workplan: ACTIVITY-WP-0027 progress — T01–T05,T08 done

llm-connect host ClusterIP path live; ops UI artefact links deployed.
T06 edge-relay soft-fail and T07 Binky timer retirement remain.

WORK-RECORDS.md

@@ -30,6 +30,7 @@
 | workplan | ACTIVITY-WP-0024 | finished | — | workplans/ACTIVITY-WP-0024-operator-automation-console.md |
 | workplan | ACTIVITY-WP-0025 | finished | — | workplans/ACTIVITY-WP-0025-ops-ui-sso-access.md |
 | workplan | ACTIVITY-WP-0026 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
+| workplan | ACTIVITY-WP-0027 | ready | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
 | workplan | ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md |
 | workplan | custodian-WP-0001 | done | — | workplans/custodian-WP-0001-temporal-backbone.md |
 | workplan | custodian-WP-0002 | done | — | workplans/custodian-WP-0002-triggers-ops.md |
@@ -159,6 +160,14 @@
 | task | ACTIVITY-WP-0026-T05 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
 | task | ACTIVITY-WP-0026-T06 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
 | task | ACTIVITY-WP-0026-T07 | done | — | workplans/ACTIVITY-WP-0026-ops-run-claim-queue.md |
+| task | ACTIVITY-WP-0027-T01 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
+| task | ACTIVITY-WP-0027-T02 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
+| task | ACTIVITY-WP-0027-T03 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
+| task | ACTIVITY-WP-0027-T04 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
+| task | ACTIVITY-WP-0027-T05 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
+| task | ACTIVITY-WP-0027-T06 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
+| task | ACTIVITY-WP-0027-T07 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
+| task | ACTIVITY-WP-0027-T08 | todo | — | workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md |
 | task | ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md |
 | task | ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md |
 | task | ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md |

workplans/ACTIVITY-WP-0027-llm-connect-and-run-artifacts.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Hardened llm-connect access + run→artifact links in ops UI"
 domain: infotech
 repo: activity-core
-status: ready
+status: active
 owner: grok
 topic_slug: activity-core
 priority: high
@@ -19,6 +19,7 @@ related:
   - REIN-A-0002
   - ACTIVITY-WP-0010
   - ACTIVITY-WP-0021
+state_hub_workstream_id: "f8957bc5-4047-407c-b17f-940179d63e17"
 ---
 
 # ACTIVITY-WP-0027 — Hardened llm-connect access + run→artifact links
@@ -154,8 +155,9 @@ Never put tokens in URLs.
 
 ```task
 id: ACTIVITY-WP-0027-T01
-status: todo
+status: done
 priority: high
+state_hub_task_id: "516c35d3-fefd-46b6-a3a6-08767250ae4c"
 ```
 
 1. Inventory current railiance paths: claim-loop env, PF processes, in-cluster
@@ -174,8 +176,9 @@ vs railiance host unit) and acceptance tests listed.
 
 ```task
 id: ACTIVITY-WP-0027-T02
-status: todo
+status: done
 priority: high
+state_hub_task_id: "2a877f37-a6ad-42af-bbff-71caf3b961ff"
 ```
 
 Depends on T01.
@@ -196,8 +199,9 @@ old PF-only path marked deprecated.
 
 ```task
 id: ACTIVITY-WP-0027-T03
-status: todo
+status: done
 priority: high
+state_hub_task_id: "7ebb6775-b3bb-4c26-945f-809dc2aea22c"
 ```
 
 1. Spec how `activity_runs` joins to `ops_runs` (by time window +
@@ -220,8 +224,9 @@ priority: high
 
 ```task
 id: ACTIVITY-WP-0027-T04
-status: todo
+status: done
 priority: high
+state_hub_task_id: "093d1cd9-751b-4b19-bb42-1f4e105e992d"
 ```
 
 Depends on T03.
@@ -248,8 +253,9 @@ alone after a successful claim.
 
 ```task
 id: ACTIVITY-WP-0027-T05
-status: todo
+status: done
 priority: medium
+state_hub_task_id: "f9ef71a2-a0cf-4806-bb32-5233e0418ecd"
 ```
 
 Coordinate with rein-aharness (REIN-A follow-up or small patch in that repo):
@@ -272,6 +278,7 @@ links in ops UI without hand-editing DB rows.
 id: ACTIVITY-WP-0027-T06
 status: todo
 priority: medium
+state_hub_task_id: "52f1db5e-23db-4dcd-aaba-71c11deaf09a"
 ```
 
 1. Inventory which `state-hub` resolvers **must** hard-fail vs may degrade
@@ -291,6 +298,7 @@ fixed or explicitly accepted with a follow-up id.
 id: ACTIVITY-WP-0027-T07
 status: todo
 priority: low
+state_hub_task_id: "245955d4-83bd-4145-b71e-2e6449754e31"
 ```
 
 Depends on T02 (llm path solid) and proven claim-loop days for Binky.
@@ -306,8 +314,9 @@ Depends on T02 (llm path solid) and proven claim-loop days for Binky.
 
 ```task
 id: ACTIVITY-WP-0027-T08
-status: todo
+status: done
 priority: high
+state_hub_task_id: "dc03e3b9-db4b-4d55-b262-01c8d46efe74"
 ```
 
 Depends on T02 + T04 (minimum).
@@ -324,9 +333,9 @@ Depends on T02 + T04 (minimum).
 
 ## Acceptance (workplan level)
 
-- [ ] rein-aharness on railiance01 does not depend on ad-hoc `kubectl port-forward` for llm-connect
+- [x] rein-aharness on railiance01 does not depend on ad-hoc `kubectl port-forward` for llm-connect
-- [ ] `https://activity.coulomb.social/ops/ui` shows clickable artefact links for recent FI/Binky successes
+- [x] `https://activity.coulomb.social/ops/ui` shows clickable artefact links for recent FI/Binky successes (API verified; SSO UI serves same payload)
-- [ ] Contract tests cover join + URL builder; no secrets in responses
+- [x] Contract tests cover join + URL builder; no secrets in responses
 - [ ] Remaining caveats (edge 503, Binky timers) either fixed or explicitly deferred with owner
 
 ## References
@@ -337,3 +346,28 @@ Depends on T02 + T04 (minimum).
 - FI recurrence: `freedom-intelligence/docs/recurrence-ops.md`
 - UI entry: `src/activity_core/ops_api.py` (`/ops/ui/automations/{id}`)
 - Runs API: `src/activity_core/ops_console.py` (`ops_runs`)
+
+## Progress evidence (2026-08-05)
+
+### T01 decision
+Locked **H2**: host reaches ClusterIP via kube-proxy; `k8s://ns/svc:port` resolved by
+`~/bin/rein-aharness-claim` (or concrete ClusterIP). Doc: `docs/llm-connect-host-access.md`.
+Port-forward deprecated for claim-loop production.
+
+### T02 railiance
+- claim-loop.env uses `k8s://activity-core/{actcore-api,llm-connect,actcore-statehub-edge-relay}`
+- unit ExecStart=`rein-aharness-claim`; PATH includes `/usr/local/bin` for kubectl
+- Smoke: claim loop POST `http://10.43.221.249:8010/ops-runs/claim` → 200; llm health via ClusterIP OK
+
+### T03–T04
+- `src/activity_core/run_artifacts.py` + tests
+- `GET /ops/automations/{id}/runs` includes `ops_runs` + `artifacts` (Forgejo links)
+- UI: Artifacts column + `/ops/ui/automations/{id}/runs/{run_id}`
+- Prod sample: FI run `ac3e5c85-…` → forgejo brief URL for `briefs/2026/08/2026-08-05.md`
+
+### T05
+- rein-aharness complete payload includes `target_repo` for FI and Binky
+
+### Remaining
+- T06 edge-relay soft-fail for required resolvers
+- T07 Binky dual-clock timer retirement after clean claim days