coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
audit-core/WORK-RECORDS.md
tegwick a2d84bdd9b
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Declare the tenancy posture vector (AUDIT-WP-0008-T01). 
Written against draft-7, which landed after the task was drafted and moved the
target. Decision 5.4 fixes the location at tenancy.yaml in the repo root rather
than docs/, and fixes the schema: current, target, reviewed, gap,
placement_exceptions, service_class, per-path detail, provider block.

Declares I1 A2 E1 P1 R1. E is quoted at 1 although T04 put the E2 mechanism on
both paths, because §13.2 states a passing CI run is not E2 evidence -- the
artifact is adversarial, compares separate tenant contexts and carries a review
date. Our cross-tenant tests are mechanical, so under §13.1 the level is not
claimable until T05. The mechanism is recorded in paths.E and the reason in
gap.E. Claiming E2 off unit tests would be the overclaim §6 prohibits, and
refusing that reasoning is what found the read-path defect.

R stays at 1: R2 needs backupRetentionDays in rapp-postgres's consumer file,
requested in T02 and not ours to declare.

Two additions draft-7 forced. A credentials gap under Decision 9.2 -- our own
finding, adopted as a rule, and it binds us: ingest credentials are static
long-lived bearer tokens, declared as a stated gap rather than a silent
exclusion. And a provides block under Decision 5.5, declaring what a sender can
reach through this service: E2 now, E3 pending ADR-0003, E4 and R4 unreachable.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-17 22:55:31 +02:00

4.9 KiB
Raw Blame History

Work Records — audit-core

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind ID Status Lane Source
workplan AUDIT-WP-0001 finished — workplans/AUDIT-WP-0001-statehub-bootstrap.md
workplan AUDIT-WP-0002 finished — workplans/AUDIT-WP-0002-pluggable-audit-backend.md
workplan AUDIT-WP-0003 finished — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
workplan AUDIT-WP-0004 finished — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
workplan AUDIT-WP-0005 finished — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
workplan AUDIT-WP-0006 finished — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
workplan AUDIT-WP-0007 finished — workplans/AUDIT-WP-0007-integrity-verification.md
workplan AUDIT-WP-0008 ready — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0001-T01 done — workplans/AUDIT-WP-0001-statehub-bootstrap.md
task AUDIT-WP-0001-T02 done — workplans/AUDIT-WP-0001-statehub-bootstrap.md
task AUDIT-WP-0001-T03 done — workplans/AUDIT-WP-0001-statehub-bootstrap.md
task AUDIT-WP-0002-T01 done — workplans/AUDIT-WP-0002-pluggable-audit-backend.md
task AUDIT-WP-0003-T01 done — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0003-T02 done — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0003-T03 cancel — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0003-T04 cancel — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0004-T01 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T02 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T03 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T04 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T05 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T06 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T07 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0005-T01 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T02 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T03 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T04 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T05 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T06 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0006-T01 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T02 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T03 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T04 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T05 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0007-T01 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T02 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T03 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T04 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T05 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0008-T01 todo — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T02 done — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T03 todo — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T04 done — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T05 todo — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T06 todo — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md