From 2c7c8a6477bd892ffe5267873247f70734735b97 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 4 Sep 2026 15:08:20 +0200 Subject: [PATCH] docs: close controlled SBOM source rollout Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a06bfe-2a55-7ed3-bacd-879977b099bf --- WORK-RECORDS.md | 21 ++++++++++++------- ...P-0034-sbom-controlled-source-reference.md | 17 ++++++++++++--- 2 files changed, 27 insertions(+), 11 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 7b45ec7..77c02f3 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -37,11 +37,12 @@ | workplan | ACTIVITY-WP-0031 | active | — | workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md | | workplan | ACTIVITY-WP-0032 | active | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md | | workplan | ACTIVITY-WP-0033 | finished | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md | -| workplan | ACTIVITY-WP-0034 | active | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | +| workplan | ACTIVITY-WP-0034 | finished | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | | workplan | ACTIVITY-WP-0035 | active | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | | workplan | ACTIVITY-WP-0036 | active | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | -| workplan | ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md | -| workplan | ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md | +| workplan | ACTIVITY-WP-0037 | active | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| workplan | ACTIVITY-WP-ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md | +| workplan | ACTIVITY-WP-ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md | | workplan | ACTIVITY-WP-ADHOC-2026-08-23 | finished | — | workplans/ADHOC-2026-08-23.md | | workplan | custodian-WP-0001 | done | — | workplans/custodian-WP-0001-temporal-backbone.md | | workplan | custodian-WP-0002 | done | — | workplans/custodian-WP-0002-triggers-ops.md | @@ -208,7 +209,7 @@ | task | ACTIVITY-WP-0033-T02 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md | | task | ACTIVITY-WP-0033-T03 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md | | task | ACTIVITY-WP-0034-T01 | done | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | -| task | ACTIVITY-WP-0034-T02 | progress | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | +| task | ACTIVITY-WP-0034-T02 | done | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | | task | ACTIVITY-WP-0035-T01 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | | task | ACTIVITY-WP-0035-T02 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | | task | ACTIVITY-WP-0035-T03 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | @@ -221,10 +222,14 @@ | task | ACTIVITY-WP-0036-T02 | done | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | | task | ACTIVITY-WP-0036-T03 | done | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | | task | ACTIVITY-WP-0036-T04 | progress | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | -| task | ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md | -| task | ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md | -| task | ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md | -| task | ADHOC-2026-08-20-T01 | done | — | workplans/ADHOC-2026-08-20.md | +| task | ACTIVITY-WP-0037-T01 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-0037-T02 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-0037-T03 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-0037-T04 | wait | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md | +| task | ACTIVITY-WP-ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md | +| task | ACTIVITY-WP-ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md | +| task | ACTIVITY-WP-ADHOC-2026-08-20-T01 | done | — | workplans/ADHOC-2026-08-20.md | | task | ACTIVITY-WP-ADHOC-2026-08-23-T01 | done | — | workplans/ADHOC-2026-08-23.md | | task | T01 | done | — | workplans/custodian-WP-0001-temporal-backbone.md | | task | T02 | done | — | workplans/custodian-WP-0001-temporal-backbone.md | diff --git a/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md b/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md index be71e3d..b6c1bd5 100644 --- a/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md +++ b/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md @@ -4,11 +4,11 @@ type: workplan title: "Freeze controlled SBOM source references across retries" domain: infotech repo: activity-core -status: active +status: finished owner: codex topic_slug: infotech created: "2026-08-22" -updated: "2026-08-23" +updated: "2026-09-04" quality_dor: DoR-Ok quality_dor_at: "2026-08-22" quality_dor_by: codex @@ -43,7 +43,7 @@ tests for normalization, POST payload, retry identity, and terminal reasons. ```task id: ACTIVITY-WP-0034-T02 -status: progress +status: done priority: high state_hub_task_id: "036de401-18de-5a94-8f0d-18d60b64c56a" ``` @@ -77,3 +77,14 @@ An in-worker, read-only report probe against the live selection returned references. The existing schedule was not manually fired. Verification before deploy: 61 focused tests and 435 repository tests passed, with one live integration test skipped. + +Closed 2026-09-04 from natural schedule evidence. The first unassisted weekday +fire at 2026-08-24 07:15 UTC selected exactly three repositories, retained three +`forgejo-archive-v1` references with full revisions, updated `clay-borg`, and +recorded bounded `no-manifest` outcomes for `citation-work` and `config-atlas`. +State Hub progress `f62eaadd-d10c-4a21-8547-293569ed5637` and activity-core run +`4c4594ad-366b-5720-b3f9-44fb300fda70` carry the result. Subsequent weekday +runs continued exposing exactly three new oldest repositories per fire and +reported unavailable sources explicitly as `no-checkout`; `never_count` +therefore progressed from 91 after the controlled fire to 64 on 2026-09-04 +without widening the schedule or substituting a target during a run.