tegwick
83e6446807
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 296847@bnt-lap001 Assistant-Session: 4f997d46-1b9d-4131-9699-0c353a215155
66 lines
2 KiB
Markdown
66 lines
2 KiB
Markdown
---
|
|
id: ACTIVITY-WP-0047
|
|
type: workplan
|
|
title: "Adopt the daily security-flow schedule (CUST-WP-0079-T03)"
|
|
domain: infotech
|
|
repo: activity-core
|
|
status: active
|
|
owner: claude-activity-core
|
|
topic_slug: activity-core
|
|
created: "2026-10-13"
|
|
updated: "2026-10-13"
|
|
flavor: implementation
|
|
related: [CUST-WP-0079]
|
|
state_hub_workstream_id: "ee97869b-dca2-54c9-aa18-0b479c244fb3"
|
|
---
|
|
|
|
Origin: the-custodian handed over the daily security-flow lane (message
|
|
117e538e, case `case:cross-owner:CUST-WP-0079-T03:activity-core`). The workstation
|
|
user systemd bus is unavailable, so no host timer can run it. Founder accepted
|
|
adoption on 2026-10-13.
|
|
|
|
Boundary: Activity Core owns the schedule and the ops_run record. the-custodian
|
|
owns `scripts/security_flow_daily.py`, its report and delivery checkpoints. A
|
|
rein runs the fixed command; Activity Core does not execute it (SCOPE: no
|
|
general execution). The run carries no repository grant.
|
|
|
|
## Source definition
|
|
|
|
```task
|
|
id: ACTIVITY-WP-0047-T01
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "cbe8cfe2-43ef-5a31-b163-c473572754b7"
|
|
```
|
|
|
|
`activity-definitions/daily-security-flow.md`: daily 07:30 Europe/Berlin,
|
|
misfire skip, one unconditional rule emitting an ops_run on
|
|
`harness.agent-dev-local@1.1.1` with the fixed command and correlation
|
|
`CUST-WP-0079-T03`. Committed with `enabled: false`.
|
|
|
|
## Activation
|
|
|
|
```task
|
|
id: ACTIVITY-WP-0047-T02
|
|
status: wait
|
|
priority: high
|
|
state_hub_task_id: "d0d5fddd-2d73-5156-aac3-49837aec2988"
|
|
```
|
|
|
|
Wait: the claiming rein (rein-aharness, workstation profile) confirms it can
|
|
run the command against workstation checkouts with hub access. Then flip
|
|
`enabled: true`, release through the normal image/GitOps path, admin-sync, and
|
|
run one manual trigger.
|
|
|
|
## First unassisted fire
|
|
|
|
```task
|
|
id: ACTIVITY-WP-0047-T03
|
|
status: wait
|
|
priority: medium
|
|
state_hub_task_id: "d692a3eb-7878-5405-931c-e11db494f803"
|
|
```
|
|
|
|
Observe one scheduled fire end to end (ops_run completed, report written, no
|
|
duplicate deliveries) and tell the-custodian so CUST-WP-0079-T03 can close.
|
|
Wait: T02.
|