83369c7217
Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
76 lines
1.9 KiB
Markdown
76 lines
1.9 KiB
Markdown
---
|
|
id: GH-WP-0001
|
|
type: workplan
|
|
title: "Foundation"
|
|
domain: infotech
|
|
repo: gate-house
|
|
status: proposed
|
|
state_hub_workstream_id: "2ec4cf1a-a73f-5793-9738-8d8019cccca8"
|
|
---
|
|
|
|
# Foundation
|
|
|
|
Establish the repository baseline and reach milestone **M0 — Executable Skeleton**
|
|
as defined in `ArchitectureBlueprint.md` §41: a request must produce a
|
|
deterministic `GRANT` / `DENY` with structured audit evidence.
|
|
|
|
```task
|
|
id: GH-WP-0001-T01
|
|
status: todo
|
|
priority: high
|
|
state_hub_task_id: "af0fa778-89a8-52cf-a73a-021082a98cad"
|
|
```
|
|
|
|
Establish the repository baseline: classification, scope, agent instructions,
|
|
workplan spine.
|
|
|
|
```task
|
|
id: GH-WP-0001-T02
|
|
status: todo
|
|
priority: high
|
|
state_hub_task_id: "6dd21d86-6546-58a7-b59e-fa1db72aae90"
|
|
```
|
|
|
|
Record the early ADRs that gate implementation choices — ADR-001 canonical
|
|
authority request schema, ADR-002 principal/actor/runtime identity model,
|
|
ADR-003 policy engine selection. Backlog in `ArchitectureBlueprint.md` §40.
|
|
|
|
```task
|
|
id: GH-WP-0001-T03
|
|
status: todo
|
|
priority: high
|
|
state_hub_task_id: "12f651be-1c07-587b-a781-4472e189e218"
|
|
```
|
|
|
|
Define the canonical authorization request and decision schemas from
|
|
`ArchitectureBlueprint.md` §7 and §8.
|
|
|
|
```task
|
|
id: GH-WP-0001-T04
|
|
status: todo
|
|
priority: medium
|
|
state_hub_task_id: "7903d142-9763-5b3f-839d-2a1599130a2b"
|
|
```
|
|
|
|
Implement the `/authorize` service skeleton with static policy and the
|
|
evaluation order in `ArchitectureBlueprint.md` §13, monotonic toward restriction.
|
|
|
|
```task
|
|
id: GH-WP-0001-T05
|
|
status: todo
|
|
priority: medium
|
|
state_hub_task_id: "010e3162-cab1-5644-b262-b0d1d7d676f8"
|
|
```
|
|
|
|
Emit structured decision evidence for every authorization call, per
|
|
`ArchitectureBlueprint.md` §24.
|
|
|
|
```task
|
|
id: GH-WP-0001-T06
|
|
status: todo
|
|
priority: medium
|
|
state_hub_task_id: "8cc018e1-2787-5435-9c2c-c2b01cf75ae4"
|
|
```
|
|
|
|
Seed the adversarial test suite with the fail-closed and self-escalation cases
|
|
(Canon T-04, T-09; `ArchitectureBlueprint.md` §34.4, §34.8).
|