coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
audit-core/WORK-RECORDS.md
tegwick 4d5d989344
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Refine AUDIT-WP-0008 open tasks against draft-8. 
The framework moved from draft-5 to draft-8 while this workplan ran. No finding
was reversed, but three things changed underneath it: R moved to 2 once
rapp-postgres declared the window, a sixth axis V (availability) appeared, and
the implemented-versus-evidenced distinction became a schema field.

T03 reduces: the confirmation-oracle finding landed as Decision 4.5.3 and
question 11 is marked framework-resolved, so no amendment remains -- only our
own position document. The legal question routes to risk-nexus rather than
the-custodian, per §19.11 and policy-nexus INTENT.

T06 reduces to confirmation: all five findings were adopted and the two stale
status lines it was going to flag are already fixed.

T07 is new. V1 needs critical dependencies enumerated, restart recovery
exercised and recovery time measured. The 2026-08-16 reboot walk observed ~40s
of unreadiness but is not an exercise and does not enumerate the dependency set.

T08 is new and covers two defects in our own declaration. provider.R.available
quotes a 30-day horizon we do not solely control -- at P1 the horizon is the
instance maximum across co-residents. And under Decision 6.1, user-engine was
never told what we declared, which makes the declaration drift rather than a
completed change.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-18 15:20:58 +02:00

4.9 KiB
Raw Blame History

Work Records — audit-core

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind ID Status Lane Source
workplan AUDIT-WP-0001 finished — workplans/AUDIT-WP-0001-statehub-bootstrap.md
workplan AUDIT-WP-0002 finished — workplans/AUDIT-WP-0002-pluggable-audit-backend.md
workplan AUDIT-WP-0003 finished — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
workplan AUDIT-WP-0004 finished — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
workplan AUDIT-WP-0005 finished — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
workplan AUDIT-WP-0006 finished — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
workplan AUDIT-WP-0007 finished — workplans/AUDIT-WP-0007-integrity-verification.md
workplan AUDIT-WP-0008 ready — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0001-T01 done — workplans/AUDIT-WP-0001-statehub-bootstrap.md
task AUDIT-WP-0001-T02 done — workplans/AUDIT-WP-0001-statehub-bootstrap.md
task AUDIT-WP-0001-T03 done — workplans/AUDIT-WP-0001-statehub-bootstrap.md
task AUDIT-WP-0002-T01 done — workplans/AUDIT-WP-0002-pluggable-audit-backend.md
task AUDIT-WP-0003-T01 done — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0003-T02 done — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0003-T03 cancel — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0003-T04 cancel — workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md
task AUDIT-WP-0004-T01 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T02 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T03 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T04 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T05 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T06 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0004-T07 done — workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md
task AUDIT-WP-0005-T01 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T02 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T03 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T04 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T05 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0005-T06 done — workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
task AUDIT-WP-0006-T01 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T02 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T03 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T04 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0006-T05 done — workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md
task AUDIT-WP-0007-T01 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T02 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T03 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T04 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0007-T05 done — workplans/AUDIT-WP-0007-integrity-verification.md
task AUDIT-WP-0008-T01 done — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T02 done — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T03 todo — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T04 done — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T05 todo — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md
task AUDIT-WP-0008-T06 todo — workplans/AUDIT-WP-0008-tenancy-posture-alignment.md