From d144feb2e9b74df39a085ce752335c1169ffac9a Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 6 Sep 2026 01:14:52 +0200 Subject: [PATCH] chore(consistency): write back State Hub identifiers [auto] Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01JTbVXpEiXA7mNJVpDnEPcB Assistant: claude-code Assistant-Model: opus Assistant-Process: 412054@bnt-lap001 Assistant-Session: 3968fae1-8d59-4209-9bd6-c22594b8ab19 --- WORK-RECORDS.md | 8 ++++++++ decisions/decisions.md | 2 ++ .../FLEX-WP-0021-secrets-engine-consumer-policy-gate.md | 6 ++++++ 3 files changed, 16 insertions(+) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 5bcff75..8f7fc08 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -28,6 +28,7 @@ | workplan | FLEX-WP-0018 | finished | — | workplans/FLEX-WP-0018-inbound-auth-corrections.md | | workplan | FLEX-WP-0019 | finished | — | workplans/FLEX-WP-0019-layer-model-conformance.md | | workplan | FLEX-WP-0020 | proposed | — | workplans/FLEX-WP-0020-repository-identity-migration.md | +| workplan | FLEX-WP-0021 | proposed | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md | | task | FLEX-WP-0001-T001 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md | | task | FLEX-WP-0001-T002 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md | | task | FLEX-WP-0001-T003 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md | @@ -126,8 +127,15 @@ | task | FLEX-WP-0020-T09 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md | | task | FLEX-WP-0020-T10 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md | | task | FLEX-WP-0020-T11 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md | +| task | FLEX-WP-0021-T01 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md | +| task | FLEX-WP-0021-T02 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md | +| task | FLEX-WP-0021-T03 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md | +| task | FLEX-WP-0021-T04 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md | +| task | FLEX-WP-0021-T05 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md | | intake | FLEX-IN-0001 | closed | — | intakes/intakes.md | | intake | FLEX-IN-0002 | closed | — | intakes/intakes.md | | decision | FLEX-DEC-2026-001 | resolved | — | decisions/decisions.md | | decision | FLEX-DEC-2026-002 | resolved | — | decisions/decisions.md | | decision | FLEX-DEC-2026-003 | resolved | — | decisions/decisions.md | +| decision | FLEX-DEC-2026-004 | resolved | — | decisions/decisions.md | +| decision | FLEX-DEC-2026-005 | resolved | — | decisions/decisions.md | diff --git a/decisions/decisions.md b/decisions/decisions.md index 9af1f85..48e9d2d 100644 --- a/decisions/decisions.md +++ b/decisions/decisions.md @@ -568,6 +568,7 @@ rationale: 'Answered, not declined. A decision lifetime shorter than the SSH cer created: '2026-09-05T23:08:38.877787Z' updated: '2026-09-06T00:00:00.000000Z' decided_at: '2026-09-06T00:00:00.000000Z' +state_hub_decision_id: "f6bfb02a-bbf3-4488-acf9-0e1cb57ce19d" ``` ## Context @@ -674,6 +675,7 @@ rationale: 'Two answers. (1) Yes, a real package is expected, and flex-auth auth created: '2026-09-05T23:08:51.144287Z' updated: '2026-09-06T00:00:00.000000Z' decided_at: '2026-09-06T00:00:00.000000Z' +state_hub_decision_id: "f318e4e2-6195-4db8-b8c0-c71eeecad766" ``` ## Context diff --git a/workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md b/workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md index 43c0d0f..73e2a22 100644 --- a/workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md +++ b/workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md @@ -16,6 +16,7 @@ related_workplans: - SECRETS-WP-0009 created: "2026-09-06" updated: "2026-09-06" +state_hub_workstream_id: "b01f655e-f71a-50ae-b110-178557f07c63" --- # FLEX-WP-0021 — secrets-engine consumer policy package and cluster-local pin @@ -61,6 +62,7 @@ weaken, or supply a fallback for the consumer's package pin. id: FLEX-WP-0021-T01 status: todo priority: high +state_hub_task_id: "3c191808-6fe5-5a9b-9a68-a4ce4a672dbd" ``` Owner: `flex-auth` to request and document; `secrets-engine` owns the answer. @@ -82,6 +84,7 @@ here. An inferred action is a blocker, not a default. id: FLEX-WP-0021-T02 status: todo priority: high +state_hub_task_id: "38770813-dfcc-5711-bba3-0db50d3af135" ``` Owner: `flex-auth`. @@ -106,6 +109,7 @@ digest is stable across two runs. id: FLEX-WP-0021-T03 status: todo priority: high +state_hub_task_id: "8f7e5cdd-777e-5f54-9b92-c72b79f65672" ``` Owner: `flex-auth` to emit; `secrets-engine` to verify. @@ -126,6 +130,7 @@ A validator change on their side is their work-record, not closed from here. id: FLEX-WP-0021-T04 status: wait priority: high +state_hub_task_id: "f4e8709a-65dd-5172-97ae-e7c3432afb22" ``` Owner: `flex-auth`; deployment approval required. @@ -151,6 +156,7 @@ default-denies every other source; the other two pins are unchanged. id: FLEX-WP-0021-T05 status: wait priority: medium +state_hub_task_id: "f0828871-fd65-5d8c-adfd-28b13fedd2b0" ``` Owner: `flex-auth`.