hacklab/T-HUB
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sync storage ownership doc with provisioned R2 reality

Browse source 
The hub-* buckets were provisioned 2026-10-08 (files-blobs, matrix-media,
media-library, pads); the doc's occupymedia-files-blobs name never existed.
hub-files-blobs is now live as the oCIS S3NG bucket (occ-files CT 320,
deployed 2026-10-10) with a bucket-scoped S3 key.
This commit is contained in:
glass beadian 2026-10-11 04:19:28 +00:00
parent 161f06f1e9
commit 43035a94e8
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/occupymedia-storage.md
View file

@ -11,11 +11,17 @@ are the next operator runbook. Design input: `runs/wp4/fileshare-research.md`.
| Payload bucket | Exclusive owner | Status | | Payload bucket | Exclusive owner | Status |
|---|---|---| |---|---|---|
| `occupymedia-matrix-media` | Future Tuwunel native S3 media | Existing bucket; live conduwuit still local | | `occupymedia-matrix-media` | Future Tuwunel native S3 media | Existing bucket; live conduwuit still local |
| `occupymedia-files-blobs` | oCIS S3NG, working files/docs and pad exports | Proposed new bucket; inventory/provision first | | `hub-files-blobs` | oCIS S3NG, working files/docs and pad exports | Existing bucket (provisioned 2026-10-08); oCIS deployed 2026-10-10 on occ-files CT 320. S3 key scoped to this bucket only |
| `hub-pads` | Future compliant pad persistence | Existing bucket; unused until a compliant pad adapter exists |
| `hub-media-library` | Reserved — library copies requiring separate attribution | Existing bucket; unused |
| `occupymedia-media-encrypted` | Tactical Media Broadcast Hub media/library, existing envelope format | Existing configuration; preserve KEK | | `occupymedia-media-encrypted` | Tactical Media Broadcast Hub media/library, existing envelope format | Existing configuration; preserve KEK |
| `occupymedia-peertube-videos` | PeerTube video objects | Existing dedicated bucket | | `occupymedia-peertube-videos` | PeerTube video objects | Existing dedicated bucket |
| `occupymedia-peertube-playlists` | PeerTube playlists | Existing dedicated bucket | | `occupymedia-peertube-playlists` | PeerTube playlists | Existing dedicated bucket |
Reality note (2026-10-10): the provisioned buckets use the `hub-` prefix, not
the `occupymedia-files-blobs` name first written here. The `hub-` names are the
contract now; do not create duplicates.
Verify actual inventory; names here are ownership contracts, not proof of Verify actual inventory; names here are ownership contracts, not proof of
provisioning. Do not let the bot write directly into oCIS's opaque bucket. It must provisioning. Do not let the bot write directly into oCIS's opaque bucket. It must
upload via authorized WebDAV/CS3 so metadata and ACLs remain coherent. Each upload via authorized WebDAV/CS3 so metadata and ACLs remain coherent. Each