intelligence-radar/workplans/IR-WP-0005-credential-delivery.md
repo-manager c70b671a38 repo.work.assign_missing_identifiers
source: repo-manager
reason: deterministic projection registration

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbc-910e-77a0-b336-3130194350b3
2026-09-14 15:56:58 +02:00

1.8 KiB

id type title domain repo status flavor owner topic_slug origin origin_ref created updated state_hub_workstream_id
IR-WP-0005 workplan Deliver admitted OpenRouter credentials to Radar infotech intelligence-radar ready implementation codex custodian residual IR-WP-0004 2026-09-14 2026-09-14 624750a5-d613-5e32-a656-595de03ef73c

Created before closure of IR-WP-0004 at the user's request to separate credential delivery from billing. Source files own the work; cross-repository owner plans retain authority over native changes. Review baseline: docs/evidence/2026-09-14-ir-wp-0004-review.md.

Confirm native delivery prerequisites

id: IR-WP-0005-T01
status: todo
priority: high
state_hub_task_id: "52427c5c-001d-5965-a6ec-254fef0c3deb"

Coordinate with SECRETS-WP-0010-T03 and its existing owner records. Reuse the existing OpenBao key and completed human approvals; verify current native validity without repeating or extending approvals. Record exact recipient, caller/owner/tenant binding, admitted transport, login/time prerequisite and current owner evidence. Do not wait for billing reconciliation to perform credential-only diagnosis. No secret values in Git, logs or State Hub.

Verify scoped delivery and return readiness

id: IR-WP-0005-T02
status: wait
priority: high
state_hub_task_id: "c4b2378a-5241-5195-8c4b-d53ec58a7f72"

Depends on T01 and native owner execution. Prove value-safe read-only provider key validation, correct recipient success, wrong caller/owner/tenant/path refusal, revocation and unchanged existing llm-connect delivery. Capture source/recipient revisions and sanitized native receipts. Do not widen policies or rotate the provider key merely to unblock Radar. This plan completes on admitted delivery evidence; paid inference and campaign accounting belong elsewhere.