CUST-WP-0075-T03: route human gates to hub decisions

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 3775@bnt-lap001
Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3

workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md

@@ -9,7 +9,7 @@ flavor: implementation
 owner: codex
 topic_slug: netkingdom
 created: "2026-07-27"
-updated: "2026-09-28"
+updated: "2026-10-03"
 depends_on:
   - USER-WP-0020
   - NK-WP-0023
@@ -303,6 +303,7 @@ window begins 2026-07-30; no retained state may be deleted under this task.
 id: NK-WP-0022-T08
 status: wait
 needs_human: true
+decision_id: 5d8dcdb5-6d7b-463e-bb39-0a4737331403
 blocking_reason: "Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart drill before destructive CoulombCore cleanup."
 priority: medium
 state_hub_task_id: "42a3b4c0-3481-5cfa-bdc2-66d05e751829"
@@ -324,6 +325,8 @@ Elapsed retention alone does not authorize deletion or completion: T08 still
 requires a successful railiance01 restore/restart drill and new explicit
 approval for destructive deletion.
 
+2026-10-03: human gate routed to hub decision 5d8dcdb5-6d7b-463e-bb39-0a4737331403 (D4: Destructive cleanup after retention expiry: CoulombCore remnants, railiance-master retention, live recipient removal) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Safety gates
 
 - No retirement before a tested backup and restore path exists.

workplans/NK-WP-0042-workload-mfa-step-up.md

@@ -9,7 +9,7 @@ flavor: planning
 owner: claude-code
 topic_slug: netkingdom
 created: "2026-09-23"
-updated: "2026-09-28"
+updated: "2026-10-03"
 related: [NK-ADR-0016, NK-WP-0037]
 state_hub_workstream_id: "3f702215-704b-5788-8ca0-b8b9ba2dd3f8"
 ---
@@ -58,6 +58,7 @@ explicitly.
 id: NK-WP-0042-T02
 status: wait
 needs_human: true
+decision_id: cef97ccd-4ee7-40fe-859e-1df9c9360ecb
 blocked_on: message-from:user-engine
 blocking_reason: "Agree the MFA-required user experience with user-engine and one pilot workload; must be accepted from a user's perspective."
 priority: medium
@@ -76,6 +77,8 @@ asking for a proposed pilot workload and U06 touchpoints. This is a
 UX/product agreement across two repos and a pilot workload owner; NetKingdom
 cannot decide it unilaterally.
 
+2026-10-03: human gate routed to hub decision cef97ccd-4ee7-40fe-859e-1df9c9360ecb (D10: Identity record and MFA: accept NK-ADR-0017, choose the record read surface, agree the MFA user experience) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Infrastructure review — 2026-09-28
 
 Build T02 on the already completed USER-WP-0033 and KEY-WP-0035 P06 work.

workplans/NK-WP-0045-root-grant-custody-record.md

@@ -9,7 +9,7 @@ flavor: implementation
 owner: claude-code
 topic_slug: netkingdom
 created: "2026-09-29"
-updated: "2026-09-29"
+updated: "2026-10-03"
 related: [NK-ADR-0017, NK-WP-0042]
 state_hub_workstream_id: "43fbb1aa-b711-5792-b72b-07cd93ca8f45"
 ---
@@ -26,6 +26,7 @@ not change custody itself, and no secret material enters the record.
 id: NK-WP-0045-T01
 status: wait
 needs_human: true
+decision_id: cef97ccd-4ee7-40fe-859e-1df9c9360ecb
 blocking_reason: "Bernd accepts or amends NK-ADR-0017 (proposed) after user-engine confirms the AccountAuthority mapping."
 priority: high
 state_hub_task_id: "25489680-c611-59f9-a0c4-291c4e2a7356"
@@ -34,6 +35,8 @@ state_hub_task_id: "25489680-c611-59f9-a0c4-291c4e2a7356"
 Resolve the open points (15-minute cache bound, envelope mapping) and move the
 ADR to `accepted`.
 
+2026-10-03: human gate routed to hub decision cef97ccd-4ee7-40fe-859e-1df9c9360ecb (D10: Identity record and MFA: accept NK-ADR-0017, choose the record read surface, agree the MFA user experience) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Define the custody-record schema
 
 ```task
@@ -70,6 +73,7 @@ id: NK-WP-0045-T04
 status: wait
 depends_on: [NK-WP-0045-T02]
 needs_human: true
+decision_id: cef97ccd-4ee7-40fe-859e-1df9c9360ecb
 blocking_reason: "Needs a decision on where a workload reads the record (OpenBao-held, platform service, or repository artifact) and which owner delivers it."
 priority: high
 state_hub_task_id: "472e191f-8b7a-5d0e-84ef-2717f92bc83c"
@@ -78,6 +82,8 @@ state_hub_task_id: "472e191f-8b7a-5d0e-84ef-2717f92bc83c"
 Options and the owner (net-kingdom versus railiance-platform) go to Bernd; the
 answer fixes T05.
 
+2026-10-03: human gate routed to hub decision cef97ccd-4ee7-40fe-859e-1df9c9360ecb (D10: Identity record and MFA: accept NK-ADR-0017, choose the record read surface, agree the MFA user experience) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Deliver the read path with the owner
 
 ```task