coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(consistency): register KEY-WP-0004 in State Hub [auto]

Browse source 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-07-23 14:35:36 +02:00
parent 8a7e243d69
commit 7ddc48d3cd
2 changed files with 63 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: netkingdom
created: "2026-07-23"
updated: "2026-07-23"
state_hub_workstream_id: "ad6fa711-ba5b-4e7d-86e3-641f9acaf853"
---
# Binky Hedgehog GmbH as first NetKingdom tenant + qonto-assistant workload identity
@ -45,6 +46,7 @@ by this workplan, since it's a different repo's scope and code change.
id: KEY-WP-0004-T01
status: todo
priority: high
state_hub_task_id: "ec65d1be-11cb-421f-84dd-f401206526fe"
```
The IAM profile's tenant identifiers (`tenant:platform`, `tenant:coulomb`,
@ -76,6 +78,7 @@ canon note); a test-subject token carries the correct `tenant` claim.
id: KEY-WP-0004-T02
status: todo
priority: high
state_hub_task_id: "b5cb4497-095c-4dd7-af31-831deddd422e"
```
Create the user in key-cape's current backend, enroll MFA per profile
@ -98,6 +101,7 @@ other tenant.
id: KEY-WP-0004-T03
status: todo
priority: high
state_hub_task_id: "fbe9d2e0-7532-4403-8e12-947aa8fd0da7"
```
Register an OIDC client per the profile's service-account/workload-identity
@ -122,6 +126,7 @@ here; no secret material appears anywhere in this repo's history.
id: KEY-WP-0004-T04
status: todo
priority: high
state_hub_task_id: "80901eb3-a959-49ab-bcde-01ddaafa8e59"
```
Coordinate with `secrets-engine` to create a scoped OpenBao lane for this
@ -142,6 +147,7 @@ this flow.
id: KEY-WP-0004-T05
status: todo
priority: high
state_hub_task_id: "a91326a6-f498-4569-a56b-95a49fe5794d"
```
This is the task that directly minimizes Bernd's ongoing engagement: add an
@ -170,6 +176,7 @@ access`, not direct key-cape/OpenBao admin knowledge.
id: KEY-WP-0004-T06
status: todo
priority: low
state_hub_task_id: "d3460058-6e4c-426b-b575-1bbad192e40c"
```
Forward-looking per Bernd's framing ("I guess it will later be helpful") —
@ -193,6 +200,7 @@ this task stays `todo` and does not block closing the rest of this workplan.
id: KEY-WP-0004-T07
status: todo
priority: low
state_hub_task_id: "9511a7ef-0a04-45db-8a7b-598ab77ce737"
```
Mark workplan finished when T01–T05 are done (T06 may legitimately remain