tegwick
9737577f0b
ACTIVITY-WP-0046: grant v2 carries a publish scope (remote, branch, path prefixes inside allowed_paths, fast-forward only) in its canonical grant id; v1 stays local-only with unchanged ids. ACTIVITY-WP-0047: disabled daily-security-flow definition dispatching the the-custodian runner as an ops_run (CUST-WP-0079-T03). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 296847@bnt-lap001 Assistant-Session: 4f997d46-1b9d-4131-9699-0c353a215155
1.8 KiB
| id | type | title | domain | repo | status | owner | topic_slug | created | updated | flavor | related | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ACTIVITY-WP-0047 | workplan | Adopt the daily security-flow schedule (CUST-WP-0079-T03) | infotech | activity-core | active | claude-activity-core | activity-core | 2026-10-13 | 2026-10-13 | implementation |
|
Origin: the-custodian handed over the daily security-flow lane (message
117e538e, case case:cross-owner:CUST-WP-0079-T03:activity-core). The workstation
user systemd bus is unavailable, so no host timer can run it. Founder accepted
adoption on 2026-10-13.
Boundary: Activity Core owns the schedule and the ops_run record. the-custodian
owns scripts/security_flow_daily.py, its report and delivery checkpoints. A
rein runs the fixed command; Activity Core does not execute it (SCOPE: no
general execution). The run carries no repository grant.
Source definition
id: ACTIVITY-WP-0047-T01
status: done
priority: high
activity-definitions/daily-security-flow.md: daily 07:30 Europe/Berlin,
misfire skip, one unconditional rule emitting an ops_run on
harness.agent-dev-local@1.1.1 with the fixed command and correlation
CUST-WP-0079-T03. Committed with enabled: false.
Activation
id: ACTIVITY-WP-0047-T02
status: wait
priority: high
Wait: the claiming rein (rein-aharness, workstation profile) confirms it can
run the command against workstation checkouts with hub access. Then flip
enabled: true, release through the normal image/GitOps path, admin-sync, and
run one manual trigger.
First unassisted fire
id: ACTIVITY-WP-0047-T03
status: wait
priority: medium
Observe one scheduled fire end to end (ops_run completed, report written, no duplicate deliveries) and tell the-custodian so CUST-WP-0079-T03 can close. Wait: T02.