coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(consistency): register FLEX-WP-0024 and refresh work records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014aQMM1dPXaPiXVn6DwwtLd

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 715613@bnt-lap001
Assistant-Session: fabd95c1-4c9e-4080-8849-8707ae025f80
This commit is contained in:
tegwick 2026-09-06 22:47:30 +02:00
parent 61e24b0f40
commit 3a9fe2f00e
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
WORK-RECORDS.md
View file

@ -31,6 +31,7 @@
| workplan | FLEX-WP-0021 | finished | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
| workplan | FLEX-WP-0022 | proposed | — | workplans/FLEX-WP-0022-tenant-scope-coverage.md |
| workplan | FLEX-WP-0023 | ready | — | workplans/FLEX-WP-0023-operator-caller-access-path.md |
| workplan | FLEX-WP-0024 | ready | — | workplans/FLEX-WP-0024-decision-envelope-authenticity.md |
| task | FLEX-WP-0001-T001 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
| task | FLEX-WP-0001-T002 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
| task | FLEX-WP-0001-T003 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
@ -142,6 +143,10 @@
| task | FLEX-WP-0023-T03 | wait | — | workplans/FLEX-WP-0023-operator-caller-access-path.md |
| task | FLEX-WP-0023-T04 | todo | — | workplans/FLEX-WP-0023-operator-caller-access-path.md |
| task | FLEX-WP-0023-T05 | wait | — | workplans/FLEX-WP-0023-operator-caller-access-path.md |
| task | FLEX-WP-0024-T01 | done | — | workplans/FLEX-WP-0024-decision-envelope-authenticity.md |
| task | FLEX-WP-0024-T02 | todo | — | workplans/FLEX-WP-0024-decision-envelope-authenticity.md |
| task | FLEX-WP-0024-T03 | wait | — | workplans/FLEX-WP-0024-decision-envelope-authenticity.md |
| task | FLEX-WP-0024-T04 | wait | — | workplans/FLEX-WP-0024-decision-envelope-authenticity.md |
| intake | FLEX-IN-0001 | closed | — | intakes/intakes.md |
| intake | FLEX-IN-0002 | closed | — | intakes/intakes.md |
| decision | FLEX-DEC-2026-001 | resolved | — | decisions/decisions.md |

5
workplans/FLEX-WP-0024-decision-envelope-authenticity.md
View file

@ -16,6 +16,7 @@ related_workplans:
- FLEX-WP-0023
created: "2026-09-06"
updated: "2026-09-06"
state_hub_workstream_id: "90577acd-6910-548d-a13e-1dbfdfb8ed27"
---
# FLEX-WP-0024 — Sign the decision envelope: the response channel is unauthenticated
@ -48,6 +49,7 @@ not against one that lies. An unreachable PDP denies; a lying PDP allows.
id: FLEX-WP-0024-T01
status: done
priority: high
state_hub_task_id: "b8fad80d-5c44-5e26-a632-5096e0c0f3c5"
```
Owner: `flex-auth`.
@ -68,6 +70,7 @@ that does not exist resolves to the same address.
id: FLEX-WP-0024-T02
status: todo
priority: high
state_hub_task_id: "5482f3cd-36cb-55e0-8c52-0ca2340ed4d7"
```
Owner: `flex-auth`; key custody is **not** ours to invent.
@ -100,6 +103,7 @@ and reviewed before any signing code exists.
id: FLEX-WP-0024-T03
status: wait
priority: high
state_hub_task_id: "041612ea-1be4-5997-8c32-49f8bcc50855"
```
Owner: `flex-auth`.
@ -127,6 +131,7 @@ consumer can perform both from the fixtures alone.
id: FLEX-WP-0024-T04
status: wait
priority: medium
state_hub_task_id: "82d6b75e-e2c6-5e3d-a897-fbdfb7c9094e"
```
Owner: `flex-auth`.