- deploy/senders-scope.{json,yaml}: nk-bounded-executor (source
net-kingdom.bounded-executor, tenants [platform], write-only,
secret_policy reject, load-bearing); inert until a token is seeded
- senders.py: the scope overlay may tighten secret_policy redact->reject,
never relax it
- networkpolicies.yaml: audit-core-nk-bounded-executor-ingress (sso AND
app.kubernetes.io/name=bounded-executor, TCP 8080); not applied
- tests on the executor's envelope shape: 202, 200 duplicate, 409, wrong
source/tenant, secret-shaped step check 400
- T03 unblocked (window bound = admission window.not_after)
- docs: emitter defect: executor AuditCore.emit rejects 202
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
11 KiB
11 KiB
Work Records — audit-core
Generated by
statehub fix-consistency(CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]
| Kind | ID | Status | Lane | Source |
|---|---|---|---|---|
| workplan | ADHOC-2026-09-14 | finished | — | workplans/ADHOC-2026-09-14.md |
| workplan | ADHOC-2026-09-24 | finished | — | workplans/ADHOC-2026-09-24.md |
| workplan | ADHOC-2026-10-15 | finished | — | workplans/ADHOC-2026-10-15.md |
| workplan | AUDIT-WP-0001 | finished | — | workplans/AUDIT-WP-0001-statehub-bootstrap.md |
| workplan | AUDIT-WP-0002 | finished | — | workplans/AUDIT-WP-0002-pluggable-audit-backend.md |
| workplan | AUDIT-WP-0003 | finished | — | workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md |
| workplan | AUDIT-WP-0004 | finished | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| workplan | AUDIT-WP-0005 | finished | — | workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md |
| workplan | AUDIT-WP-0006 | finished | — | workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md |
| workplan | AUDIT-WP-0007 | finished | — | workplans/AUDIT-WP-0007-integrity-verification.md |
| workplan | AUDIT-WP-0008 | finished | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| workplan | AUDIT-WP-0009 | finished | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| workplan | AUDIT-WP-0010 | finished | — | workplans/AUDIT-WP-0010-tenant-engine-sender-admission.md |
| workplan | AUDIT-WP-0011 | finished | — | workplans/AUDIT-WP-0011-informed-decision-memo-posed.md |
| workplan | AUDIT-WP-0012 | finished | — | workplans/AUDIT-WP-0012-chained-sqlite-import.md |
| workplan | AUDIT-WP-0013 | blocked | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| workplan | AUDIT-WP-0014 | blocked | — | workplans/AUDIT-WP-0014-execution-attribution-receipt.md |
| workplan | AUDIT-WP-0015 | blocked | — | workplans/AUDIT-WP-0015-independent-evidence-returns.md |
| workplan | AUDIT-WP-0016 | finished | — | workplans/AUDIT-WP-0016-wave2-resource-right-sizing.md |
| workplan | AUDIT-WP-0017 | proposed | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| workplan | AUDIT-WP-0018 | active | — | workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md |
| task | ADHOC-2026-09-14-T01 | done | — | workplans/ADHOC-2026-09-14.md |
| task | ADHOC-2026-09-24-T01 | done | — | workplans/ADHOC-2026-09-24.md |
| task | ADHOC-2026-10-15-T01 | done | — | workplans/ADHOC-2026-10-15.md |
| task | AUDIT-WP-0001-T01 | done | — | workplans/AUDIT-WP-0001-statehub-bootstrap.md |
| task | AUDIT-WP-0001-T02 | done | — | workplans/AUDIT-WP-0001-statehub-bootstrap.md |
| task | AUDIT-WP-0001-T03 | done | — | workplans/AUDIT-WP-0001-statehub-bootstrap.md |
| task | AUDIT-WP-0002-T01 | done | — | workplans/AUDIT-WP-0002-pluggable-audit-backend.md |
| task | AUDIT-WP-0003-T01 | done | — | workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md |
| task | AUDIT-WP-0003-T02 | done | — | workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md |
| task | AUDIT-WP-0003-T03 | cancel | — | workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md |
| task | AUDIT-WP-0003-T04 | cancel | — | workplans/AUDIT-WP-0003-user-engine-event-ingestion-service.md |
| task | AUDIT-WP-0004-T01 | done | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| task | AUDIT-WP-0004-T02 | done | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| task | AUDIT-WP-0004-T03 | done | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| task | AUDIT-WP-0004-T04 | done | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| task | AUDIT-WP-0004-T05 | done | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| task | AUDIT-WP-0004-T06 | done | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| task | AUDIT-WP-0004-T07 | done | — | workplans/AUDIT-WP-0004-receiver-correctness-and-hardening.md |
| task | AUDIT-WP-0005-T01 | done | — | workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md |
| task | AUDIT-WP-0005-T02 | done | — | workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md |
| task | AUDIT-WP-0005-T03 | done | — | workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md |
| task | AUDIT-WP-0005-T04 | done | — | workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md |
| task | AUDIT-WP-0005-T05 | done | — | workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md |
| task | AUDIT-WP-0005-T06 | done | — | workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md |
| task | AUDIT-WP-0006-T01 | done | — | workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md |
| task | AUDIT-WP-0006-T02 | done | — | workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md |
| task | AUDIT-WP-0006-T03 | done | — | workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md |
| task | AUDIT-WP-0006-T04 | done | — | workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md |
| task | AUDIT-WP-0006-T05 | done | — | workplans/AUDIT-WP-0006-honest-custody-and-canon-join.md |
| task | AUDIT-WP-0007-T01 | done | — | workplans/AUDIT-WP-0007-integrity-verification.md |
| task | AUDIT-WP-0007-T02 | done | — | workplans/AUDIT-WP-0007-integrity-verification.md |
| task | AUDIT-WP-0007-T03 | done | — | workplans/AUDIT-WP-0007-integrity-verification.md |
| task | AUDIT-WP-0007-T04 | done | — | workplans/AUDIT-WP-0007-integrity-verification.md |
| task | AUDIT-WP-0007-T05 | done | — | workplans/AUDIT-WP-0007-integrity-verification.md |
| task | AUDIT-WP-0008-T01 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0008-T02 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0008-T03 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0008-T04 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0008-T05 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0008-T06 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0008-T07 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0008-T08 | done | — | workplans/AUDIT-WP-0008-tenancy-posture-alignment.md |
| task | AUDIT-WP-0009-T01 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T02 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T03 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T04 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T05 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T06 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T07 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T08 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T09 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T10 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T11 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T12 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0009-T13 | done | — | workplans/AUDIT-WP-0009-evidence-role-conformance.md |
| task | AUDIT-WP-0010-T01 | done | — | workplans/AUDIT-WP-0010-tenant-engine-sender-admission.md |
| task | AUDIT-WP-0010-T02 | done | — | workplans/AUDIT-WP-0010-tenant-engine-sender-admission.md |
| task | AUDIT-WP-0010-T03 | done | — | workplans/AUDIT-WP-0010-tenant-engine-sender-admission.md |
| task | AUDIT-WP-0010-T04 | done | — | workplans/AUDIT-WP-0010-tenant-engine-sender-admission.md |
| task | AUDIT-WP-0010-T05 | done | — | workplans/AUDIT-WP-0010-tenant-engine-sender-admission.md |
| task | AUDIT-WP-0011-T01 | done | — | workplans/AUDIT-WP-0011-informed-decision-memo-posed.md |
| task | AUDIT-WP-0012-T01 | done | — | workplans/AUDIT-WP-0012-chained-sqlite-import.md |
| task | AUDIT-WP-0012-T02 | done | — | workplans/AUDIT-WP-0012-chained-sqlite-import.md |
| task | AUDIT-WP-0012-T03 | done | — | workplans/AUDIT-WP-0012-chained-sqlite-import.md |
| task | AUDIT-WP-0013-T01 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T02 | wait | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T03 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T04 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T05 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T06 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T07 | wait | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0014-T01 | done | — | workplans/AUDIT-WP-0014-execution-attribution-receipt.md |
| task | AUDIT-WP-0014-T02 | wait | — | workplans/AUDIT-WP-0014-execution-attribution-receipt.md |
| task | AUDIT-WP-0015-T01 | wait | — | workplans/AUDIT-WP-0015-independent-evidence-returns.md |
| task | AUDIT-WP-0015-T02 | wait | — | workplans/AUDIT-WP-0015-independent-evidence-returns.md |
| task | AUDIT-WP-0016-T01 | done | — | workplans/AUDIT-WP-0016-wave2-resource-right-sizing.md |
| task | AUDIT-WP-0017-T01 | wait | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| task | AUDIT-WP-0017-T02 | wait | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| task | AUDIT-WP-0017-T03 | wait | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| task | AUDIT-WP-0017-T04 | wait | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| task | AUDIT-WP-0017-T05 | todo | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| task | AUDIT-WP-0017-T06 | todo | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| task | AUDIT-WP-0017-T07 | wait | — | workplans/AUDIT-WP-0017-production-audit-sources-and-correlation.md |
| task | AUDIT-WP-0018-T01 | done | — | workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md |
| task | AUDIT-WP-0018-T02 | done | — | workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md |
| task | AUDIT-WP-0018-T03 | todo | — | workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md |
| intake | AUDIT-IN-0001 | closed | — | intakes/intakes.md |
| intake | AUDIT-IN-0002 | closed | — | intakes/intakes.md |
| intake | AUDIT-IN-0003 | closed | — | intakes/intakes.md |
| intake | AUDIT-IN-0004 | closed | — | intakes/intakes.md |
| intake | AUDIT-IN-0005 | closed | — | intakes/intakes.md |
| intake | AUDIT-IN-0006 | accepted | — | intakes/intakes.md |