fix(workplans): qualify ad-hoc identifiers with the repository prefix
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

`ADHOC-YYYY-MM-DD` is unique per date but not per repository, so any two repos
opening an ad-hoc on the same day collide. The 2026-08-26 fleet projection
reset refused 9 records for exactly this reason.

Canon (work-record-types_v0.1, CUST-WP-0066) settled the form as
`{PREFIX}-WP-ADHOC-YYYY-MM-DD`, filename unchanged, and grandfathered existing
ids on the condition they are never *silently* re-derived. This is the explicit
migration that clause allows for.

The hub id is derived from the record id, so a changed id is a different
record: stale state_hub_*_id fields are dropped and fix-consistency re-derives.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
tegwick 2026-08-28 00:28:23 +02:00
parent c499843091
commit 13001a1452
3 changed files with 10 additions and 18 deletions

View file

@ -1,5 +1,5 @@
--- ---
id: adhoc-2026-07-02 id: NK-WP-ADHOC-2026-07-02
type: workplan type: workplan
title: "Ad Hoc Tasks — 2026-07-02" title: "Ad Hoc Tasks — 2026-07-02"
domain: infotech domain: infotech
@ -9,7 +9,6 @@ owner: codex
topic_slug: net-kingdom topic_slug: net-kingdom
created: "2026-07-02" created: "2026-07-02"
updated: "2026-07-02" updated: "2026-07-02"
state_hub_workstream_id: "67c1c7ac-d8b1-41dc-a81a-4e43f1afd068"
--- ---
# Ad Hoc Tasks — 2026-07-02 # Ad Hoc Tasks — 2026-07-02
@ -17,10 +16,9 @@ state_hub_workstream_id: "67c1c7ac-d8b1-41dc-a81a-4e43f1afd068"
## Fix creds-bootstrap-agent Phase 0 dry-run on machines without the age key ## Fix creds-bootstrap-agent Phase 0 dry-run on machines without the age key
```task ```task
id: ADHOC-2026-07-02-T01 id: NK-WP-ADHOC-2026-07-02-T01
status: done status: done
priority: low priority: low
state_hub_task_id: "b86bf898-7916-4db3-ba67-ba3a3fd8a49f"
``` ```
`--dry-run` previously aborted silently in Phase 0 on any machine without `--dry-run` previously aborted silently in Phase 0 on any machine without
@ -37,7 +35,7 @@ no age key.
## Fix broken check-secrets Make target (unescaped `$`) ## Fix broken check-secrets Make target (unescaped `$`)
```task ```task
id: ADHOC-2026-07-02-T02 id: NK-WP-ADHOC-2026-07-02-T02
status: done status: done
priority: medium priority: medium
``` ```

View file

@ -1,5 +1,5 @@
--- ---
id: ADHOC-2026-08-14 id: NK-WP-ADHOC-2026-08-14
type: workplan type: workplan
title: "Close NK-WP-0025 residuals" title: "Close NK-WP-0025 residuals"
domain: infotech domain: infotech
@ -9,18 +9,16 @@ owner: codex
topic_slug: netkingdom topic_slug: netkingdom
created: "2026-08-14" created: "2026-08-14"
updated: "2026-08-14" updated: "2026-08-14"
state_hub_workstream_id: "a5097121-1461-59f8-81fa-e6ecef527337"
--- ---
# ADHOC-2026-08-14 - NK-WP-0025 residual closeout # NK-WP-ADHOC-2026-08-14 - NK-WP-0025 residual closeout
## Reconcile Coulomb Social Case B residual records ## Reconcile Coulomb Social Case B residual records
```task ```task
id: ADHOC-2026-08-14-T01 id: NK-WP-ADHOC-2026-08-14-T01
status: done status: done
priority: medium priority: medium
state_hub_task_id: "9eaad1fd-695c-5df3-aec2-012e4a4bc8c8"
``` ```
Update the owning smoke evidence and close or narrow CSOC-IN-0001 and Update the owning smoke evidence and close or narrow CSOC-IN-0001 and
@ -30,10 +28,9 @@ repeat-login, collision, redirect, and assurance evidence.
## Protect the canonical LDAP-DN subject contract ## Protect the canonical LDAP-DN subject contract
```task ```task
id: ADHOC-2026-08-14-T02 id: NK-WP-ADHOC-2026-08-14-T02
status: done status: done
priority: medium priority: medium
state_hub_task_id: "31319b1b-8b55-59fe-b3d7-4486f1928b4c"
``` ```
Add focused regression coverage for the canonical LDAP-DN OIDC subject and Add focused regression coverage for the canonical LDAP-DN OIDC subject and
@ -42,10 +39,9 @@ the reverse normalization used by directory lifecycle and password setup.
## Persist the audit-core multi-tenant sender scope ## Persist the audit-core multi-tenant sender scope
```task ```task
id: ADHOC-2026-08-14-T03 id: NK-WP-ADHOC-2026-08-14-T03
status: done status: done
priority: high priority: high
state_hub_task_id: "90250faf-0022-5553-b832-a51f775166a8"
``` ```
Move the live `user-engine` sender registry from its manually minted Secret to Move the live `user-engine` sender registry from its manually minted Secret to

View file

@ -1,5 +1,5 @@
--- ---
id: ADHOC-2026-08-23 id: NK-WP-ADHOC-2026-08-23
type: workplan type: workplan
title: "Ad Hoc Tasks — 2026-08-23" title: "Ad Hoc Tasks — 2026-08-23"
domain: infotech domain: infotech
@ -9,7 +9,6 @@ owner: codex
topic_slug: netkingdom topic_slug: netkingdom
created: "2026-08-23" created: "2026-08-23"
updated: "2026-08-23" updated: "2026-08-23"
state_hub_workstream_id: "e25ba5fa-eaae-5039-8d93-a69c6d837fc4"
--- ---
# Ad Hoc Tasks — 2026-08-23 # Ad Hoc Tasks — 2026-08-23
@ -17,10 +16,9 @@ state_hub_workstream_id: "e25ba5fa-eaae-5039-8d93-a69c6d837fc4"
## Advance the canonical audit-core E level after adversarial evidence ## Advance the canonical audit-core E level after adversarial evidence
```task ```task
id: ADHOC-2026-08-23-T01 id: NK-WP-ADHOC-2026-08-23-T01
status: done status: done
priority: high priority: high
state_hub_task_id: "c837fccb-54f9-5cf4-b177-153f118147e4"
``` ```
Updated the Tenancy Posture §5 worked example from `E1` to `E2` after Updated the Tenancy Posture §5 worked example from `E1` to `E2` after