tegwick
55fb078578
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3
55 lines
4.3 KiB
JSON
55 lines
4.3 KiB
JSON
{
|
|
"kind": "informed-decision-batch",
|
|
"id": "infd-batch-2026-10-03-provisioning-window",
|
|
"review_group": "net-kingdom-admins",
|
|
"status": "draft-unsigned",
|
|
"submitted": false,
|
|
"one_question_per_memo": true,
|
|
"approve_all_forbidden": true,
|
|
"agent_disposition_forbidden": true,
|
|
"hub_decision": "62aa95e4-3ccc-4867-8806-5e3db005b483",
|
|
"ordinal": [
|
|
{
|
|
"n": 1,
|
|
"memo_id": "infd-20261003-p01",
|
|
"workplan": "RPF-WP-0035",
|
|
"task": "RPF-WP-0035-T06",
|
|
"hub_task_prefix": "68bff751",
|
|
"question": "Accept the passed 2026-09-13 scoped delivery proof for the CCR-2026-0019 secrets-engine approval-client reader as that reader's native delivery acceptance?",
|
|
"memo": "infd-20261003-p01.memo.json",
|
|
"packet": "infd-20261003-p01.packet.md",
|
|
"packet_hash": "sha256:ee53cae14ae86dbdec2936d72f99e1285b6c714d5bd322ef30df8ffbf0939ff2",
|
|
"required_highlight": "infd-20261003-p01-h1"
|
|
}
|
|
],
|
|
"excluded": [
|
|
{
|
|
"workplan": "MASON-WP-0007",
|
|
"task": "MASON-WP-0007-T05",
|
|
"owner_repo": "ops-mason",
|
|
"reason": "Half the act has no reviewed command. The policy + Kubernetes-auth role script railiance-platform scripts/openbao-tenant-engine-audit-core-sender-eso-attended.sh exists (silent, idempotent, exit 3 on drift), but the row-7 wrapped seed that copies the tenant-engine sender token from the registry to platform/workloads/tenant-engine/audit-core-sender has no script: railiance-platform says it has no helper and the plan only names 'the user-engine migration technique'. A placeholder child must not be approved. Also MASON-WP-0007-T01 (metadata survey: path unused, no conflicting names) is still todo, and ESO's right to create serviceaccounts/token in namespace tenant-engine is unverified (MASON-WP-0007-T06).",
|
|
"ready_when": "ops-mason or railiance-platform commits a reviewed silent seed helper, T01 survey is recorded, then one memo covers policy/role apply plus seed."
|
|
},
|
|
{
|
|
"workplan": "RPF-WP-0035",
|
|
"task": "RPF-WP-0035-T02",
|
|
"owner_repo": "railiance-platform",
|
|
"reason": "Design docs/credential-lane-designs/secrets-engine-service-jwt.md is 'proposed, not provisioned'. Its 2026-09-27 return supplies inputs (openbao/auth/keycape-services-config.json, openbao/auth/secrets-engine-jwt-role.json, openbao/policies/secrets-engine-login-self.hcl) but no reviewed child command and says 'Do not execute a placeholder command'. Live KeyCape client registration and protected client-side custody remain unverified, and first-lane apply is gated on SECRETS-WP-0007-T04. The earlier sitting memo infd-20260914-c02 for this task was created 2026-09-15 and expired unbound 2026-09-16.",
|
|
"ready_when": "railiance-platform accepts the design, commits the reviewed silent install/verify child, and records KeyCape registration + custody."
|
|
},
|
|
{
|
|
"workplan": "RPF-WP-0035",
|
|
"task": "RPF-WP-0035-T08",
|
|
"owner_repo": "railiance-platform",
|
|
"reason": "The attended first-provision already happened. factory-audit-senders-review.md 'Current execution status': both version-1 credentials provisioned (seed receipt 2026-09-11-factory-audit-sender-seed.json) and delivered (2026-09-11-factory-audit-delivery-live.json, delivered_and_scope_verified_pending_producer_acceptance); CCR-2026-0021/0022 applied; 'Do not repeat provisioning or delivery'. What remains is owner acceptance (independent archive readback, audit bearer-revocation), not an attended OpenBao act. The task's blocking_reason is stale.",
|
|
"ready_when": "railiance-platform re-qualifies T08 to its real remaining owner acceptance work."
|
|
},
|
|
{
|
|
"workplan": "RAPPCOREHUB-WP-0003",
|
|
"task": "RAPPCOREHUB-WP-0003-T04",
|
|
"owner_repo": "rapp-core-hub",
|
|
"reason": "No credential change request, design or provisioning script exists for a dedicated read:repository Forgejo identity for the core-hub publisher (the only read:repository lane, CCR-2026-0014, belongs to policy-nexus and must not be reused). The task also needs Repo Manager to fix the identity-canon registry identity and publish a corrected image before the 123/0 snapshot can pass.",
|
|
"ready_when": "The Forgejo identity/custody owner drafts the CCR and silent provisioning child; Repo Manager ships the identity-canon correction."
|
|
}
|
|
]
|
|
}
|