audit-core/workplans
tegwick 7728fde9b4
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
AUDIT-WP-0018-T02 done: nk-bounded-executor sender scope and sso ingress prepared
- deploy/senders-scope.{json,yaml}: nk-bounded-executor (source
  net-kingdom.bounded-executor, tenants [platform], write-only,
  secret_policy reject, load-bearing); inert until a token is seeded
- senders.py: the scope overlay may tighten secret_policy redact->reject,
  never relax it
- networkpolicies.yaml: audit-core-nk-bounded-executor-ingress (sso AND
  app.kubernetes.io/name=bounded-executor, TCP 8080); not applied
- tests on the executor's envelope shape: 202, 200 duplicate, 409, wrong
  source/tenant, secret-shaped step check 400
- T03 unblocked (window bound = admission window.not_after)
- docs: emitter defect: executor AuditCore.emit rejects 202

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-10-31 23:02:44 +01:00
..
ADHOC-2026-09-14.md chore(consistency): record ADHOC-2026-09-14 hub identifiers 2026-09-14 22:15:16 +02:00
ADHOC-2026-09-24.md chore(consistency): write back AUDIT-IN-0006 and ADHOC-2026-09-24 ids 2026-09-24 07:26:30 +02:00
ADHOC-2026-10-15.md Persist State Hub identifiers for freshness adoption record 2026-10-15 19:32:05 +02:00
AUDIT-WP-0001-statehub-bootstrap.md Complete State Hub bootstrap workplans (WP-0001) 2026-06-22 23:34:58 +02:00
AUDIT-WP-0002-pluggable-audit-backend.md Moved audit forward somewhat 2026-07-04 00:39:03 +02:00
AUDIT-WP-0003-user-engine-event-ingestion-service.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:07:24 +02:00
AUDIT-WP-0004-receiver-correctness-and-hardening.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:07:24 +02:00
AUDIT-WP-0005-postgres-store-and-production-deployment.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:07:24 +02:00
AUDIT-WP-0006-honest-custody-and-canon-join.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:07:24 +02:00
AUDIT-WP-0007-integrity-verification.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:07:24 +02:00
AUDIT-WP-0008-tenancy-posture-alignment.md docs: record remaining Whitehat E2 evidence gates 2026-10-04 03:06:37 +02:00
AUDIT-WP-0009-evidence-role-conformance.md Evaluate declared emission cadence and close AUDIT-WP-0009 (T05) 2026-09-22 22:44:45 +02:00
AUDIT-WP-0010-tenant-engine-sender-admission.md Prove tenant-engine live accept and close AUDIT-WP-0010 2026-09-15 22:21:22 +02:00
AUDIT-WP-0011-informed-decision-memo-posed.md chore(consistency): sync task status from DB [auto] 2026-10-03 21:19:12 +02:00
AUDIT-WP-0012-chained-sqlite-import.md fix: repair chained imports and track blocked evidence dependencies 2026-10-04 11:36:06 +02:00
AUDIT-WP-0013-cross-repo-sender-admission.md AUDIT-WP-0013-T06: independent full-scope readers may count any source (NK-WP-0035-T04) 2026-10-28 09:49:10 +01:00
AUDIT-WP-0014-execution-attribution-receipt.md chore(consistency): sync task status from DB [auto] 2026-10-04 12:08:23 +02:00
AUDIT-WP-0015-independent-evidence-returns.md chore(consistency): sync task status from DB [auto] 2026-10-04 12:08:23 +02:00
AUDIT-WP-0016-wave2-resource-right-sizing.md Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071) 2026-10-22 00:55:04 +02:00
AUDIT-WP-0017-production-audit-sources-and-correlation.md chore(consistency): write back State Hub ids 2026-10-28 01:05:31 +01:00
AUDIT-WP-0018-bounded-executor-receipt-custody.md AUDIT-WP-0018-T02 done: nk-bounded-executor sender scope and sso ingress prepared 2026-10-31 23:02:44 +01:00