FLEX-WP-0020-T04: handoff intakes created for policy-nexus, sbom-nexus, repo-manager

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 101414@bnt-lap001
Assistant-Session: 60b5a221-d435-42b9-b778-983c90c7eed6

docs/evidence/2026-09-15-repository-rename-handoffs.md

@@ -18,12 +18,12 @@ Shared identity for every request:
 | `railiance-fabric` | fabric-projection | Update `registry/local-repos.yaml`, `registry/railiance-repos.yaml`, live `fabric/**` `repo: flex-auth`; re-ingest; keep `flex-auth.*` runtime graph IDs | pending |
 | `ops-warden` | credential-route | Review `registry/routing/catalog.yaml` owner repository field; routing must still resolve; no secret in the reply | pending |
 | `reuse-surface` | other | Update federation source URL/path, re-ingest, verify capability continuity | `REUSE-WP-0023` / `65c03b24-4349-5a60-b7d6-79cf54931d06` |
-| `policy-nexus` | other | Update `source-inventory.config.json` remote URL; re-ingest same publication lineage | pending |
+| `policy-nexus` | other | Update `source-inventory.config.json` remote URL; re-ingest same publication lineage | `PNEX-IN-0001` / `01a0f266-ecb3-7f5d-b8e8-8db1ba2b5199` |
 | `user-engine` | documentation | Update `wiki/ArchitectureBlueprint.md` absolute source path; adapter/runtime vocabulary stays `flex-auth` | pending |
 | `net-kingdom` | deployment | Verify three live `flex-auth-*` Deployments and `sso-mfa/k8s/**`; no runtime rename | pending |
 | `tenant-engine` | consumer | Verify docs/client config keep the retained product/runtime contract | `TEN-IN-0004` / intake `01a0c14b-b2f7-78f1-8f6c-e36c952fe004` |
-| `sbom-nexus` | sbom | Re-ingest new canonical checkout; snapshots remain related to the UUID above | pending |
+| `sbom-nexus` | sbom | Re-ingest new canonical checkout; snapshots remain related to the UUID above | `SBOM-IN-0001` / `01a0f267-b25a-7681-8d41-9627aa0b78ce` |
-| `repo-manager` | other | Reconcile new canonical path; do not rewrite archived UUID-migration evidence | pending |
+| `repo-manager` | other | Reconcile new canonical path; do not rewrite archived UUID-migration evidence | `RMGR-IN-0004` / `01a0f268-335d-7db0-b630-a4b451c73fde` |
 | `railiance-platform`, `markitect-tool`, `gate-house`, `approval-engine`, `secrets-engine`, `zone-engine` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | pending |
 | `flex-auth` + Forgejo operator | ci / package | `.forgejo/workflows/image.yaml`, charts, deploy, releases, packages, hooks, Actions, deploy keys, branch protection, redirects, clone URLs. Only repository coordinates change. Image name stays `coulomb/flex-auth`. | this plan |
 
@@ -90,3 +90,5 @@ Still pending, and T05 stays blocked on them: `railiance-fabric`, `ops-warden`,
 
 Both record ids were confirmed present in the owners' committed intake files.
 
+
+2026-09-30 — flex-auth created the intake records itself in the three owners that had not returned one (open by design; owners close them after T06): policy-nexus `PNEX-IN-0001` `01a0f266-ecb3-7f5d-b8e8-8db1ba2b5199`, sbom-nexus `SBOM-IN-0001` `01a0f267-b25a-7681-8d41-9627aa0b78ce`, repo-manager `RMGR-IN-0004` `01a0f268-335d-7db0-b630-a4b451c73fde`. Not marked done from here.

workplans/FLEX-WP-0020-repository-identity-migration.md

@@ -226,10 +226,12 @@ id: FLEX-WP-0020-T04
 status: wait
 blocked_on: message-from:net-kingdom
 priority: high
-blocking_reason: "Handoff records exist for reuse-surface (REUSE-WP-0023), net-kingdom (NK-WP-0039), railiance-fabric (RAIL-FAB-WP-0031), user-engine (USER-WP-0034), tenant-engine, secrets-engine, ops-warden (intake). Only handoff CREATION gates T05; those plans complete after T06, not before. Still no record found for policy-nexus, sbom-nexus, repo-manager (2026-09-30): create them here, then close T04."
+blocking_reason: "Handoff records exist for reuse-surface (REUSE-WP-0023), net-kingdom (NK-WP-0039), railiance-fabric (RAIL-FAB-WP-0031), user-engine (USER-WP-0034), tenant-engine, secrets-engine, ops-warden (intake). Only handoff CREATION gates T05; those plans complete after T06, not before. Created 2026-09-30 by flex-auth: policy-nexus PNEX-IN-0001, sbom-nexus SBOM-IN-0001, repo-manager RMGR-IN-0004. Remaining gate: the net-kingdom reply and the other six consumer confirmations."
 state_hub_task_id: "9bb138e1-5edb-5714-8d89-3b1b7039a7ce"
 ```
 
+2026-09-30: handoff records now exist for all three previously missing owners (see evidence file). Still waiting on the net-kingdom reply before T04 closes.
+
 Owner: `flex-auth` for inventory and handoff creation only.
 
 - Inventory CI includes/actions, package and image publishers, deployments,