CUST-WP-0075-T03: route human gates to hub decisions; encode GLAS-WP-0012 blocker on ACTIVITY-WP-0032-T05
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 3775@bnt-lap001
Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3
This commit is contained in:
tegwick 2026-10-03 03:24:45 +02:00
parent 4d0750b625
commit 43ee21e99a
5 changed files with 25 additions and 8 deletions

View file

@ -35,7 +35,7 @@
| workplan | ACTIVITY-WP-0029 | finished | — | workplans/ACTIVITY-WP-0029-hub-port-alignment.md |
| workplan | ACTIVITY-WP-0030 | finished | — | workplans/ACTIVITY-WP-0030-daily-sbom-catchup.md |
| workplan | ACTIVITY-WP-0031 | finished | — | workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md |
| workplan | ACTIVITY-WP-0032 | blocked | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| workplan | ACTIVITY-WP-0032 | active | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| workplan | ACTIVITY-WP-0033 | finished | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md |
| workplan | ACTIVITY-WP-0034 | finished | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md |
| workplan | ACTIVITY-WP-0035 | finished | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md |
@ -44,6 +44,7 @@
| workplan | ACTIVITY-WP-0039 | finished | — | workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md |
| workplan | ACTIVITY-WP-0040 | blocked | — | workplans/ACTIVITY-WP-0040-frontend-patterns-feedback.md |
| workplan | ACTIVITY-WP-0041 | blocked | — | workplans/ACTIVITY-WP-0041-gitops-adoption.md |
| workplan | ACTIVITY-WP-0042 | proposed | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| workplan | ACTIVITY-WP-ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md |
| workplan | ACTIVITY-WP-ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md |
| workplan | ACTIVITY-WP-ADHOC-2026-08-23 | finished | — | workplans/ADHOC-2026-08-23.md |
@ -208,7 +209,7 @@
| task | ACTIVITY-WP-0032-T02 | done | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| task | ACTIVITY-WP-0032-T03 | done | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| task | ACTIVITY-WP-0032-T04 | done | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| task | ACTIVITY-WP-0032-T05 | wait | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| task | ACTIVITY-WP-0032-T05 | todo | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| task | ACTIVITY-WP-0033-T01 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md |
| task | ACTIVITY-WP-0033-T02 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md |
| task | ACTIVITY-WP-0033-T03 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md |
@ -240,6 +241,9 @@
| task | ACTIVITY-WP-0041-T01 | done | — | workplans/ACTIVITY-WP-0041-gitops-adoption.md |
| task | ACTIVITY-WP-0041-T02 | wait | — | workplans/ACTIVITY-WP-0041-gitops-adoption.md |
| task | ACTIVITY-WP-0041-T03 | wait | — | workplans/ACTIVITY-WP-0041-gitops-adoption.md |
| task | ACTIVITY-WP-0042-T01 | wait | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T02 | wait | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T03 | wait | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md |

View file

@ -4,7 +4,7 @@ type: workplan
title: "Adopt the Glas profile-driven execution contract"
domain: infotech
repo: activity-core
status: active
status: blocked
flavor: implementation
owner: claude
topic_slug: activity-core
@ -231,8 +231,9 @@ deselected because it requires the local integration stack.
```task
id: ACTIVITY-WP-0032-T05
status: todo
depends_on: [ACTIVITY-WP-0032-T03, ACTIVITY-WP-0032-T04, ACTIVITY-WP-0031-T01]
status: wait
depends_on: [GLAS-WP-0012]
blocking_reason: "No admitted Glas profile: waits on GLAS-WP-0012 (upstream GLAS-IN-0002, sand-boxer nsenter denial); do not rerun the old pilot."
priority: low
state_hub_task_id: "e71423f9-8baf-566b-8a70-eec195e2f65f"
```
@ -313,4 +314,4 @@ old pilot or silently change its profile. Resume T05 after Glas supplies an
admitted profile and matching railiance01 runtime/credential evidence. Workplan
state is now blocked; the four completed implementation tasks remain done.
2026-10-03: every depends_on target is terminal (C-40); cleared to todo by CUST-WP-0075.
2026-10-03: the earlier depends_on (T03, T04, ACTIVITY-WP-0031-T01) were all terminal, so C-40 read this as satisfied. The real blocker named above was prose only. CUST-WP-0075 encoded it as depends_on GLAS-WP-0012 and returned the task to wait.

View file

@ -8,7 +8,7 @@ status: blocked
owner: codex
topic_slug: activity-core
created: "2026-09-27"
updated: "2026-09-28"
updated: "2026-10-03"
state_hub_workstream_id: "963bf8b3-536c-5625-b786-60a7b6e7c809"
---
@ -37,6 +37,7 @@ Dockerfile.frontend-patterns overlays only two Python files on the deployed work
id: ACTIVITY-WP-0040-T02
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
depends_on: [ACTIVITY-WP-0041]
blocking_reason: "Kubernetes change gate: route through ArgoCD adoption (ACTIVITY-WP-0041) or an explicit scoped exception before live mutation."
priority: high
@ -56,6 +57,8 @@ enable all three domain definitions and matching projections; sync schedules;
record exact receipts and first natural scheduled execution. Rollback restores
activity-core:fi-publication-20260914 and disables the definitions with resync.
2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.
## Preserve execution dependency and complete operational handoff
```task

View file

@ -8,7 +8,7 @@ status: blocked
owner: codex
topic_slug: activity-core
created: "2026-09-27"
updated: "2026-09-28"
updated: "2026-10-03"
state_hub_workstream_id: "12798750-3eee-5d81-a411-c3c4c5ce2d2c"
---
@ -71,6 +71,7 @@ one-time governance decision.
id: ACTIVITY-WP-0041-T03
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Founder approves the exact autonomous scope: merge paths, tests, images, ceilings, stop conditions, rollback, audit retention."
priority: high
state_hub_task_id: "8e2b4ed9-d455-5367-85d9-8e4222ce75f3"
@ -90,6 +91,8 @@ the monthly decision packet. Failed routine checks stop/retry/roll back automati
and produce visible evidence rather than asking the founder to approve each run.
Prove one normal release and one failed health-check rollback through Git/ArgoCD.
2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.
## Acceptance
A normal authorized change builds/tests, publishes a digest, updates reviewed source,

View file

@ -36,6 +36,7 @@ Facts from the repo (2026-10-03):
id: ACTIVITY-WP-0042-T01
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Founder decision: accept scheduling only, scheduling plus a bounded operation, or decline the role."
priority: high
state_hub_task_id: "2a368988-2611-596a-a847-82c048bd179e"
@ -47,6 +48,8 @@ operation, or decline. Needs: restore execution stays with an S3-owned tool
invoked as a fixed bounded operation; approval-engine authority supplied per
run; no general executor behaviour.
2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.
## Admit a bounded operation and credential lane
```task
@ -70,6 +73,7 @@ once recurring tiered scheduling and retention are accepted by their owners.
id: ACTIVITY-WP-0042-T03
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Founder must confirm whether activity-core's backup worker is the atm-backup-daily unit before declaring to ops-warden."
priority: low
state_hub_task_id: "e1c313dc-9a94-5b7c-b406-604b700bf3eb"
@ -81,3 +85,5 @@ this repo and no evidence that the actor was minted for its worker. Declare
only if the founder confirms activity-core's backup worker is that unit;
otherwise the declaring owner is whoever holds the actor's issuance
(railiance-platform was also asked). Never infer membership.
2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.