coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(consistency): write back State Hub identifiers [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JTbVXpEiXA7mNJVpDnEPcB

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 412054@bnt-lap001
Assistant-Session: 3968fae1-8d59-4209-9bd6-c22594b8ab19
This commit is contained in:
tegwick 2026-09-06 01:14:52 +02:00
parent 6a6464fcc9
commit d144feb2e9
3 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
WORK-RECORDS.md
View file

@ -28,6 +28,7 @@
| workplan | FLEX-WP-0018 | finished | — | workplans/FLEX-WP-0018-inbound-auth-corrections.md |
| workplan | FLEX-WP-0019 | finished | — | workplans/FLEX-WP-0019-layer-model-conformance.md |
| workplan | FLEX-WP-0020 | proposed | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
| workplan | FLEX-WP-0021 | proposed | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
| task | FLEX-WP-0001-T001 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
| task | FLEX-WP-0001-T002 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
| task | FLEX-WP-0001-T003 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
@ -126,8 +127,15 @@
| task | FLEX-WP-0020-T09 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
| task | FLEX-WP-0020-T10 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
| task | FLEX-WP-0020-T11 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
| task | FLEX-WP-0021-T01 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
| task | FLEX-WP-0021-T02 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
| task | FLEX-WP-0021-T03 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
| task | FLEX-WP-0021-T04 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
| task | FLEX-WP-0021-T05 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
| intake | FLEX-IN-0001 | closed | — | intakes/intakes.md |
| intake | FLEX-IN-0002 | closed | — | intakes/intakes.md |
| decision | FLEX-DEC-2026-001 | resolved | — | decisions/decisions.md |
| decision | FLEX-DEC-2026-002 | resolved | — | decisions/decisions.md |
| decision | FLEX-DEC-2026-003 | resolved | — | decisions/decisions.md |
| decision | FLEX-DEC-2026-004 | resolved | — | decisions/decisions.md |
| decision | FLEX-DEC-2026-005 | resolved | — | decisions/decisions.md |

2
decisions/decisions.md
View file

@ -568,6 +568,7 @@ rationale: 'Answered, not declined. A decision lifetime shorter than the SSH cer
created: '2026-09-05T23:08:38.877787Z'
updated: '2026-09-06T00:00:00.000000Z'
decided_at: '2026-09-06T00:00:00.000000Z'
state_hub_decision_id: "f6bfb02a-bbf3-4488-acf9-0e1cb57ce19d"
```
## Context
@ -674,6 +675,7 @@ rationale: 'Two answers. (1) Yes, a real package is expected, and flex-auth auth
created: '2026-09-05T23:08:51.144287Z'
updated: '2026-09-06T00:00:00.000000Z'
decided_at: '2026-09-06T00:00:00.000000Z'
state_hub_decision_id: "f318e4e2-6195-4db8-b8c0-c71eeecad766"
```
## Context

6
workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md
View file

@ -16,6 +16,7 @@ related_workplans:
- SECRETS-WP-0009
created: "2026-09-06"
updated: "2026-09-06"
state_hub_workstream_id: "b01f655e-f71a-50ae-b110-178557f07c63"
---
# FLEX-WP-0021 — secrets-engine consumer policy package and cluster-local pin
@ -61,6 +62,7 @@ weaken, or supply a fallback for the consumer's package pin.
id: FLEX-WP-0021-T01
status: todo
priority: high
state_hub_task_id: "3c191808-6fe5-5a9b-9a68-a4ce4a672dbd"
```
Owner: `flex-auth` to request and document; `secrets-engine` owns the answer.
@ -82,6 +84,7 @@ here. An inferred action is a blocker, not a default.
id: FLEX-WP-0021-T02
status: todo
priority: high
state_hub_task_id: "38770813-dfcc-5711-bba3-0db50d3af135"
```
Owner: `flex-auth`.
@ -106,6 +109,7 @@ digest is stable across two runs.
id: FLEX-WP-0021-T03
status: todo
priority: high
state_hub_task_id: "8f7e5cdd-777e-5f54-9b92-c72b79f65672"
```
Owner: `flex-auth` to emit; `secrets-engine` to verify.
@ -126,6 +130,7 @@ A validator change on their side is their work-record, not closed from here.
id: FLEX-WP-0021-T04
status: wait
priority: high
state_hub_task_id: "f4e8709a-65dd-5172-97ae-e7c3432afb22"
```
Owner: `flex-auth`; deployment approval required.
@ -151,6 +156,7 @@ default-denies every other source; the other two pins are unchanged.
id: FLEX-WP-0021-T05
status: wait
priority: medium
state_hub_task_id: "f0828871-fd65-5d8c-adfd-28b13fedd2b0"
```
Owner: `flex-auth`.