coulomb/glas-harness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ADR-004: composable reins as middleware stays deferred (GLAS-WP-0002-T01)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Checked ADR-002 part 2's deferred question against the two observability
additions that landed since (rein-aharness's tool-event stream,
glas-harness's own gateway hub event) -- both turned out simpler as
direct implementations, neither needed a wrapping middleware layer.
Still zero real candidates for that shape. docs/harness-contract.md
gains the Middleware ABC as a documented, unimplemented sketch for if a
real third case ever appears -- no code written now.

Also flagged GLAS-WP-0002-T02 (live OpenBao verification) as blocked:
`bao token lookup` from this workstation returns 403, no usable vault
session to provision a new AppRole with. Needs the operator.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-07-26 20:22:55 +02:00
parent ab66230c0f
commit 9bbff9d336
5 changed files with 140 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

21
workplans/GLAS-WP-0002-observability-and-composability-followups.md
View file

@ -30,9 +30,18 @@ record the decision as an ADR addendum, and only write code if a real
middleware candidate (e.g. a monitoring rein) is scoped alongside it in
this same task — not before.
**Done (2026-07-26), stays deferred.** `docs/adr/ADR-004-composable-reins-stay-deferred.md`
checked this against the two observability additions that landed since
ADR-002 (rein-aharness's tool-event stream, glas-harness's own gateway
hub event, both `HARNESS-WP-0002-T03`/`GLAS-WP-0002-T03`) — both turned
out simpler as direct implementations, neither needed a wrapping
middleware layer. Still zero real candidates for *this* shape, so no
code written. `docs/harness-contract.md` now carries the `Middleware`
ABC sketch for future reference, explicitly marked don't-build-yet.
```task
id: GLAS-WP-0002-T01
status: todo
status: done
priority: medium
state_hub_task_id: "2de6074e-b72b-4eb7-b454-6b849011348c"
```
@ -51,9 +60,17 @@ vault round trip actually works end to end. Coordinate with
`rein-openweights` directly; this task's outcome should be recorded in
both repos.
**Blocked (checked 2026-07-26):** `bao token lookup` from this
workstation returns `403 permission denied` — no usable vault session
here. Provisioning a new AppRole (`auth/approle/role/...`) and a KV
secret for `rein-openweights`, mirroring `rein-aharness`'s `binky-mail`
lane, needs vault-admin access this session doesn't have. Needs the
operator to provision the AppRole (or provide an ambient token with
enough privilege) before this can be exercised for real.
```task
id: GLAS-WP-0002-T02
status: todo
status: wait
priority: medium
state_hub_task_id: "74b4f35b-9cdd-4228-aeed-e0eec458c0bf"
```