gate-house/workplans/GH-WP-0001-foundation.md

---
id: GH-WP-0001
type: workplan
title: "Foundation"
domain: infotech
repo: gate-house
status: proposed
state_hub_workstream_id: "2ec4cf1a-a73f-5793-9738-8d8019cccca8"
---

# Foundation

Establish the repository baseline and reach milestone **M0 — Executable Skeleton**
as defined in `ArchitectureBlueprint.md` §41: a request must produce a
deterministic `GRANT` / `DENY` with structured audit evidence.

```task
id: GH-WP-0001-T01
status: todo
priority: high
state_hub_task_id: "af0fa778-89a8-52cf-a73a-021082a98cad"
```

Establish the repository baseline: classification, scope, agent instructions,
workplan spine.

```task
id: GH-WP-0001-T02
status: todo
priority: high
state_hub_task_id: "6dd21d86-6546-58a7-b59e-fa1db72aae90"
```

Record the early ADRs that gate implementation choices — ADR-001 canonical
authority request schema, ADR-002 principal/actor/runtime identity model,
ADR-003 policy engine selection. Backlog in `ArchitectureBlueprint.md` §40.

```task
id: GH-WP-0001-T03
status: todo
priority: high
state_hub_task_id: "12f651be-1c07-587b-a781-4472e189e218"
```

Define the canonical authorization request and decision schemas from
`ArchitectureBlueprint.md` §7 and §8.

```task
id: GH-WP-0001-T04
status: todo
priority: medium
state_hub_task_id: "7903d142-9763-5b3f-839d-2a1599130a2b"
```

Implement the `/authorize` service skeleton with static policy and the
evaluation order in `ArchitectureBlueprint.md` §13, monotonic toward restriction.

```task
id: GH-WP-0001-T05
status: todo
priority: medium
state_hub_task_id: "010e3162-cab1-5644-b262-b0d1d7d676f8"
```

Emit structured decision evidence for every authorization call, per
`ArchitectureBlueprint.md` §24.

```task
id: GH-WP-0001-T06
status: todo
priority: medium
state_hub_task_id: "8cc018e1-2787-5435-9c2c-c2b01cf75ae4"
```

Seed the adversarial test suite with the fail-closed and self-escalation cases
(Canon T-04, T-09; `ArchitectureBlueprint.md` §34.4, §34.8).