From 7ddc48d3cdef86f53dffa47b1508220826d6fd07 Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 23 Jul 2026 14:35:36 +0200 Subject: [PATCH] chore(consistency): register KEY-WP-0004 in State Hub [auto] Co-Authored-By: Claude Sonnet 5 --- WORK-RECORDS.md | 55 +++++++++++++++++++ ...P-0004-binky-hedgehog-tenant-onboarding.md | 8 +++ 2 files changed, 63 insertions(+) create mode 100644 WORK-RECORDS.md diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md new file mode 100644 index 0000000..ad604cc --- /dev/null +++ b/WORK-RECORDS.md @@ -0,0 +1,55 @@ +# Work Records — key-cape + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | KEY-WP-0001 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| workplan | KEY-WP-0002 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| workplan | KEY-WP-0003 | finished | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| workplan | KEY-WP-0004 | ready | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0001-T01 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T02 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T03 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T04 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T05 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T06 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T07 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T08 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T09 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T10 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T11 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T12 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T13 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T14 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T15 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T16 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T17 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T18 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T19 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T20 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T21 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T22 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T23 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0002-T01 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T02 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T03 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T04 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T05 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T06 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0003-T01 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T02 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T03 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T04 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T05 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0004-T01 | todo | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T02 | todo | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T03 | todo | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T04 | todo | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T05 | todo | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T06 | todo | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T07 | todo | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | diff --git a/workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md b/workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md index a881328..e46a910 100644 --- a/workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md +++ b/workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md @@ -9,6 +9,7 @@ owner: codex topic_slug: netkingdom created: "2026-07-23" updated: "2026-07-23" +state_hub_workstream_id: "ad6fa711-ba5b-4e7d-86e3-641f9acaf853" --- # Binky Hedgehog GmbH as first NetKingdom tenant + qonto-assistant workload identity @@ -45,6 +46,7 @@ by this workplan, since it's a different repo's scope and code change. id: KEY-WP-0004-T01 status: todo priority: high +state_hub_task_id: "ec65d1be-11cb-421f-84dd-f401206526fe" ``` The IAM profile's tenant identifiers (`tenant:platform`, `tenant:coulomb`, @@ -76,6 +78,7 @@ canon note); a test-subject token carries the correct `tenant` claim. id: KEY-WP-0004-T02 status: todo priority: high +state_hub_task_id: "b5cb4497-095c-4dd7-af31-831deddd422e" ``` Create the user in key-cape's current backend, enroll MFA per profile @@ -98,6 +101,7 @@ other tenant. id: KEY-WP-0004-T03 status: todo priority: high +state_hub_task_id: "fbe9d2e0-7532-4403-8e12-947aa8fd0da7" ``` Register an OIDC client per the profile's service-account/workload-identity @@ -122,6 +126,7 @@ here; no secret material appears anywhere in this repo's history. id: KEY-WP-0004-T04 status: todo priority: high +state_hub_task_id: "80901eb3-a959-49ab-bcde-01ddaafa8e59" ``` Coordinate with `secrets-engine` to create a scoped OpenBao lane for this @@ -142,6 +147,7 @@ this flow. id: KEY-WP-0004-T05 status: todo priority: high +state_hub_task_id: "a91326a6-f498-4569-a56b-95a49fe5794d" ``` This is the task that directly minimizes Bernd's ongoing engagement: add an @@ -170,6 +176,7 @@ access`, not direct key-cape/OpenBao admin knowledge. id: KEY-WP-0004-T06 status: todo priority: low +state_hub_task_id: "d3460058-6e4c-426b-b575-1bbad192e40c" ``` Forward-looking per Bernd's framing ("I guess it will later be helpful") — @@ -193,6 +200,7 @@ this task stays `todo` and does not block closing the rest of this workplan. id: KEY-WP-0004-T07 status: todo priority: low +state_hub_task_id: "9511a7ef-0a04-45db-8a7b-598ab77ce737" ``` Mark workplan finished when T01–T05 are done (T06 may legitimately remain