diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 82bcba3..8a3ca9d 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -41,6 +41,7 @@ | workplan | ACTIVITY-WP-0035 | finished | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | | workplan | ACTIVITY-WP-0036 | finished | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | | workplan | ACTIVITY-WP-0038 | finished | — | workplans/ACTIVITY-WP-0038-repository-grant-close-reconciliation.md | +| workplan | ACTIVITY-WP-0039 | active | — | workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md | | workplan | ACTIVITY-WP-ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md | | workplan | ACTIVITY-WP-ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md | | workplan | ACTIVITY-WP-ADHOC-2026-08-23 | finished | — | workplans/ADHOC-2026-08-23.md | @@ -227,6 +228,10 @@ | task | ACTIVITY-WP-0038-T02 | done | — | workplans/ACTIVITY-WP-0038-repository-grant-close-reconciliation.md | | task | ACTIVITY-WP-0038-T03 | done | — | workplans/ACTIVITY-WP-0038-repository-grant-close-reconciliation.md | | task | ACTIVITY-WP-0038-T04 | done | — | workplans/ACTIVITY-WP-0038-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-0039-T01 | done | — | workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md | +| task | ACTIVITY-WP-0039-T02 | wait | — | workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md | +| task | ACTIVITY-WP-0039-T03 | wait | — | workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md | +| task | ACTIVITY-WP-0039-T04 | wait | — | workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md | | task | ACTIVITY-WP-ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md | | task | ACTIVITY-WP-ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md | | task | ACTIVITY-WP-ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md | diff --git a/workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md b/workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md index e56092f..42b4bcd 100644 --- a/workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md +++ b/workplans/ACTIVITY-WP-0039-multi-worker-identity-and-token-custody.md @@ -17,6 +17,7 @@ related: - SECRETS-WP-0009-T03 - SECRETS-WP-0011-T04 - RPF-WP-0045 +state_hub_workstream_id: "053ef7c6-c2cf-5f50-aabf-09034c66d1ce" --- # Multiple Queue Worker Identities with OpenBao-Custodied Tokens @@ -58,6 +59,7 @@ guarantee and extends it to a set of identities. id: ACTIVITY-WP-0039-T01 status: done priority: high +state_hub_task_id: "a82a498a-0673-5a29-94ae-0055672f8e4e" ``` Add `ACTIVITY_CORE_WORKERS`, a non-secret comma-separated list of @@ -81,6 +83,7 @@ fail-closed case, and operator access under broken worker configuration. id: ACTIVITY-WP-0039-T02 status: wait priority: high +state_hub_task_id: "1400bf41-e00a-56cc-9ccf-a1cf023b220a" ``` Paths, one per identity, each with field `token`: @@ -103,6 +106,7 @@ confirm the metered path for its catalog. id: ACTIVITY-WP-0039-T03 status: wait priority: high +state_hub_task_id: "73d7f032-5ec3-550e-83ac-b9852c09ace4" ``` Founder-attended, through `warden access openbao-platform-admin-login --exec` @@ -125,6 +129,7 @@ Done when both paths hold a value and no value has been printed or logged. id: ACTIVITY-WP-0039-T04 status: wait priority: high +state_hub_task_id: "13e90456-02ff-52e7-9296-1fd80761fab4" ``` Needs the founder's go-ahead (`ADMINISTER @ realm:kubernetes/railiance01`,