diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index ad100e5..a4a5af6 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -267,7 +267,7 @@ | task | ACTIVITY-WP-0045-T01 | done | — | workplans/ACTIVITY-WP-0045-stale-historical-projection-disposition.md | | task | ACTIVITY-WP-0045-T02 | done | — | workplans/ACTIVITY-WP-0045-stale-historical-projection-disposition.md | | task | ACTIVITY-WP-0046-T01 | done | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md | -| task | ACTIVITY-WP-0046-T02 | wait | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md | +| task | ACTIVITY-WP-0046-T02 | done | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md | | task | ACTIVITY-WP-0046-T03 | wait | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md | | task | ACTIVITY-WP-0047-T01 | done | — | workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md | | task | ACTIVITY-WP-0047-T02 | wait | — | workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md | diff --git a/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md b/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md index 9c19fed..66ef9f8 100644 --- a/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md +++ b/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md @@ -8,7 +8,7 @@ status: active owner: claude-activity-core topic_slug: activity-core created: "2026-10-13" -updated: "2026-10-13" +updated: "2026-10-19" flavor: implementation related: [REINAH-WP-0003, ACTIVITY-WP-0038, ASSEMBLY-WP-0010] state_hub_workstream_id: "b6b5d39e-cd56-5a91-a67e-dcdf7b8d147c" @@ -44,7 +44,7 @@ prefixes outside `allowed_paths`; accept publish evidence keys in ```task id: ACTIVITY-WP-0046-T02 -status: wait +status: done priority: high state_hub_task_id: "78c39857-70cf-576a-b8f3-143bfb2c1e82" ``` @@ -52,6 +52,17 @@ state_hub_task_id: "78c39857-70cf-576a-b8f3-143bfb2c1e82" rein-aharness confirms it computes the same v2 grant id and enforces the scope (REINAH-WP-0003-T04). Wait: reply sent 2026-10-13. +2026-10-19: done. rein-aharness confirmed id parity (4695649, message +481ce3f0) and scope enforcement (5c36d80, message 74ee374e). It imports the one +commit locally, refuses changed paths outside `publish_scope.path_prefixes`, +never pushes, and reports `published: false`. Cross-check: activity-core +3b25aea and rein-aharness b800961 compute the same grant id and +acceptance_policy_id for three inputs. The inputs are the docs example +(`e0a395aa3ae8f810849d02e277b11828`), a v2 grant with two unsorted allowed +paths and prefixes (`0abbbc8cab5117874d00232b58b67e64`), and a v1 grant +(`9e689a2aea95728c5938a5ef5a37d285`). The push is rein-aharness's publisher +under decision c6f23433, not this task. + ## assembly-checkpoint definitions adopt v2 ```task