gate-house/workplans/GH-WP-0001-foundation.md

---
id: GH-WP-0001
type: workplan
title: "Foundation"
domain: infotech
repo: gate-house
status: proposed
---

# Foundation

Establish the repository baseline and reach milestone **M0 — Executable Skeleton**
as defined in `ArchitectureBlueprint.md` §41: a request must produce a
deterministic `GRANT` / `DENY` with structured audit evidence.

```task
id: GH-WP-0001-T01
status: todo
priority: high
```

Establish the repository baseline: classification, scope, agent instructions,
workplan spine.

```task
id: GH-WP-0001-T02
status: todo
priority: high
```

Record the early ADRs that gate implementation choices — ADR-001 canonical
authority request schema, ADR-002 principal/actor/runtime identity model,
ADR-003 policy engine selection. Backlog in `ArchitectureBlueprint.md` §40.

```task
id: GH-WP-0001-T03
status: todo
priority: high
```

Define the canonical authorization request and decision schemas from
`ArchitectureBlueprint.md` §7 and §8.

```task
id: GH-WP-0001-T04
status: todo
priority: medium
```

Implement the `/authorize` service skeleton with static policy and the
evaluation order in `ArchitectureBlueprint.md` §13, monotonic toward restriction.

```task
id: GH-WP-0001-T05
status: todo
priority: medium
```

Emit structured decision evidence for every authorization call, per
`ArchitectureBlueprint.md` §24.

```task
id: GH-WP-0001-T06
status: todo
priority: medium
```

Seed the adversarial test suite with the fail-closed and self-escalation cases
(Canon T-04, T-09; `ArchitectureBlueprint.md` §34.4, §34.8).