key-cape/WORK-RECORDS.md

Work Records — key-cape

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind	ID	Status	Lane	Source
workplan	ADHOC-2026-09-05	finished	—	workplans/ADHOC-2026-09-05.md
workplan	ADHOC-2026-09-07	finished	—	workplans/ADHOC-2026-09-07.md
workplan	ADHOC-2026-09-27	finished	—	workplans/ADHOC-2026-09-27.md
workplan	KEY-WP-0001	finished	—	workplans/KEY-WP-0001-keycape-implementation.md
workplan	KEY-WP-0002	finished	—	workplans/KEY-WP-0002-container-image-gitea.md
workplan	KEY-WP-0003	finished	—	workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
workplan	KEY-WP-0004	finished	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
workplan	KEY-WP-0005	finished	—	workplans/KEY-WP-0005-iam-profile-core-claims.md
workplan	KEY-WP-0006	finished	—	workplans/KEY-WP-0006-client-credentials-service-tokens.md
workplan	KEY-WP-0007	finished	—	workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
workplan	KEY-WP-0008	finished	—	workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
workplan	KEY-WP-0009	finished	—	workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
workplan	KEY-WP-0010	finished	—	workplans/KEY-WP-0010-openbao-operator-loopback-callback.md
workplan	KEY-WP-0011	finished	—	workplans/KEY-WP-0011-live-secret-exposure-recovery.md
workplan	KEY-WP-0012	finished	—	workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
workplan	KEY-WP-0013	finished	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
workplan	KEY-WP-0014	finished	—	workplans/KEY-WP-0014-native-credential-lane-handoff.md
workplan	KEY-WP-0015	finished	—	workplans/KEY-WP-0015-scope-intent-assessment.md
workplan	KEY-WP-0016	finished	—	workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
workplan	KEY-WP-0017	finished	—	workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
workplan	KEY-WP-0018	finished	—	workplans/KEY-WP-0018-export-completeness-evidence.md
workplan	KEY-WP-0019	finished	—	workplans/KEY-WP-0019-upstream-provider-token-verification.md
workplan	KEY-WP-0020	finished	—	workplans/KEY-WP-0020-migration-contract-preservation.md
workplan	KEY-WP-0021	finished	—	workplans/KEY-WP-0021-snapshot-attribute-validation.md
workplan	KEY-WP-0022	finished	—	workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
workplan	KEY-WP-0023	finished	—	workplans/KEY-WP-0023-live-migration-proof.md
workplan	KEY-WP-0024	finished	—	workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md
workplan	KEY-WP-0025	finished	—	workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
workplan	KEY-WP-0026	finished	—	workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
workplan	KEY-WP-0027	finished	—	workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
workplan	KEY-WP-0028	finished	—	workplans/KEY-WP-0028-browser-client-field-validation.md
workplan	KEY-WP-0029	finished	—	workplans/KEY-WP-0029-scope-reassessment.md
workplan	KEY-WP-0030	finished	—	workplans/KEY-WP-0030-tenant-precondition-guard.md
workplan	KEY-WP-0031	finished	—	workplans/KEY-WP-0031-gate-house-tenant-ruling.md
workplan	KEY-WP-0032	finished	—	workplans/KEY-WP-0032-principal-type-provenance-guard.md
workplan	KEY-WP-0033	finished	—	workplans/KEY-WP-0033-vergabe-fresh-login.md
workplan	KEY-WP-0034	finished	—	workplans/KEY-WP-0034-account-recovery.md
workplan	KEY-WP-0035	finished	—	workplans/KEY-WP-0035-optional-mfa.md
workplan	KEY-WP-0036	finished	—	workplans/KEY-WP-0036-platform-factor-recovery.md
workplan	KEY-WP-0037	finished	—	workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
workplan	KEY-WP-0038	active	—	workplans/KEY-WP-0038-forgejo-oidc-client.md
workplan	KEY-WP-0039	active	—	workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
workplan	KEY-WP-0040	finished	—	workplans/KEY-WP-0040-mfa-attended-run-findings.md
workplan	KEY-WP-0041	finished	—	workplans/KEY-WP-0041-sign-in-diagnosis-page.md
workplan	KEY-WP-0042	proposed	—	workplans/KEY-WP-0042-online-access-token-status.md
workplan	KEY-WP-0043	proposed	—	workplans/KEY-WP-0043-per-run-agent-identity.md
workplan	KEY-WP-0044	proposed	—	workplans/KEY-WP-0044-audit-correlation-and-intake.md
workplan	KEY-WP-0045	active	—	workplans/KEY-WP-0045-service-identity-facts-export.md
workplan	KEY-WP-0046	finished	—	workplans/KEY-WP-0046-directory-bind-password-env.md
task	ADHOC-2026-09-05-T01	done	—	workplans/ADHOC-2026-09-05.md
task	ADHOC-2026-09-07-T01	done	—	workplans/ADHOC-2026-09-07.md
task	ADHOC-2026-09-27-T01	done	—	workplans/ADHOC-2026-09-27.md
task	ADHOC-2026-09-27-T02	done	—	workplans/ADHOC-2026-09-27.md
task	KEY-WP-0001-T01	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T02	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T03	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T04	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T05	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T06	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T07	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T08	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T09	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T10	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T11	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T12	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T13	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T14	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T15	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T16	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T17	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T18	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T19	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T20	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T21	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T22	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0001-T23	done	—	workplans/KEY-WP-0001-keycape-implementation.md
task	KEY-WP-0002-T01	done	—	workplans/KEY-WP-0002-container-image-gitea.md
task	KEY-WP-0002-T02	done	—	workplans/KEY-WP-0002-container-image-gitea.md
task	KEY-WP-0002-T03	done	—	workplans/KEY-WP-0002-container-image-gitea.md
task	KEY-WP-0002-T04	done	—	workplans/KEY-WP-0002-container-image-gitea.md
task	KEY-WP-0002-T05	done	—	workplans/KEY-WP-0002-container-image-gitea.md
task	KEY-WP-0002-T06	done	—	workplans/KEY-WP-0002-container-image-gitea.md
task	KEY-WP-0003-T01	done	—	workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task	KEY-WP-0003-T02	done	—	workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task	KEY-WP-0003-T03	done	—	workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task	KEY-WP-0003-T04	done	—	workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task	KEY-WP-0003-T05	done	—	workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task	KEY-WP-0004-T01	done	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task	KEY-WP-0004-T02	done	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task	KEY-WP-0004-T03	done	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task	KEY-WP-0004-T04	done	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task	KEY-WP-0004-T05	done	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task	KEY-WP-0004-T06	cancel	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task	KEY-WP-0004-T07	done	—	workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task	KEY-WP-0005-T01	done	—	workplans/KEY-WP-0005-iam-profile-core-claims.md
task	KEY-WP-0005-T02	done	—	workplans/KEY-WP-0005-iam-profile-core-claims.md
task	KEY-WP-0005-T03	done	—	workplans/KEY-WP-0005-iam-profile-core-claims.md
task	KEY-WP-0006-T01	done	—	workplans/KEY-WP-0006-client-credentials-service-tokens.md
task	KEY-WP-0006-T02	done	—	workplans/KEY-WP-0006-client-credentials-service-tokens.md
task	KEY-WP-0006-T03	done	—	workplans/KEY-WP-0006-client-credentials-service-tokens.md
task	KEY-WP-0006-T04	done	—	workplans/KEY-WP-0006-client-credentials-service-tokens.md
task	KEY-WP-0006-T05	done	—	workplans/KEY-WP-0006-client-credentials-service-tokens.md
task	KEY-WP-0007-T01	done	—	workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
task	KEY-WP-0007-T02	done	—	workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
task	KEY-WP-0007-T03	done	—	workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
task	KEY-WP-0008-T01	done	—	workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task	KEY-WP-0008-T02	done	—	workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task	KEY-WP-0008-T03	done	—	workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task	KEY-WP-0008-T04	done	—	workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task	KEY-WP-0009-T01	done	—	workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task	KEY-WP-0009-T02	done	—	workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task	KEY-WP-0009-T03	done	—	workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task	KEY-WP-0009-T04	done	—	workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task	KEY-WP-0010-T01	done	—	workplans/KEY-WP-0010-openbao-operator-loopback-callback.md
task	KEY-WP-0011-T01	done	—	workplans/KEY-WP-0011-live-secret-exposure-recovery.md
task	KEY-WP-0011-T02	done	—	workplans/KEY-WP-0011-live-secret-exposure-recovery.md
task	KEY-WP-0011-T03	done	—	workplans/KEY-WP-0011-live-secret-exposure-recovery.md
task	KEY-WP-0012-T01	done	—	workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
task	KEY-WP-0012-T02	done	—	workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
task	KEY-WP-0012-T03	done	—	workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
task	KEY-WP-0013-T01	done	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
task	KEY-WP-0013-T02	done	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
task	KEY-WP-0013-T03	done	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
task	KEY-WP-0013-T04	done	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
task	KEY-WP-0013-T05	done	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
task	KEY-WP-0013-T06	done	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
task	KEY-WP-0013-T07	done	—	workplans/KEY-WP-0013-approval-engine-resource-audience.md
task	KEY-WP-0014-T01	done	—	workplans/KEY-WP-0014-native-credential-lane-handoff.md
task	KEY-WP-0014-T02	done	—	workplans/KEY-WP-0014-native-credential-lane-handoff.md
task	KEY-WP-0014-T03	done	—	workplans/KEY-WP-0014-native-credential-lane-handoff.md
task	KEY-WP-0014-T04	done	—	workplans/KEY-WP-0014-native-credential-lane-handoff.md
task	KEY-WP-0015-T01	done	—	workplans/KEY-WP-0015-scope-intent-assessment.md
task	KEY-WP-0016-T01	done	—	workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task	KEY-WP-0016-T02	done	—	workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task	KEY-WP-0016-T03	done	—	workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task	KEY-WP-0016-T04	done	—	workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task	KEY-WP-0017-T01	done	—	workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task	KEY-WP-0017-T02	done	—	workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task	KEY-WP-0017-T03	done	—	workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task	KEY-WP-0017-T04	done	—	workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task	KEY-WP-0018-T01	done	—	workplans/KEY-WP-0018-export-completeness-evidence.md
task	KEY-WP-0018-T02	done	—	workplans/KEY-WP-0018-export-completeness-evidence.md
task	KEY-WP-0018-T03	done	—	workplans/KEY-WP-0018-export-completeness-evidence.md
task	KEY-WP-0019-T01	done	—	workplans/KEY-WP-0019-upstream-provider-token-verification.md
task	KEY-WP-0019-T02	done	—	workplans/KEY-WP-0019-upstream-provider-token-verification.md
task	KEY-WP-0019-T03	done	—	workplans/KEY-WP-0019-upstream-provider-token-verification.md
task	KEY-WP-0019-T04	done	—	workplans/KEY-WP-0019-upstream-provider-token-verification.md
task	KEY-WP-0019-T05	done	—	workplans/KEY-WP-0019-upstream-provider-token-verification.md
task	KEY-WP-0020-T01	done	—	workplans/KEY-WP-0020-migration-contract-preservation.md
task	KEY-WP-0020-T02	done	—	workplans/KEY-WP-0020-migration-contract-preservation.md
task	KEY-WP-0020-T03	done	—	workplans/KEY-WP-0020-migration-contract-preservation.md
task	KEY-WP-0021-T01	done	—	workplans/KEY-WP-0021-snapshot-attribute-validation.md
task	KEY-WP-0021-T02	done	—	workplans/KEY-WP-0021-snapshot-attribute-validation.md
task	KEY-WP-0021-T03	done	—	workplans/KEY-WP-0021-snapshot-attribute-validation.md
task	KEY-WP-0022-T01	done	—	workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task	KEY-WP-0022-T02	done	—	workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task	KEY-WP-0022-T03	done	—	workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task	KEY-WP-0022-T04	done	—	workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task	KEY-WP-0022-T05	done	—	workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task	KEY-WP-0023-T01	done	—	workplans/KEY-WP-0023-live-migration-proof.md
task	KEY-WP-0023-T02	done	—	workplans/KEY-WP-0023-live-migration-proof.md
task	KEY-WP-0023-T03	done	—	workplans/KEY-WP-0023-live-migration-proof.md
task	KEY-WP-0023-T04	done	—	workplans/KEY-WP-0023-live-migration-proof.md
task	KEY-WP-0023-T05	done	—	workplans/KEY-WP-0023-live-migration-proof.md
task	KEY-WP-0024-T01	done	—	workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md
task	KEY-WP-0024-T02	done	—	workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md
task	KEY-WP-0025-T01	done	—	workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task	KEY-WP-0025-T02	done	—	workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task	KEY-WP-0025-T03	done	—	workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task	KEY-WP-0025-T04	done	—	workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task	KEY-WP-0026-T01	done	—	workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task	KEY-WP-0026-T02	done	—	workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task	KEY-WP-0026-T03	done	—	workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task	KEY-WP-0026-T04	done	—	workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task	KEY-WP-0026-T05	done	—	workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task	KEY-WP-0026-T06	done	—	workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task	KEY-WP-0027-T01	done	—	workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task	KEY-WP-0027-T02	done	—	workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task	KEY-WP-0027-T03	done	—	workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task	KEY-WP-0027-T04	done	—	workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task	KEY-WP-0028-T01	done	—	workplans/KEY-WP-0028-browser-client-field-validation.md
task	KEY-WP-0028-T02	done	—	workplans/KEY-WP-0028-browser-client-field-validation.md
task	KEY-WP-0029-T01	done	—	workplans/KEY-WP-0029-scope-reassessment.md
task	KEY-WP-0029-T02	done	—	workplans/KEY-WP-0029-scope-reassessment.md
task	KEY-WP-0029-T03	done	—	workplans/KEY-WP-0029-scope-reassessment.md
task	KEY-WP-0030-T01	done	—	workplans/KEY-WP-0030-tenant-precondition-guard.md
task	KEY-WP-0030-T02	done	—	workplans/KEY-WP-0030-tenant-precondition-guard.md
task	KEY-WP-0031-T01	done	—	workplans/KEY-WP-0031-gate-house-tenant-ruling.md
task	KEY-WP-0031-T02	done	—	workplans/KEY-WP-0031-gate-house-tenant-ruling.md
task	KEY-WP-0032-T01	done	—	workplans/KEY-WP-0032-principal-type-provenance-guard.md
task	KEY-WP-0032-T02	done	—	workplans/KEY-WP-0032-principal-type-provenance-guard.md
task	KEY-WP-0033-T01	done	—	workplans/KEY-WP-0033-vergabe-fresh-login.md
task	KEY-WP-0033-T02	done	—	workplans/KEY-WP-0033-vergabe-fresh-login.md
task	KEY-WP-0034-T01	done	—	workplans/KEY-WP-0034-account-recovery.md
task	KEY-WP-0034-T02	done	—	workplans/KEY-WP-0034-account-recovery.md
task	KEY-WP-0035-T01	done	—	workplans/KEY-WP-0035-optional-mfa.md
task	KEY-WP-0035-T02	done	—	workplans/KEY-WP-0035-optional-mfa.md
task	KEY-WP-0035-T03	done	—	workplans/KEY-WP-0035-optional-mfa.md
task	KEY-WP-0035-T04	done	—	workplans/KEY-WP-0035-optional-mfa.md
task	KEY-WP-0035-T05	done	—	workplans/KEY-WP-0035-optional-mfa.md
task	KEY-WP-0036-T01	done	—	workplans/KEY-WP-0036-platform-factor-recovery.md
task	KEY-WP-0036-T02	cancel	—	workplans/KEY-WP-0036-platform-factor-recovery.md
task	KEY-WP-0036-T03	done	—	workplans/KEY-WP-0036-platform-factor-recovery.md
task	KEY-WP-0037-T01	done	—	workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task	KEY-WP-0037-T02	done	—	workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task	KEY-WP-0037-T03	done	—	workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task	KEY-WP-0037-T04	done	—	workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task	KEY-WP-0038-T01	done	—	workplans/KEY-WP-0038-forgejo-oidc-client.md
task	KEY-WP-0038-T02	wait	—	workplans/KEY-WP-0038-forgejo-oidc-client.md
task	KEY-WP-0038-T03	wait	—	workplans/KEY-WP-0038-forgejo-oidc-client.md
task	KEY-WP-0038-T04	cancel	—	workplans/KEY-WP-0038-forgejo-oidc-client.md
task	KEY-WP-0039-T01	done	—	workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
task	KEY-WP-0039-T02	wait	—	workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
task	KEY-WP-0039-T03	done	—	workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
task	KEY-WP-0040-T01	done	—	workplans/KEY-WP-0040-mfa-attended-run-findings.md
task	KEY-WP-0040-T02	done	—	workplans/KEY-WP-0040-mfa-attended-run-findings.md
task	KEY-WP-0041-T01	done	—	workplans/KEY-WP-0041-sign-in-diagnosis-page.md
task	KEY-WP-0041-T02	done	—	workplans/KEY-WP-0041-sign-in-diagnosis-page.md
task	KEY-WP-0042-T01	progress	—	workplans/KEY-WP-0042-online-access-token-status.md
task	KEY-WP-0042-T02	done	—	workplans/KEY-WP-0042-online-access-token-status.md
task	KEY-WP-0042-T03	todo	—	workplans/KEY-WP-0042-online-access-token-status.md
task	KEY-WP-0042-T04	done	—	workplans/KEY-WP-0042-online-access-token-status.md
task	KEY-WP-0043-T01	todo	—	workplans/KEY-WP-0043-per-run-agent-identity.md
task	KEY-WP-0043-T02	wait	—	workplans/KEY-WP-0043-per-run-agent-identity.md
task	KEY-WP-0043-T03	wait	—	workplans/KEY-WP-0043-per-run-agent-identity.md
task	KEY-WP-0043-T04	wait	—	workplans/KEY-WP-0043-per-run-agent-identity.md
task	KEY-WP-0044-T01	todo	—	workplans/KEY-WP-0044-audit-correlation-and-intake.md
task	KEY-WP-0044-T02	todo	—	workplans/KEY-WP-0044-audit-correlation-and-intake.md
task	KEY-WP-0044-T03	wait	—	workplans/KEY-WP-0044-audit-correlation-and-intake.md
task	KEY-WP-0045-T01	done	—	workplans/KEY-WP-0045-service-identity-facts-export.md
task	KEY-WP-0045-T02	wait	—	workplans/KEY-WP-0045-service-identity-facts-export.md
task	KEY-WP-0045-T03	todo	—	workplans/KEY-WP-0045-service-identity-facts-export.md
task	KEY-WP-0046-T01	done	—	workplans/KEY-WP-0046-directory-bind-password-env.md
task	KEY-WP-0046-T02	done	—	workplans/KEY-WP-0046-directory-bind-password-env.md
intake	KEY-IN-0001	closed	—	intakes/intakes.md