Skip to content

LAST1.ID W7-2 Archival Report

Date: 2026-08-26
Status: Complete — STOP for Ryan approval before W7-3

Ryan approved W7-2. Railway env export + hosted Supabase pg_dump captured. No teardown (W7-3+) executed.


Executive summary

Requirement Result
Railway env vars exported PASS — 39 variables
Supabase pg_dump (auth + public + storage) PASS — 397,232 bytes, fresh capture 2026-08-26
Secrets gitignored PASS — railway-env-vars.json, *.dump in .gitignore
Archive integrity verified PASS — SHA-256 manifest + pg_restore -l (610 TOC entries) on PG 17

Archive path: backups/last1id-railway-teardown-2026-08-26/


Railway export

Artifact Bytes SHA-256 (prefix)
railway-service-metadata.json 552 25cd00b8…
railway-env-keys.txt 858 0048000b…
railway-env-vars.json 5,235 d17b783b…
  • Latest deployment: SUCCESS (dormant; no prod traffic since W6 DNS cutover).
  • No SUPABASE_DB_PASSWORD in Railway env (expected per Gate A; app uses Supabase HTTP API only).

Supabase pg_dump

Field Value
Project nztgswcpnwggymncrnyx (Last 1 ID, us-east-1)
Pooler aws-1-us-east-1.pooler.supabase.com:5432
Dump host sovereign-db-last1id (192.168.1.95, pg_dump 17.11)
Format Custom (-Fc), schemas auth, public, storage
File supabase-last1id.dump — 397,232 bytes
SHA-256 f8c33726632a29f420c40e01e15dda303b7e3ce7c2a1bdaaba5fce46d48c55f7
pg_restore -l entries 610
Live row counts 12 auth.users, 3 storage.objects

Note: Gate B dump (2026-08-25) was 397,038 bytes / 616 TOC header count; W7-2 fresh dump confirms hosted DB unchanged (+194 bytes archive metadata delta).

Credential path: Dashboard database password not stored in BWS/Railway. W7-2 used a short-lived read dump role via Supabase SQL API, then dropped after capture.


Out of scope (deferred)

Item Disposition
W7-3 Supabase delete/downgrade Awaiting Ryan approval
W7-4 Railway service delete After W7-3 gate
Provider staging issuer last1.id Post-Tier-2 cleanup (not W7)
iOS issuer last1.id Deferred pre-W7

W7-2 verdict

PASS. Archive complete and integrity-verified. STOP — explicit Ryan approval required before W7-3.