coulomb/email-connect
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Index scoped caller admission work in State Hub
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b
This commit is contained in:
tegwick 2026-10-08 12:19:57 +02:00
parent 1bf4235684
commit c9756b093f
2 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
WORK-RECORDS.md
View file

@ -15,6 +15,7 @@
| workplan | EMAIL-WP-0005 | finished | — | workplans/EMAIL-WP-0005-test-mailbox-harness.md |
| workplan | EMAIL-WP-0006 | finished | — | workplans/EMAIL-WP-0006-verification-retry-safety.md |
| workplan | EMAIL-WP-0007 | active | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
| workplan | EMAIL-WP-0008 | active | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |
| task | EMAIL-WP-0001-T01 | done | — | workplans/EMAIL-WP-0001-repo-onboarding.md |
| task | EMAIL-WP-0001-T02 | done | — | workplans/EMAIL-WP-0001-repo-onboarding.md |
| task | EMAIL-WP-0001-T03 | done | — | workplans/EMAIL-WP-0001-repo-onboarding.md |
@ -56,3 +57,6 @@
| task | EMAIL-WP-0007-T02 | done | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
| task | EMAIL-WP-0007-T03 | wait | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
| task | EMAIL-WP-0007-T04 | wait | — | workplans/EMAIL-WP-0007-ledger-backup-recovery.md |
| task | EMAIL-WP-0008-T01 | done | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |
| task | EMAIL-WP-0008-T02 | done | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |
| task | EMAIL-WP-0008-T03 | wait | — | workplans/EMAIL-WP-0008-scoped-transactional-callers.md |

4
workplans/EMAIL-WP-0008-scoped-transactional-callers.md
View file

@ -11,6 +11,7 @@ created: "2026-10-08"
updated: "2026-10-08"
origin: residual
origin_ref: CSOC-WP-0010
state_hub_workstream_id: "3a0f264d-e441-5b12-964e-dab8fe5b3828"
---
CSOC-WP-0010-T04 needs independent caller credentials, bounded template/tenant
@ -23,6 +24,7 @@ source and its admission; current live single-caller SMTP remains unchanged.
id: EMAIL-WP-0008-T01
status: done
priority: high
state_hub_task_id: "3f63b288-b2ea-506e-ba86-e7fa5778abb1"
```
Opt-in read-only policy/token-file loader, fixed operation/template/binding
@ -39,6 +41,7 @@ Explicit original-caller legacy adoption preserves accepted evidence.
id: EMAIL-WP-0008-T02
status: done
priority: high
state_hub_task_id: "88bd986d-6030-59ce-a0e2-74cdad5266e7"
```
Synthetic tests cover cross-caller handle denial without mutation, scope changes,
@ -58,6 +61,7 @@ status: wait
priority: high
needs_human: true
intervention_note: "Actual callers/scopes/quotas and separate token custody, platform sender/reply/bounce ownership, schema rollout/rollback and independent ledger recovery admission remain unapproved; source tests do not activate them."
state_hub_task_id: "9b4c7260-a6bf-54f9-82f8-2e98c368d294"
```
Retain this live admission record before any completion. Choose real binding and