diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 7b45ec7..77c02f3 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -37,11 +37,12 @@ | workplan | ACTIVITY-WP-0031 | active | — | workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md | | workplan | ACTIVITY-WP-0032 | active | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md | | workplan | ACTIVITY-WP-0033 | finished | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md | -| workplan | ACTIVITY-WP-0034 | active | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | +| workplan | ACTIVITY-WP-0034 | finished | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | | workplan | ACTIVITY-WP-0035 | active | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | | workplan | ACTIVITY-WP-0036 | active | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | -| workplan | ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md | -| workplan | ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md | +| workplan | ACTIVITY-WP-0037 | active | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| workplan | ACTIVITY-WP-ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md | +| workplan | ACTIVITY-WP-ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md | | workplan | ACTIVITY-WP-ADHOC-2026-08-23 | finished | — | workplans/ADHOC-2026-08-23.md | | workplan | custodian-WP-0001 | done | — | workplans/custodian-WP-0001-temporal-backbone.md | | workplan | custodian-WP-0002 | done | — | workplans/custodian-WP-0002-triggers-ops.md | @@ -208,7 +209,7 @@ | task | ACTIVITY-WP-0033-T02 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md | | task | ACTIVITY-WP-0033-T03 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md | | task | ACTIVITY-WP-0034-T01 | done | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | -| task | ACTIVITY-WP-0034-T02 | progress | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | +| task | ACTIVITY-WP-0034-T02 | done | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md | | task | ACTIVITY-WP-0035-T01 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | | task | ACTIVITY-WP-0035-T02 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | | task | ACTIVITY-WP-0035-T03 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md | @@ -221,10 +222,14 @@ | task | ACTIVITY-WP-0036-T02 | done | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | | task | ACTIVITY-WP-0036-T03 | done | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | | task | ACTIVITY-WP-0036-T04 | progress | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md | -| task | ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md | -| task | ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md | -| task | ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md | -| task | ADHOC-2026-08-20-T01 | done | — | workplans/ADHOC-2026-08-20.md | +| task | ACTIVITY-WP-0037-T01 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-0037-T02 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-0037-T03 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-0037-T04 | wait | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md | +| task | ACTIVITY-WP-ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md | +| task | ACTIVITY-WP-ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md | +| task | ACTIVITY-WP-ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md | +| task | ACTIVITY-WP-ADHOC-2026-08-20-T01 | done | — | workplans/ADHOC-2026-08-20.md | | task | ACTIVITY-WP-ADHOC-2026-08-23-T01 | done | — | workplans/ADHOC-2026-08-23.md | | task | T01 | done | — | workplans/custodian-WP-0001-temporal-backbone.md | | task | T02 | done | — | workplans/custodian-WP-0001-temporal-backbone.md | diff --git a/workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md b/workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md index 537af31..65bbff7 100644 --- a/workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md +++ b/workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md @@ -8,7 +8,7 @@ status: active owner: codex topic_slug: activity-core created: "2026-08-20" -updated: "2026-08-21" +updated: "2026-09-04" related: - ACTIVITY-WP-0021 - ACTIVITY-WP-0022 @@ -180,6 +180,17 @@ duplicate registrar IDs, and railiance-master for the unclaimed retention closeout. The expired retention one-shot is disabled; its existing open ops run remains operator-visible and cannot authorize destructive cleanup. +Progress 2026-09-04: the Binky mail lane was already provisioned; its runtime +discovery was broken. OpenBao was healthy, OpenBao v2.5.4 existed at +`/home/tegwick/.local/bin/bao`, and the mode-0600 AppRole files existed under +`~/.local/rein-aharness/approle-binky-mail`, but the rein claim-loop omitted +both locations. `rein-aharness` commit `aedfadd` now supplies the non-secret +OpenBao/AppRole defaults and includes `~/.local/bin` in `PATH`. The corrected +unit is live and healthy. A value-free smoke proved `read` on the exact Binky +IMAP path, `deny` on a sibling path, and presence of both required IMAP fields; +the rein suite passed 224 tests with one skip. T05 remains `wait` only for its +other named external metadata/retention handoffs. + ## Acceptance - [x] Weekly SBOM fan-out is disabled in source and production diff --git a/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md b/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md index be71e3d..b6c1bd5 100644 --- a/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md +++ b/workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md @@ -4,11 +4,11 @@ type: workplan title: "Freeze controlled SBOM source references across retries" domain: infotech repo: activity-core -status: active +status: finished owner: codex topic_slug: infotech created: "2026-08-22" -updated: "2026-08-23" +updated: "2026-09-04" quality_dor: DoR-Ok quality_dor_at: "2026-08-22" quality_dor_by: codex @@ -43,7 +43,7 @@ tests for normalization, POST payload, retry identity, and terminal reasons. ```task id: ACTIVITY-WP-0034-T02 -status: progress +status: done priority: high state_hub_task_id: "036de401-18de-5a94-8f0d-18d60b64c56a" ``` @@ -77,3 +77,14 @@ An in-worker, read-only report probe against the live selection returned references. The existing schedule was not manually fired. Verification before deploy: 61 focused tests and 435 repository tests passed, with one live integration test skipped. + +Closed 2026-09-04 from natural schedule evidence. The first unassisted weekday +fire at 2026-08-24 07:15 UTC selected exactly three repositories, retained three +`forgejo-archive-v1` references with full revisions, updated `clay-borg`, and +recorded bounded `no-manifest` outcomes for `citation-work` and `config-atlas`. +State Hub progress `f62eaadd-d10c-4a21-8547-293569ed5637` and activity-core run +`4c4594ad-366b-5720-b3f9-44fb300fda70` carry the result. Subsequent weekday +runs continued exposing exactly three new oldest repositories per fire and +reported unavailable sources explicitly as `no-checkout`; `never_count` +therefore progressed from 91 after the controlled fire to 64 on 2026-09-04 +without widening the schedule or substituting a target during a run.