Conduit
PREVIEWSign out

Your approvals

Elevation requests filed under your identity. Read the reason, then approve or deny. 2 pending.

PENDING

Bootstrap the hosted Conduit approval surface on Cloud Run: enable the run, firestore and cloudbuild APIs, create an Artifact Registry repo, and add the conduit.odsubstrate.dev DNS record. All in europe-west2.

od-harness-run-8c41 · gcp:od-shared-compute · 3m ago · window 90m

Hosting plan phase 0 - no-regret prep, agent-executable under one approval.

exact commands (each single-use)
gcloud services enable run.googleapis.com firestore.googleapis.com cloudbuild.googleapis.com --project od-shared-compute
gcloud artifacts repositories create conduit --repository-format=docker --location=europe-west2 --project od-shared-compute
time-bound pattern · valid 90m (any match runs until it expires)
gcloud run * --project od-shared-compute
gcloud builds * --project od-shared-compute
PENDING

Read the mgmt-account Route 53 hosted zones to confirm the odsubstrate.dev delegation set before adding records.

od-harness-run-5d90 · aws:762293625028 · 11m ago · window 30m

exact commands (each single-use)
aws --profile agent-general route53 list-hosted-zones
APPROVED

Create the Cloud DNS managed zone for odsubstrate.dev so records can be managed via gcloud.

od-harness-run-2a17 · gcp:od-shared-compute · 46m ago

exact commands (each single-use)
gcloud dns managed-zones create odsubstrate-dev --dns-name=odsubstrate.dev. --description='Conduit hosting zone' --project od-shared-compute

approved by shebin.rawther@oxdynamics.com - ok

EXECUTED

Register the odsubstrate.dev domain ($12) via the Route 53 registrar in the management account.

od-harness-run-1f63 · aws:762293625028 · 2h ago

exact commands (each single-use)
aws --profile org-management route53domains register-domain --cli-input-json file://register.json

executed by shebin.rawther@oxdynamics.com - approved - domain go-ahead

DENIED

Restart the avis-prod ECS service to pick up a config change.

od-harness-run-0b22 · aws:028255565227 · 3h ago

exact commands (each single-use)
aws --profile agent-avis-prod-ro ecs update-service --force-new-deployment

denied by shebin.rawther@oxdynamics.com - Prod mutation - route via CI/OIDC, not a brokered agent write.