Make profile runtime readiness explicit

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b

workplans/GLAS-WP-0008-profile-operational-readiness.md

@@ -0,0 +1,67 @@
+---
+id: GLAS-WP-0008
+type: workplan
+title: "Make profile operational readiness explicit"
+domain: infotech
+repo: glas-harness
+status: finished
+owner: codex
+topic_slug: profile-operational-readiness
+created: "2026-08-23"
+updated: "2026-08-23"
+---
+
+# Make profile operational readiness explicit
+
+## Define the readiness contract
+
+```task
+id: GLAS-WP-0008-T01
+status: done
+priority: high
+```
+
+Add a typed operational-readiness state that is distinct from catalog
+enablement. Expose it in resolved contexts and execution evidence without
+changing rein selection or introducing a fallback.
+
+**Completed 2026-08-23:** added the backward-compatible
+`OperationalReadiness` model and propagated it through resolved catalog
+contexts and compact execution evidence. Undeclared legacy profiles default to
+`unverified`; positive `ready` claims require an evidence reference.
+
+## Declare profile states and enforce known blockers
+
+```task
+id: GLAS-WP-0008-T02
+status: done
+priority: high
+```
+
+Declare the current evidence-backed state of every committed profile. Refuse a
+known-blocked profile at resolution before sandbox creation; permit an
+unverified profile only as an explicitly labeled bounded proof attempt.
+
+**Completed 2026-08-23:** both bwrap-local profiles now declare `blocked` with
+owner `sand-boxer` and evidence `GLAS-IN-0002`; the remote profile declares
+`unverified`. Gateway resolution rejects blocked profiles before sandbox
+creation while retaining unverified attempts and their label in evidence.
+
+## Verify and publish the clarified behavior
+
+```task
+id: GLAS-WP-0008-T03
+status: done
+priority: high
+```
+
+Cover the schema, catalog, CLI, gateway refusal, evidence, and compatibility
+path with tests. Update scope and execution-profile documentation, close
+`GLAS-IN-0005`, synchronize State Hub, publish, and report the behavior change
+to known consumers.
+
+**Completed 2026-08-23:** CLI text/JSON report readiness without calling the
+catalog executable, documentation and examples reflect the current states,
+and the 63-test suite plus packaged catalog validation pass. `GLAS-IN-0005` is
+absorbed by this workplan. The remaining local runtime dependency was already
+handed off as live residual `GLAS-IN-0002`; no new residual was created.