DEPLOY: one-time sudo delegation for kartsell restart #13
Reference in New Issue
Block a user
Delete Branch "fix/deploy-kartsell-nopasswd"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Slice\n- Add one-time sudoers delegation contract matching quantengine/taxbaik.\n- Preflight delegation before artifact extraction and DbMigrator execution.\n- Preserve fail-closed behavior; no interactive sudo in CI.\n\n## Evidence\n- Existing host sudo policy: quantengine/taxbaik use command-scoped NOPASSWD; kartsell was missing.\n- Build/test/deploy evidence remains pending this PR CI and operator one-time sudoers installation.\n\nRequirement/Slice: deployment restart authorization; Source/Assumption/Unknown/Decision Required documented in docs/CURRENT/DEPLOY_KARTSELL_SUDO_DELEGATION.md.