Change Management

Data provenance: REAL MOCK STATIC CONFIG UNKNOWN· REAL = live read-only DCP · MOCK = demo, never production truth · STATIC CONFIG = documented defaults · UNKNOWN = not safely queryable

Read-only. Planned and historical operational changes. All records are MOCK/STATIC; there is no execution, approval or mutation control. The deployment philosophy is BUILD → TEST → APPROVAL → DEPLOY → HEALTH → ROLLBACK. No button here changes anything.

Total changes

Open

Completed

Failed

Rolled back

Approval required

States: DRAFT · PLANNED · APPROVAL_REQUIRED · APPROVED · IN_PROGRESS · VERIFYING · COMPLETED · FAILED · ROLLED_BACK. Every checklist item marked UNKNOWN is never treated as satisfied.

CHG-2026-041 · Rotate DCP automation webhook secret

DRAFTR3APPROVAL REQUIREDNOT RUNMOCK

Rotate the DCP->n8n signed-webhook secret from the root-owned env file. Secrets are referenced by name only.

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: dev-control-plane
Affected services: DCP, n8n
Approval: PENDING Ari
Rollback point: prior secret kept in root-owned env history
AVAILABLE NOT TESTED Retain the prior secret version
Checkpoint: not scheduled
Scheduled: —
Started: —
Finished: —
Verification: DRAFT — not started; approval pending.
Provenance: MOCK

Change safety checklist (5/15 OK · 6 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	UNKNOWN	UNKNOWN
backup / rollback available	UNKNOWN	UNKNOWN
risk classification	OK	CLASSIFIED
approval state	NO	NOT SATISFIED
EXECUTION
actor	OK	—
action	OK	rotate signed-webhook secret
start	NO	—
end	NO	—
POST-CHECK
health verified	UNKNOWN	UNKNOWN
expected image / version	UNKNOWN	UNKNOWN
checksum / state verification	UNKNOWN	UNKNOWN
unrelated impact check	UNKNOWN	UNKNOWN
ROLLBACK
exact rollback reference	OK	prior secret version retained
rollback status	OK	AVAILABLE
rollback tested	NO	NO

CHG-2026-040 · Apply PostgreSQL minor patch (disposable-first)

PLANNEDR3APPROVAL REQUIREDNOT RUNMOCK

Patch PostgreSQL in a disposable target first, then the private control-plane database if the drill passes.

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: dev-control-plane
Affected services: PostgreSQL, DCP
Approval: PENDING Ari
Rollback point: /srv/backups/dev-control-plane-pre-batch56-20261004-133034.dump
AVAILABLE TESTED Pre-patch logical dump + prior image
Checkpoint: planned: pre-chg-040 dump
Scheduled: 2026-10-12T02:00:00+07:00
Started: —
Finished: —
Verification: PLANNED — awaiting owner approval.
Provenance: MOCK

Change safety checklist (8/15 OK · 4 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	OK	YES
risk classification	OK	CLASSIFIED
approval state	NO	NOT SATISFIED
EXECUTION
actor	OK	DevOps (RUN)
action	OK	pg_dump + patch to disposable first
start	NO	—
end	NO	—
POST-CHECK
health verified	UNKNOWN	UNKNOWN
expected image / version	UNKNOWN	UNKNOWN
checksum / state verification	UNKNOWN	UNKNOWN
unrelated impact check	UNKNOWN	UNKNOWN
ROLLBACK
exact rollback reference	OK	pre-chg-040 dump + prior image tag
rollback status	OK	READY
rollback tested	OK	YES

CHG-2026-039 · Enable homelab-backup.timer

APPROVAL_REQUIREDR2APPROVAL REQUIREDNOT RUNMOCK

Enable the disabled backup timer after the soak PASS and a successful disposable restore drill.

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: homelab-infra
Affected services: PostgreSQL
Approval: PENDING Ari
Rollback point: systemctl disable --now homelab-backup.timer
AVAILABLE NOT TESTED Disable the timer again
Checkpoint: gated on first restore drill PASS
Scheduled: 2026-10-14T03:00:00+07:00
Started: —
Finished: —
Verification: APPROVAL REQUIRED — gated on operational gates.
Provenance: MOCK

Change safety checklist (6/15 OK · 4 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	NO	NO
risk classification	OK	CLASSIFIED
approval state	NO	NOT SATISFIED
EXECUTION
actor	OK	DevOps (RUN)
action	OK	enable backup timer
start	NO	—
end	NO	—
POST-CHECK
health verified	UNKNOWN	UNKNOWN
expected image / version	UNKNOWN	UNKNOWN
checksum / state verification	UNKNOWN	UNKNOWN
unrelated impact check	UNKNOWN	UNKNOWN
ROLLBACK
exact rollback reference	OK	documented disable command
rollback status	OK	READY
rollback tested	NO	NO

CHG-2026-038 · Update Homepage dashboard links

APPROVEDR1NO APPROVALNOT RUNMOCK

Non-destructive dashboard config update; no service restart of the control plane.

Requested by: Ari (Owner)
Owner: Developer (BUILD)
Project: homelab-infra
Affected services: Homepage
Approval: NOT REQUIRED Ari
Rollback point: git revert <config commit>
AVAILABLE TESTED Revert config to prior revision
Checkpoint: config revision retained
Scheduled: 2026-10-08T10:00:00+07:00
Started: —
Finished: —
Verification: APPROVED — low risk, reversible.
Provenance: MOCK

Change safety checklist (9/15 OK · 4 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	OK	YES
risk classification	OK	CLASSIFIED
approval state	OK	SATISFIED
EXECUTION
actor	OK	Developer (BUILD)
action	OK	update dashboard config
start	NO	—
end	NO	—
POST-CHECK
health verified	UNKNOWN	UNKNOWN
expected image / version	UNKNOWN	UNKNOWN
checksum / state verification	UNKNOWN	UNKNOWN
unrelated impact check	UNKNOWN	UNKNOWN
ROLLBACK
exact rollback reference	OK	git revert of config commit
rollback status	OK	READY
rollback tested	OK	YES

CHG-2026-037 · Enable Uptime Kuma monitors

IN_PROGRESSR2NO APPROVALNOT RUNMOCK

Add availability monitors for DCP, PostgreSQL reachability and backup freshness; no alert delivery claimed yet.

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: homelab-infra
Affected services: Uptime Kuma, DCP, PostgreSQL
Approval: NOT REQUIRED Ari
Rollback point: revert monitor set to prior export
AVAILABLE NOT TESTED Disable the new monitors
Checkpoint: monitor export retained
Scheduled: 2026-10-05T09:00:00+07:00
Started: 2026-10-05T09:02:00+07:00
Finished: —
Verification: IN PROGRESS — verification pending.
Provenance: MOCK

Change safety checklist (9/15 OK · 4 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	OK	YES
risk classification	OK	CLASSIFIED
approval state	OK	SATISFIED
EXECUTION
actor	OK	DevOps (RUN)
action	OK	add monitors
start	OK	2026-10-05T09:02:00+07:00
end	NO	—
POST-CHECK
health verified	UNKNOWN	UNKNOWN
expected image / version	UNKNOWN	UNKNOWN
checksum / state verification	UNKNOWN	UNKNOWN
unrelated impact check	UNKNOWN	UNKNOWN
ROLLBACK
exact rollback reference	OK	prior monitor export
rollback status	OK	READY
rollback tested	NO	NO

CHG-2026-036 · DCP image-tag rollback drill

VERIFYINGR2NO APPROVALWARNINGMOCK

Rehearse reverting DCP_IMAGE_TAG to the prior SHA in a disposable environment. Never production in this drill.

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: dev-control-plane
Affected services: DCP
Approval: NOT REQUIRED Ari
Rollback point: DCP_IMAGE_TAG=<prior sha>
AVAILABLE TESTED Prior DCP image SHA
Checkpoint: disposable only
Scheduled: 2026-10-05T06:00:00+07:00
Started: 2026-10-05T06:01:00+07:00
Finished: 2026-10-05T06:20:00+07:00
Verification: VERIFYING — health OK; checksum not verified.
Provenance: MOCK

Change safety checklist (14/15 OK · 1 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	OK	YES
risk classification	OK	CLASSIFIED
approval state	OK	SATISFIED
EXECUTION
actor	OK	DevOps (RUN)
action	OK	revert image tag in disposable env
start	OK	2026-10-05T06:01:00+07:00
end	OK	2026-10-05T06:20:00+07:00
POST-CHECK
health verified	OK	YES
expected image / version	OK	YES
checksum / state verification	UNKNOWN	UNKNOWN
unrelated impact check	OK	YES
ROLLBACK
exact rollback reference	OK	prior image SHA
rollback status	OK	USED
rollback tested	OK	YES

CHG-2026-035 · Seagate backup mount acceptance

COMPLETEDR3APPROVAL REQUIREDPASSMOCK

Acceptance checks for the HOMELAB_BACKUP volume (read/write in a temporary dir only; no data written by agents).

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: homelab-infra
Affected services: PostgreSQL
Approval: APPROVED Ari · 2026-10-04T12:50:00+07:00
Rollback point: documented mount rollback
AVAILABLE TESTED Unmount / revert fstab entry
Checkpoint: pre-batch56 dump retained
Scheduled: 2026-10-04T13:00:00+07:00
Started: 2026-10-04T13:05:00+07:00
Finished: 2026-10-04T13:30:00+07:00
Verification: COMPLETED — post-check PASS.
Provenance: MOCK

Change safety checklist (15/15 OK · 0 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	OK	YES
risk classification	OK	CLASSIFIED
approval state	OK	SATISFIED
EXECUTION
actor	OK	Ari (Owner)
action	OK	mount acceptance read/write
start	OK	2026-10-04T13:05:00+07:00
end	OK	2026-10-04T13:30:00+07:00
POST-CHECK
health verified	OK	YES
expected image / version	OK	YES
checksum / state verification	OK	YES
unrelated impact check	OK	YES
ROLLBACK
exact rollback reference	OK	documented mount rollback
rollback status	OK	AVAILABLE
rollback tested	OK	YES

CHG-2026-034 · First real PostgreSQL backup

FAILEDR3APPROVAL REQUIREDFAILMOCK

Attempt the first real logical dump to the backup volume.

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: homelab-infra
Affected services: PostgreSQL
Approval: APPROVED Ari · 2026-10-04T01:40:00+07:00
Rollback point: no state change; dump target cleaned
AVAILABLE TESTED No-op (read-only dump)
Checkpoint: n/a
Scheduled: 2026-10-04T02:00:00+07:00
Started: 2026-10-04T02:00:30+07:00
Finished: 2026-10-04T02:06:00+07:00
Verification: FAILED — checksum verification failed; retry gated.
Provenance: MOCK

Change safety checklist (14/15 OK · 0 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	OK	YES
risk classification	OK	CLASSIFIED
approval state	OK	SATISFIED
EXECUTION
actor	OK	DevOps (RUN)
action	OK	pg_dump to backup volume
start	OK	2026-10-04T02:00:30+07:00
end	OK	2026-10-04T02:06:00+07:00
POST-CHECK
health verified	OK	YES
expected image / version	OK	YES
checksum / state verification	NO	NO
unrelated impact check	OK	YES
ROLLBACK
exact rollback reference	OK	read-only dump, no state change
rollback status	OK	AVAILABLE
rollback tested	OK	YES

CHG-2026-033 · DCP batch 5 deploy (simulated)

ROLLED_BACKR4APPROVAL REQUIREDFAILMOCK

Simulated deploy rehearsal illustrating a rollback path.

Requested by: Ari (Owner)
Owner: DevOps (RUN)
Project: dev-control-plane
Affected services: DCP, PostgreSQL
Approval: APPROVED Ari · 2026-10-04T06:45:00+07:00
Rollback point: batch56-ready-20261004-071722
AVAILABLE TESTED Prior DCP image + pre-deploy checkpoint
Checkpoint: /srv/backups/dev-control-plane/checkpoints/batch56-ready-20261004-071722
Scheduled: 2026-10-04T07:00:00+07:00
Started: 2026-10-04T07:01:00+07:00
Finished: 2026-10-04T07:19:00+07:00
Verification: ROLLED BACK — post-check failed, rollback executed (simulated).
Provenance: MOCK

Change safety checklist (13/15 OK · 0 UNKNOWN)

Check	State	Evidence
PRE-CHECK
health baseline	OK	YES
backup / rollback available	OK	YES
risk classification	OK	CLASSIFIED
approval state	OK	SATISFIED
EXECUTION
actor	OK	DevOps (RUN)
action	OK	deploy DCP image
start	OK	2026-10-04T07:01:00+07:00
end	OK	2026-10-04T07:19:00+07:00
POST-CHECK
health verified	NO	NO
expected image / version	NO	NO
checksum / state verification	OK	YES
unrelated impact check	OK	YES
ROLLBACK
exact rollback reference	OK	prior image + pre-deploy checkpoint
rollback status	OK	USED
rollback tested	OK	YES