diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index fcd2a3d..94432a5 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -17,6 +17,7 @@ | workplan | CSOC-WP-0007 | finished | — | workplans/CSOC-WP-0007-safe-transfer-readiness.md | | workplan | CSOC-WP-0008 | active | — | workplans/CSOC-WP-0008-production-transfer-acceptance.md | | workplan | CSOC-WP-0009 | finished | — | workplans/CSOC-WP-0009-usecase-regression-infrastructure.md | +| workplan | CSOC-WP-0010 | active | — | workplans/CSOC-WP-0010-platform-email-facilities.md | | task | CSOC-WP-0001-T01 | done | — | workplans/CSOC-WP-0001-bubble-io-exit-assessment.md | | task | CSOC-WP-0001-T02 | done | — | workplans/CSOC-WP-0001-bubble-io-exit-assessment.md | | task | CSOC-WP-0001-T03 | done | — | workplans/CSOC-WP-0001-bubble-io-exit-assessment.md | @@ -68,6 +69,12 @@ | task | CSOC-WP-0009-T02 | done | — | workplans/CSOC-WP-0009-usecase-regression-infrastructure.md | | task | CSOC-WP-0009-T03 | done | — | workplans/CSOC-WP-0009-usecase-regression-infrastructure.md | | task | CSOC-WP-0009-T04 | done | — | workplans/CSOC-WP-0009-usecase-regression-infrastructure.md | +| task | CSOC-WP-0010-T01 | done | — | workplans/CSOC-WP-0010-platform-email-facilities.md | +| task | CSOC-WP-0010-T02 | progress | — | workplans/CSOC-WP-0010-platform-email-facilities.md | +| task | CSOC-WP-0010-T03 | wait | — | workplans/CSOC-WP-0010-platform-email-facilities.md | +| task | CSOC-WP-0010-T04 | todo | — | workplans/CSOC-WP-0010-platform-email-facilities.md | +| task | CSOC-WP-0010-T05 | todo | — | workplans/CSOC-WP-0010-platform-email-facilities.md | +| task | CSOC-WP-0010-T06 | todo | — | workplans/CSOC-WP-0010-platform-email-facilities.md | | intake | CSOC-IN-0001 | closed | blue | docs/intakes/csoc-residuals.md | | intake | CSOC-IN-0002 | closed | green | docs/intakes/csoc-residuals.md | | intake | CSOC-IN-0003 | open | blue | docs/intakes/csoc-residuals.md | diff --git a/docs/release/platform-email-2026-10-06.md b/docs/release/platform-email-2026-10-06.md index 47e007b..19c5801 100644 --- a/docs/release/platform-email-2026-10-06.md +++ b/docs/release/platform-email-2026-10-06.md @@ -98,3 +98,11 @@ email remains the user's existing manual clipboard/mail workflow. References: owner telemetry custody/native receipt, EMAIL-WP-0004/package manifests, and https://www.authelia.com/configuration/notifications/smtp/ (native syntax, startup check sends no email, TLS and password-file support). + +Exact live activation decision: d95b4c9f-30a3-4ed6-b18f-d1b9fa20d84e (pending founder answer). + +Custody helper/CCR/workplan preparation is committed on platform owner main +at5d889cfc1d5cd41dc5320600dece9bd29ab03a44; Repo Manager receipt +primary/railiance01 applied with expected=derived exact commit. This is source +registration, not mailbox-consumer admission. NetKingdom package is on the +csoc-platform-mail review branch until exact live go. diff --git a/workplans/CSOC-WP-0010-platform-email-facilities.md b/workplans/CSOC-WP-0010-platform-email-facilities.md index 19657c4..ca99794 100644 --- a/workplans/CSOC-WP-0010-platform-email-facilities.md +++ b/workplans/CSOC-WP-0010-platform-email-facilities.md @@ -9,6 +9,7 @@ owner: codex topic_slug: coulomb-social created: "2026-10-06" updated: "2026-10-06" +state_hub_workstream_id: "c0aa46eb-8266-58d4-92a7-3e4e78f5c90b" --- # User milestone @@ -29,6 +30,7 @@ Current evidence: docs/release/platform-email-2026-10-06.md. id: CSOC-WP-0010-T01 status: done priority: high +state_hub_task_id: "dff23ff3-e07d-5221-bb4d-52a15becf7f2" ``` Fresh read-only inspection: email-connect1/1 healthy, /healthz200, runtime SecretSynced, sender forgejo@coulomb.social. platform@coulomb.social existing owner custody has recorded September28 native SMTP/auth and provider-accepted test; telemetry projection currently SecretSynced. This does not prove a fresh inbox receipt or inbound operation. @@ -39,6 +41,7 @@ Fresh read-only inspection: email-connect1/1 healthy, /healthz200, runtime Secre id: CSOC-WP-0010-T02 status: progress priority: high +state_hub_task_id: "caae9504-25e7-583a-8f62-c5d604f11b71" ``` NK-WP-0047 and RPF-WP-0052/CCR-2026-0035 prepare native Authelia SMTP, TLS verification, scoped ESO password-file mount and fixed consumer admission. Implement and test without credentials in code. Obtain exact founder live go/attended owner admission; validate runtime and deploy. Existing deployment approval does not authorize mailbox-access changes. @@ -49,6 +52,7 @@ NK-WP-0047 and RPF-WP-0052/CCR-2026-0035 prepare native Authelia SMTP, TLS verif id: CSOC-WP-0010-T03 status: wait priority: high +state_hub_task_id: "929d6200-f060-5fa0-a324-f15da252b2ca" ``` User requests a NEW reset for tegwick after SMTP activation, receives mail at the existing directory email, sets a password privately, and completes app.coulomb.social login. Confirm inbox receipt separately from provider acceptance; keep reset URLs, tokens, passwords and private mail content out of Git/Hub/chat. Close CSOC-WP-0008-T11 only after user acceptance. @@ -59,6 +63,7 @@ User requests a NEW reset for tegwick after SMTP activation, receives mail at th id: CSOC-WP-0010-T04 status: todo priority: high +state_hub_task_id: "ca41be06-3611-5647-b469-4f89f56f77f9" ``` Extend existing email-connect with explicit caller identities, approved templates, per-caller limits, idempotent retries, suppression/bounce handling and redacted delivery states. Replace forgejo sender with platform identity only through reviewed custody and rollout. Reuse native SMTP for authentication messages, HTTP notification API for supported application templates; do not widen current user-engine-only ingress globally. @@ -69,6 +74,7 @@ Extend existing email-connect with explicit caller identities, approved template id: CSOC-WP-0010-T05 status: todo priority: high +state_hub_task_id: "d9e165d9-dd0b-54c2-bda1-bd314b999b5b" ``` Confirm who owns/reads platform inbox, reply routing, monitored bounces, inbound IMAP/provider access, retention and support procedure. Verify domain MX/SPF/DKIM/DMARC and actual inbox receipt with the provider owner. Mailbox existence or SMTP AUTH is not inbox access proof. No unsolicited mailbox scans or automatic response sends. @@ -79,6 +85,9 @@ Confirm who owns/reads platform inbox, reply routing, monitored bounces, inbound id: CSOC-WP-0010-T06 status: todo priority: high +state_hub_task_id: "97a2da91-debe-5ce2-9b68-1965a5c5abfe" ``` Catalogue password reset, verification/invitation, and future user-approved notifications. Use synthetic transport fixtures; test authorized caller, invalid recipient/template, retry/idempotency, provider failure and token redaction. ReichelAg protocol distribution remains manual clipboard/email unless the user separately chooses app sending. + +Exact live activation decision: d95b4c9f-30a3-4ed6-b18f-d1b9fa20d84e; no runtime activation/mail send.