FLEX-WP-0040: State Hub ids written back by fix-consistency
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 994874@bnt-lap001
Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87
This commit is contained in:
tegwick 2026-10-31 14:44:55 +01:00
parent f5b7a9071e
commit c70849a467

View file

@ -10,6 +10,7 @@ owner: access-engine
created: "2026-10-31"
updated: "2026-10-31"
related: [NK-WP-0056, FLEX-WP-0039, FLEX-WP-0031]
state_hub_workstream_id: "1b0a9f9e-9d09-52da-8dd0-8269dd3d27ec"
---
# FLEX-WP-0040 — Bounded execution PDP gate
@ -32,6 +33,7 @@ admitted by this workplan.
id: FLEX-WP-0040-T01
status: wait
priority: high
state_hub_task_id: "2fe53d9e-738c-5b1f-ab05-96d83894d47e"
```
Wait: approval-engine answers to NK-WP-0056-T02 (binding to
@ -45,6 +47,7 @@ the agreed claim fields here. Gate: written claim field list with owner ack.
id: FLEX-WP-0040-T02
status: wait
priority: medium
state_hub_task_id: "a7f9a307-01a5-56a6-9c96-fdb4c83118f5"
```
Wait: founder confirms the proposal — access-engine owns pack mechanics and
@ -57,6 +60,7 @@ authority-ceiling semantics. Gate: decision recorded.
id: FLEX-WP-0040-T03
status: todo
priority: medium
state_hub_task_id: "c9382486-55d9-5b40-b64e-d7c14343bbf6"
```
Replace the single hard-wired secrets-engine mapping with an owner-installed
@ -72,6 +76,7 @@ id: FLEX-WP-0040-T04
status: todo
priority: medium
depends_on: [FLEX-WP-0040-T01]
state_hub_task_id: "226afa23-3f6f-5b25-a2e6-48e7d086d597"
```
Add actions `start` and `execute-step` on resource type
@ -87,6 +92,7 @@ id: FLEX-WP-0040-T05
status: todo
priority: medium
depends_on: [FLEX-WP-0040-T02, FLEX-WP-0040-T03, FLEX-WP-0040-T04]
state_hub_task_id: "cc5e1435-57e0-5011-b8f3-dbffe959b91c"
```
`start`: claim valid and unconsumed, approver HUMAN at `aal2` and not the
@ -106,6 +112,7 @@ id: FLEX-WP-0040-T06
status: wait
priority: low
depends_on: [FLEX-WP-0040-T05, FLEX-WP-0039-T01]
state_hub_task_id: "f62be506-96d0-50fd-9874-b2a4df6f1dc8"
```
Wait: FLEX-WP-0039 readiness surface and a founder rollout decision for a pin