build: adopt staged work-record index generation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
This commit is contained in:
tegwick 2026-10-19 13:15:23 +02:00
parent ab1a299674
commit c7d47f877b
4 changed files with 34 additions and 0 deletions

View file

@ -83,3 +83,20 @@ defends. See `decisions/decisions.md` `GH-DEC-2026-001` and
The `v0.1` milestones `M0`–`M8` and the reference implementation tree
(`api/`, `policy/`, `grants/`, `deploy/`) described the withdrawn authority-plane
design and must not be revived.
## Repository maintenance reuse
The tracked `.generated-work-records.json` adopts the Custodian staged-source
adapter for WORK-RECORDS.md. `make generated-work-records` uses the existing
State Hub renderer through `.generated-work-records.mk`; the shared pre-commit
hook runs this isolated recipe only for opted-in repositories. The corresponding
`make generated-work-records-check` is read-only. Canonical repository identity
is explicit and does not depend on the checkout directory.
Unstaged source changes are preserved; conflicts and unstaged generated-file
changes stop the commit. For `git commit --only`, generate first and include
WORK-RECORDS.md with the selected source paths. Existing generated-only guards
and exact-scope secret scans remain in place. This is repository maintenance,
not a runtime service, authorization decision, deployment or publication.
Other index generators and hub-derived briefs retain their owner boundaries.