fix(workplans): adopt ADR-007 derived identifiers for unregistered records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 20:07:24 +02:00
parent 8c20dfc650
commit 0bc4165cf2
6 changed files with 41 additions and 41 deletions

View file

@ -11,7 +11,7 @@ created: "2026-08-17"
updated: "2026-08-22"
depends_on:
- AUDIT-WP-0007
state_hub_workstream_id: "84c01552-4c65-45fd-bf6c-7daab0ecc9b6"
state_hub_workstream_id: "a9a248b2-d26c-503e-a8fc-4f3675e6ed51"
---
# AUDIT-WP-0008 — Tenancy posture declaration and read-path enforcement
@ -280,7 +280,7 @@ both would be concealment, and §6 would be right to call it that.
id: AUDIT-WP-0008-T01
status: done
priority: high
state_hub_task_id: "65f3109a-fa98-459a-9e59-d7ac211bd2bc"
state_hub_task_id: "3b7be6c5-1861-57d2-a9ab-5770c3ea544d"
```
Publish the posture vector. **Rewritten against draft-7**, which landed after
this task was written and moved the target: Decision 5.4 fixes the location at
@ -321,7 +321,7 @@ Two additions draft-7 forced that the original task did not anticipate:
id: AUDIT-WP-0008-T02
status: done
priority: high
state_hub_task_id: "224a12c0-d646-4c7f-9215-120e1ede4691"
state_hub_task_id: "3cf1d80f-4f35-5711-aa0a-aeb27912e2f6"
```
Reply to `rapp-postgres` message `56b77e20-0152-4e09-8f76-99640269063b`.
**Runs first.** Carries four things: the retention position (ceiling stays 365,
@ -339,7 +339,7 @@ does not wait on T01. Mark the message read on send.
id: AUDIT-WP-0008-T03
status: done
priority: high
state_hub_task_id: "0003954e-5033-457f-b9aa-97efdefe9beb"
state_hub_task_id: "3c495a5c-6b0d-5fae-b237-626d298e7b2c"
```
Answer question 11 in `docs/erasure-and-audit.md`.
@ -363,7 +363,7 @@ publishable with the dependency hidden.
id: AUDIT-WP-0008-T04
status: done
priority: high
state_hub_task_id: "e4440db3-6eb0-49f6-9aa9-930db8be9d18"
state_hub_task_id: "ab07af53-0ca8-5d8e-b699-128d462e30a2"
```
Bind the read path to permitted tenants. `permits_tenant` governs read as it
governs write, at the same choke point: tenant-scope `/v1/events`,
@ -376,7 +376,7 @@ and the operator runbook. Raises E to 2 on both paths; update T01's declaration.
id: AUDIT-WP-0008-T05
status: done
priority: medium
state_hub_task_id: "30b56b30-e7eb-4873-aa7c-f4a3bf2fcb24"
state_hub_task_id: "76d3b34e-df74-5af0-8025-e77e8644d199"
```
Produce the §13 E2 evidence artifact — adversarial, with a review date: an
identity bound to tenant A demonstrably cannot read tenant B. Coordinate with
@ -531,7 +531,7 @@ in another manual T05 sequence.
id: AUDIT-WP-0008-T06
status: done
priority: medium
state_hub_task_id: "ed58ca37-755b-4284-b1ac-2a02baaceb21"
state_hub_task_id: "c0b6e317-bfde-5ba7-b92a-6545257e0dff"
```
Close the review loop with `net-kingdom`.
@ -550,7 +550,7 @@ duty, so the correction is ours to send unprompted or it will simply sit stale.
id: AUDIT-WP-0008-T07
status: progress
priority: high
state_hub_task_id: "e972a8f7-e6ee-4522-bc76-fb69d71e5ed5"
state_hub_task_id: "4e3ab790-daa6-5fbb-837e-9a9a26848201"
```
Reach **V1** on the availability axis, new in draft-8.
@ -643,7 +643,7 @@ environment-dependent skips.
id: AUDIT-WP-0008-T08
status: done
priority: high
state_hub_task_id: "50eed5e2-06d6-4bdc-913d-5a8cd41ce613"
state_hub_task_id: "f9d4ec51-6092-5c05-82fb-30e5dd201229"
```
Disclose the shared-substrate retention coupling in our **provider** block, and
notify `user-engine` under Decision 6.1.