From d5fcbbfa69664abc98e4e90e7385a43788d76859 Mon Sep 17 00:00:00 2001
From: jenkins <brad@bstein.dev>
Date: Sun, 4 Oct 2026 06:04:37 -0500
Subject: [PATCH] core: preserve offline and power-fault node quarantine

---
 infrastructure/core/node-maintenance.yaml | 47 ++++++++++++++++++++++-
 1 file changed, 46 insertions(+), 1 deletion(-)

diff --git a/infrastructure/core/node-maintenance.yaml b/infrastructure/core/node-maintenance.yaml
index 5dc880c5..98c4134b 100644
--- a/infrastructure/core/node-maintenance.yaml
+++ b/infrastructure/core/node-maintenance.yaml
@@ -1,8 +1,53 @@
 # infrastructure/core/node-maintenance.yaml
-# Block new application placement while the measured runtime I/O faults remain.
+# Block new placement until offline, power and runtime-storage checks pass.
 # Existing workloads and storage DaemonSets are not drained by these resources.
 apiVersion: v1
 kind: Node
+metadata:
+  name: titan-04
+  labels:
+    hardware: rpi5
+    node-role.kubernetes.io/worker: "true"
+    longhorn-host: "true"
+  annotations:
+    kustomize.toolkit.fluxcd.io/ssa: Merge
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    atlas.bstein.dev/maintenance-reason: "Fresh undervoltage events; verify power delivery under load before accepting new workloads."
+spec:
+  unschedulable: true
+---
+apiVersion: v1
+kind: Node
+metadata:
+  name: titan-05
+  labels:
+    hardware: rpi5
+    node-role.kubernetes.io/worker: "true"
+    longhorn-host: "true"
+  annotations:
+    kustomize.toolkit.fluxcd.io/ssa: Merge
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    atlas.bstein.dev/maintenance-reason: "Offline; verify identity, power, storage and loaded operation before accepting new workloads."
+spec:
+  unschedulable: true
+---
+apiVersion: v1
+kind: Node
+metadata:
+  name: titan-06
+  labels:
+    hardware: rpi5
+    node-role.kubernetes.io/worker: "true"
+    longhorn-host: "true"
+  annotations:
+    kustomize.toolkit.fluxcd.io/ssa: Merge
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    atlas.bstein.dev/maintenance-reason: "Offline; verify identity, power, storage and loaded operation before accepting new workloads."
+spec:
+  unschedulable: true
+---
+apiVersion: v1
+kind: Node
 metadata:
   name: titan-08
   labels: