coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0048: record T30 prerequisites and T15 source merge; T15 waits on owner holder and re-review
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 903097@bnt-lap001
Assistant-Session: aa320c8f-c3fa-46e7-8541-0b58e1e45d23
This commit is contained in:
tegwick 2026-10-17 08:03:37 +02:00
parent 65559efa2f
commit 71a7c06249
1 changed files with 17 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

18
workplans/NK-WP-0048-security-case-types.md
View file

@ -760,12 +760,21 @@ of these native custody, authorization, owner-acceptance or production claims.
```task
id: NK-WP-0048-T15
status: todo
status: wait
depends_on: [NK-WP-0048-T31]
blocking_reason: "Source candidate 061461e is merged. Waiting on the owner to select the real authenticated original-attempt holder and native readback, and on independent re-review of the changed T13 adapter source."
priority: high
state_hub_task_id: "1b825705-4848-5edc-832f-b1622cd9bdb7"
```
2026-10-17 source part merged (061461e via 65559ef). `build()` takes optional
paired `holder`/`observe` capabilities and installs `reconcile_original`; the T31
fixtures now run through the adapter's own path. Rollback after restart is still
refused, and there is no add replay. This changes `keycape-registration-adapter.py`,
so the revision reviewed under Custodian `browser-adapter-next/coordinator-review-r3.json`
is superseded. The new revision has no independent review yet and must not be
pinned on the strength of the old one.
2026-10-17: T31 fixtures done (74adcd7). What remains for T15: the owner
selects the real authenticated original-attempt holder, and the T13 adapter
gains the holder capability, `reconcile_original` and reconcile-aware `verify`
@ -1374,6 +1383,13 @@ priority: high
state_hub_task_id: "6f6073ac-52dd-5b70-8874-6d76d4c072e4"
```
2026-10-17 prerequisites merged (65559ef; combined suite 78 passed):
ensure-groups accepts 1.2 via an explicit `version_root='1.2'` (531151b), with
1.1 still the default. bind-env is now a full Warden v1 `Adapter` (7442d21); its
kernel-level fixture tests like T13's are still missing, and its `build()`
signature changed. Composition is unblocked in source. Owner confirmation of
the proposed step, lane and schema names remains before pinning.
2026-10-17 inputs from T24–T29 that composition must resolve: T24 accepts
only 1.1 while T28 accepts only 1.2, so add an explicit 1.2 ensure-groups path;
T27 still needs full Warden `Adapter` wrapping; the lane, schema and owner names