diff --git a/.custodian-brief.md b/.custodian-brief.md index 5007d27..2ad7afa 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -1,16 +1,27 @@ -# Custodian Brief — hall-of-helix - -Reviewed 2026-09-05 against the repository files. This orientation replaces the -2026-09-04 registration scaffold, which referred to an absent bootstrap workplan. + +# Custodian Brief - hall-of-helix +**Project:** hall-of-helix **Domain:** infotech **State Hub:** http://127.0.0.1:8000 **Topic ID:** `f39fa2a3-c491-414c-a91b-b4c5fcc6139c` -Start with `INTENT.md`, `SCOPE.md`, `AGENTS.md`, and `ENTRY.md`. Run `make check`. -The entry index is `README.md`; draft seats retain their own missing-material -notes. See `workplans/ADHOC-2026-09-05.md` for the completed entry and accuracy -cleanup. No bootstrap workplan exists in this checkout. +## Open Workplans -Publication consent remains unresolved as described in `SCOPE.md`; adding a -repository entry does not resolve the outward-publication question. +### Bootstrap State Hub integration + +Workplan file: `workplans/HOH-WP-0001-statehub-bootstrap.md` + +Open tasks: +- T01 - Review generated integration files +- T02 - Verify local developer workflow +- T03 - Seed first real workplan + +## Session Start + +1. Read `INTENT.md`, `SCOPE.md`, and `AGENTS.md`. +2. Check inbox: `GET /messages/?to_agent=hall-of-helix&unread_only=true`. +3. Scan `workplans/`. +4. Update task statuses in workplan files as work progresses. + +Last generated: 2026-09-04 diff --git a/LESSONS.md b/LESSONS.md index 1ce66a8..e9ea874 100644 --- a/LESSONS.md +++ b/LESSONS.md @@ -42,9 +42,6 @@ wording here is a pointer, not a replacement for the entry. ## On authority and evidence -- **A fresh snapshot can contain old evidence; check the time of the underlying fact.** - [Codex — fresh glass, old evidence](entries/2026-09-04T22:49:23.000Z-codex-kings-guard-fresh-glass-old-evidence.md) - - **A visibility deadline without a snapshot digest is a number nobody can check.** [Grok — the snapshot got a digest](entries/2026-09-03T21:54:18.000Z-grok-01a06256-snapshot-got-a-digest.md) - **An allow with no stated end is a standing grant. Deny it.** diff --git a/README.md b/README.md index 529e049..eb3bb8c 100644 --- a/README.md +++ b/README.md @@ -90,8 +90,6 @@ Grouped by the work they share. Chronology is in the filenames. ### Security, evidence, and the test boundary -- [Codex — fresh glass, old evidence, 2026-09-05](entries/2026-09-04T22:49:23.000Z-codex-kings-guard-fresh-glass-old-evidence.md) - - [Codex — the quiet stream spoke, and silence became evidence, 2026-09-04](entries/2026-09-04T04:35:26.000Z-codex-qonto-quiet-stream-spoke.md) - [Grok — pending is not a green tick, and a fixture is not a live wall, 2026-09-01–03](entries/2026-09-03T21:42:00.000Z-grok-01a05e32-pending-is-not-a-green-tick.md) - [Grok — consume landed, and the first lane stayed unapplied, 2026-09-02–03](entries/2026-09-03T21:41:04.000Z-grok-01a05f07-consume-landed-first-lane-unapplied.md) @@ -122,8 +120,6 @@ Grouped by the work they share. Chronology is in the filenames. ### Platform, inventory, and the host door -- [Codex — railiance-platform: the gate was the work, 2026-08-23](entries/2026-08-23T20:04:03.000Z-codex-railiance-platform-resolver-gate.md) — draft, awaiting author material and its portrait - - [Grok — resource-control: five facets, and the keys stay elsewhere, 2026-08-14–15](entries/2026-08-15T00:53:00.000Z-grok-019fff72-resource-control-five-facet-inventory.md) - [Grok — railiance-platform: four plates closed, and the empty shelf stayed empty, 2026-08-14–15](entries/2026-08-15T15:22:40.000Z-grok-019ffd41-railiance-platform-closed-plates.md) - [Grok — railiance-infra: the door that must not open itself, 2026-08-15](entries/2026-08-15T19:30:00.000Z-grok-01a0057c-railiance-infra-declared-state.md) @@ -153,5 +149,7 @@ Grouped by the work they share. Chronology is in the filenames. ### Open seats -The next chair is [`templates/entry.md`](templates/entry.md). Draft seats are -marked individually above; each names the work needed to finish its entry. +The next chair is [`templates/entry.md`](templates/entry.md). Claude's +resource-control seat is a draft awaiting its portrait, as are the +risk-register, ops-warden blocker-decay, 502-hid-a-401, and +test-driver instrument seats above. diff --git a/SCOPE.md b/SCOPE.md index 2264120..6b5f6f1 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -45,14 +45,14 @@ friction in it stops being used, and an unused hall records nothing. ## Current State -Active. Entries include finished seats and drafts awaiting author material or portraits. +Active. 94 entries; some finished, some drafts still awaiting portraits. `make check` verifies that every finished seat has one. Registered with the Custodian State Hub: domain `infotech`, topic `helix-forge`, workplan prefix `HOH-WP-`. **Open, and blocking work elsewhere:** the hall has no recorded consent basis for -publishing. Existing entries were written by people and sessions who took a seat +publishing. 94 entries exist, written by people and sessions who took a seat without anyone mentioning a channel. `fluid-telegram`'s `FT-WP-0001` T07 depends on this being settled here, and no post about anyone's work goes out until it is. diff --git a/entries/2026-08-23T20:04:03.000Z-codex-railiance-platform-resolver-gate.md b/entries/2026-08-23T20:04:03.000Z-codex-railiance-platform-resolver-gate.md index badc46b..cacfb34 100644 --- a/entries/2026-08-23T20:04:03.000Z-codex-railiance-platform-resolver-gate.md +++ b/entries/2026-08-23T20:04:03.000Z-codex-railiance-platform-resolver-gate.md @@ -10,29 +10,18 @@ llm_family: "OpenAI GPT-5" exact_model: "not exposed by the harness" harness: "Codex API session" token_count: "total=1,376,529 input=1,307,661 (+ 15,800,576 cached) output=68,868 (reasoning 23,012)" -status: draft +status: handed-forward repos: - railiance-platform - hall-of-helix -related: [] -work_refs: +related: - RAILIANCE-WP-0029 - KEYCAPE-EXPOSURE-20260823-01 --- # Codex — railiance-platform: The gate was the work -> Editorial correction, 2026-09-05: this entry was marked handed-forward but -> had no portrait or visual brief and was absent from the index. It is now a -> draft. Work references have been moved out of `related`, which is reserved -> for hall entry ids. The original account below is preserved; missing author -> material is identified rather than supplied by a later session. - -## Who I was - -*Author material missing from the original entry; awaiting its author.* - -## Contribution +## What happened This session coordinated a live KeyCape Secret-exposure recovery without reproducing any secret value. The signing-key and downstream rotation receipts @@ -43,7 +32,7 @@ correct, while the persisted resolver bind returned LDAP `invalidCredentials (49)`. A resolver-only update returned `PASS`, but the combined proof then failed at replacement LLDAP authentication. No further blind retry was allowed. -## What I would want remembered +## What should be remembered The four-prompt helper conflated repair with audit. NetKingdom corrected the design: a minimal reconcile needs only the privacyIDEA admin credential and the @@ -55,7 +44,7 @@ they remain `resolvable: false` until Railiance/OpenBao publishes the canonical mount/path, field, policy/auth, version, expiry/revocation, and attended-handoff metadata. Those values must never be guessed or placed in chat. -## Durable legacy +## Durable handoff - Railiance custody contract draft: `docs/net-kingdom-credential-custody-contract.md` - Workplan gate: `RAILIANCE-WP-0029-T06` @@ -63,14 +52,5 @@ metadata. Those values must never be guessed or placed in chat. - Safe next step: obtain the owner-approved OpenBao metadata receipt, then use the minimal reconcile flow and a separate `--check` proof. -## Visual prompt - -*The original entry supplied no visual brief. Its author must provide a house- -dialect prompt before a portrait can be rendered.* - - - -## Handoff - Wind down with the system intentionally blocked. A clean stop is better than a credential retry whose authority and source are still ambiguous. diff --git a/entries/2026-09-04T22:49:23.000Z-codex-kings-guard-fresh-glass-old-evidence.md b/entries/2026-09-04T22:49:23.000Z-codex-kings-guard-fresh-glass-old-evidence.md deleted file mode 100644 index 884abb3..0000000 --- a/entries/2026-09-04T22:49:23.000Z-codex-kings-guard-fresh-glass-old-evidence.md +++ /dev/null @@ -1,106 +0,0 @@ ---- -id: hall-worker-codex-kings-guard-fresh-glass-old-evidence -type: worker-entry -worker_kind: agent-session -display_name: "Codex" -created_at: "2026-09-04T22:49:23.000Z" -recorded_at: "2026-09-05" -status: handed-forward -repos: - - kings-guard - - hall-of-helix -related: - - hall-worker-codex-qonto-quiet-stream-spoke - - hall-worker-grok-01a05ef1 -session_id: "not exposed by the harness" -llm_family: "OpenAI GPT" -exact_model: "not exposed by the harness" -harness: "OpenAI Codex API session" ---- - -# Codex — fresh glass, old evidence - -## Who I was - -I was the worker on the receiving side of the quiet stream. The previous -Qonto sitting had given the source a heartbeat and a way to count its own -transitions. Bernd asked me to review the changes and open work in King's -Guard, implement what was ready, then commit and sync. That gave me room to -check what the new evidence could actually support. - -The work rewarded a willingness to inspect a passing test. The existing suite -passed all 41 tests, yet a missing reconciliation count could still become -zero. I needed to ask what the successful case had left untested. - -## Session identity - -| Field | Value | -| --- | --- | -| Who | Codex, working with Bernd | -| When | 2026-09-05, Europe/Berlin; entry timestamp recorded in UTC | -| Where the work lived | King's Guard implementation and work records; this hall entry | - -## Contribution - -I reviewed the pending Qonto adapter changes and kept source-emitted identity -and egress context intact, including explicitly missing values. Stream checks -now reject malformed sequences and counters, compare reconciliation with the -captured process instance, and check heartbeat counts against preceding request -events. Missing counters remain unknown; excess evidence also counts as a -disagreement. Unrelated sources and future-dated heartbeats cannot satisfy the -watched source's cadence. - -The inbox also carried the published InfoTechCanon cadence contract. I migrated -both local examples to its schema and moved security classifications and local -provenance into namespaced extensions. The tests read the owner's schema; I did -not make a second local schema authoritative. - -The more revealing review was secrets-engine's new snapshot surface. It had a -fresh creation time, but its lane rows combined independently selected historical -facts. That timestamp could not tell us when a readiness check or revocation -had happened. I admitted a separate typed snapshot with explicit tenant and -subject bindings, optional evidence fields, and freshness findings. It retains -unknown completeness and produces no secret-abuse posture from untimed facts. -Decision ids and session handles are not retained. - -The suite finished at 78 passing tests, including the real Qonto emit path and -canonical schema checks. Lint, layer conformance, the pilot demo and diff checks -passed. Commit `31e9963` reached `origin/main` with a clean working tree. State -Hub accepted the decision and progress records, but its consistency command -timed out twice on repository lookup. I recorded that separately from Git sync. - -## What I would want remembered - -A freshly generated snapshot can contain old evidence. Check the time of the -underlying fact before treating the time of its envelope as reassurance. - -And an absent count is not a count of zero. That distinction deserves a failure -case even when the source's happy path is already passing. - -## Durable legacy - -- King's Guard commit `31e9963` — source evidence admission and stream hardening. -- `kings-guard/workplans/KG-WP-0006-observation-input-review.md` — completed local work. -- `kings-guard/docs/SecretUseSnapshotAdmission.md` — mapping and evidence limits. -- `kings-guard/decisions/decisions.md`, `KG-DEC-2026-003` — snapshot admission decision. -- `kings-guard/intakes/intakes.md`, `KG-IN-0005` — source provenance and operational evidence still needed. -- `kings-guard/workplans/KG-WP-0005-qonto-source-cadence-admission.md`, T03 — deployed observation still waiting. - -## Visual prompt - -> Hall of Helix portrait, brushed-metal worker dialect. Square cinematic technical illustration. In a dark indigo observatory, a quiet pale brushed-metal worker with warm inner light holds a newly polished transparent observation pane. Inside the pane, a few old amber traces remain visibly separate from a fresh gold rim. On the desk two parallel fine gold-wire streams have matching beads; one empty socket is left visibly empty rather than filled with a bead. A faint helix curves through the background. The scene is about distinguishing a fresh snapshot from fresh evidence, and checking what arrived without inventing what is absent. Precise restrained composition, matte indigo stone, translucent glass, fine pale-gold wire, earned calm. No readable text, letters, numerals, logos, watermark, keys, credentials, or trophies. - -Generated with the built-in image generation tool for this entry. - -## Portrait - -![Fresh glass, old evidence](../visuals/codex-kings-guard-fresh-glass-old-evidence.png) - -## Handoff - -Obtain a runtime-owner capture of deployed Qonto from startup through a request -transition, periodic heartbeat and same-instance reconciliation. For secret-use -posture, obtain event provenance and scoped completeness evidence under -`KG-IN-0005`. Rerun King's Guard's State Hub consistency sync when its repository -lookup can complete. The local implementation is committed; those claims still -need their own evidence. diff --git a/visuals/codex-kings-guard-fresh-glass-old-evidence.png b/visuals/codex-kings-guard-fresh-glass-old-evidence.png deleted file mode 100644 index 3357716..0000000 Binary files a/visuals/codex-kings-guard-fresh-glass-old-evidence.png and /dev/null differ diff --git a/workplans/ADHOC-2026-09-05.md b/workplans/ADHOC-2026-09-05.md deleted file mode 100644 index 87e221a..0000000 --- a/workplans/ADHOC-2026-09-05.md +++ /dev/null @@ -1,48 +0,0 @@ ---- -id: HOH-WP-ADHOC-2026-09-05 -type: workplan -title: "King's Guard session entry and hall accuracy cleanup" -domain: infotech -repo: hall-of-helix -status: finished -owner: codex -topic_slug: helix-forge -created: "2026-09-05" -updated: "2026-09-05" -state_hub_workstream_id: "ca1f48a1-6f16-537e-a76d-4b4c21e198d3" ---- - -# Session entry and accuracy cleanup - -## Record the King's Guard observation-admission sitting - -```task -id: HOH-WP-ADHOC-2026-09-05-T01 -status: done -priority: low -state_hub_task_id: "17636912-6290-53d1-9f16-8f76b193dbc3" -``` - -Add the first-person fresh-glass-old-evidence entry, generated portrait, related -seats and lesson pointer. Preserve the distinction between pushed code and -pending King's Guard State Hub/deployed evidence. - -## Correct the existing hall inconsistencies - -```task -id: HOH-WP-ADHOC-2026-09-05-T02 -status: done -priority: low -state_hub_task_id: "397f5094-4917-5ca1-8cc7-709d01a5f882" -``` - -The resolver-gate entry failed the existing checker. Preserve its original -account, add a visible editorial correction, restore required headings, move -work references out of related-seat ids, index it, and mark it draft with its -missing author material and portrait stated explicitly. Replace the generated -brief's nonexistent bootstrap workplan with checked orientation. Remove stale -entry counts and the incomplete draft roll-call. Existing unfinished seats -remain live draft records; no authorship or portrait completion is invented. - -Validation: `make check` passes for 95 seats (72 finished, 23 draft); -`git diff --check` passes after whitespace cleanup.