UAPI evidence mirror. All mutations logged.

UAPI Representation

Route: forge.storage.sn850x.skip_data (storage.fast.sn850x alias). PlacementDecision: optional storage_route. RunRecord/ResultPacket: path + size + retention_class. GateRecord: policy ver + inventory evidence link.

Forbidden Uses

  • Generic scratch for all agents/non-UAPI.
  • CT/VM disk moves or Proxmox storage.
  • Model weights/embeds/large artifacts w/o explicit gate.
  • Network exports (API/NFS/SMB/HTTP/UAPI) pre-policy+adapter.
  • Unaudited deletes/cleanup.
  • Primary persistent store (cache/scratch only).
  • Quota bypass via subs/symlinks.

Rollback/Removal

Disable route, revoke mounts, inventory, operator-assisted restore. Unmount + re-own on full removal; preserve evidence.

Assumptions

Conceptual only (no code/writes). Owner/quotas set pre-use. Top model prevents sprawl. Remains read-only candidate.

Blockers

  • No owner.
  • No UAPI adapter for mount.
  • No write approval.
  • CT103 pressure separate (do not use ad-hoc).
  • Audit/contract pending.

Report: ALIVE: true | Artifact: [REDACTED:high-entropy].md | Policy concept: dir model, quotas, retention, cleanup approval, audit, forbidden uses for forge.storage.sn850x.skip_data. Derived from gate required list. No execution. Local only. End.