From a8cebcfc94f1749ae580b823b70bbbc42c3919f8 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 3 Oct 2026 03:31:07 +0200 Subject: [PATCH] CUST-WP-0075-T03: route human gates to hub decisions Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3 --- ...iance01-identity-cutover-and-coulombcore-retirement.md | 5 ++++- workplans/NK-WP-0042-workload-mfa-step-up.md | 5 ++++- workplans/NK-WP-0045-root-grant-custody-record.md | 8 +++++++- 3 files changed, 15 insertions(+), 3 deletions(-) diff --git a/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md b/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md index 3ef6ea1..0b237bd 100644 --- a/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md +++ b/workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md @@ -9,7 +9,7 @@ flavor: implementation owner: codex topic_slug: netkingdom created: "2026-07-27" -updated: "2026-09-28" +updated: "2026-10-03" depends_on: - USER-WP-0020 - NK-WP-0023 @@ -303,6 +303,7 @@ window begins 2026-07-30; no retained state may be deleted under this task. id: NK-WP-0022-T08 status: wait needs_human: true +decision_id: 5d8dcdb5-6d7b-463e-bb39-0a4737331403 blocking_reason: "Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart drill before destructive CoulombCore cleanup." priority: medium state_hub_task_id: "42a3b4c0-3481-5cfa-bdc2-66d05e751829" @@ -324,6 +325,8 @@ Elapsed retention alone does not authorize deletion or completion: T08 still requires a successful railiance01 restore/restart drill and new explicit approval for destructive deletion. +2026-10-03: human gate routed to hub decision 5d8dcdb5-6d7b-463e-bb39-0a4737331403 (D4: Destructive cleanup after retention expiry: CoulombCore remnants, railiance-master retention, live recipient removal) by CUST-WP-0075; resolving that decision raises C-40 here. + ## Safety gates - No retirement before a tested backup and restore path exists. diff --git a/workplans/NK-WP-0042-workload-mfa-step-up.md b/workplans/NK-WP-0042-workload-mfa-step-up.md index 2cd8315..9bf6037 100644 --- a/workplans/NK-WP-0042-workload-mfa-step-up.md +++ b/workplans/NK-WP-0042-workload-mfa-step-up.md @@ -9,7 +9,7 @@ flavor: planning owner: claude-code topic_slug: netkingdom created: "2026-09-23" -updated: "2026-09-28" +updated: "2026-10-03" related: [NK-ADR-0016, NK-WP-0037] state_hub_workstream_id: "3f702215-704b-5788-8ca0-b8b9ba2dd3f8" --- @@ -58,6 +58,7 @@ explicitly. id: NK-WP-0042-T02 status: wait needs_human: true +decision_id: cef97ccd-4ee7-40fe-859e-1df9c9360ecb blocked_on: message-from:user-engine blocking_reason: "Agree the MFA-required user experience with user-engine and one pilot workload; must be accepted from a user's perspective." priority: medium @@ -76,6 +77,8 @@ asking for a proposed pilot workload and U06 touchpoints. This is a UX/product agreement across two repos and a pilot workload owner; NetKingdom cannot decide it unilaterally. +2026-10-03: human gate routed to hub decision cef97ccd-4ee7-40fe-859e-1df9c9360ecb (D10: Identity record and MFA: accept NK-ADR-0017, choose the record read surface, agree the MFA user experience) by CUST-WP-0075; resolving that decision raises C-40 here. + ## Infrastructure review — 2026-09-28 Build T02 on the already completed USER-WP-0033 and KEY-WP-0035 P06 work. diff --git a/workplans/NK-WP-0045-root-grant-custody-record.md b/workplans/NK-WP-0045-root-grant-custody-record.md index 1521345..8737383 100644 --- a/workplans/NK-WP-0045-root-grant-custody-record.md +++ b/workplans/NK-WP-0045-root-grant-custody-record.md @@ -9,7 +9,7 @@ flavor: implementation owner: claude-code topic_slug: netkingdom created: "2026-09-29" -updated: "2026-09-29" +updated: "2026-10-03" related: [NK-ADR-0017, NK-WP-0042] state_hub_workstream_id: "43fbb1aa-b711-5792-b72b-07cd93ca8f45" --- @@ -26,6 +26,7 @@ not change custody itself, and no secret material enters the record. id: NK-WP-0045-T01 status: wait needs_human: true +decision_id: cef97ccd-4ee7-40fe-859e-1df9c9360ecb blocking_reason: "Bernd accepts or amends NK-ADR-0017 (proposed) after user-engine confirms the AccountAuthority mapping." priority: high state_hub_task_id: "25489680-c611-59f9-a0c4-291c4e2a7356" @@ -34,6 +35,8 @@ state_hub_task_id: "25489680-c611-59f9-a0c4-291c4e2a7356" Resolve the open points (15-minute cache bound, envelope mapping) and move the ADR to `accepted`. +2026-10-03: human gate routed to hub decision cef97ccd-4ee7-40fe-859e-1df9c9360ecb (D10: Identity record and MFA: accept NK-ADR-0017, choose the record read surface, agree the MFA user experience) by CUST-WP-0075; resolving that decision raises C-40 here. + ## Define the custody-record schema ```task @@ -70,6 +73,7 @@ id: NK-WP-0045-T04 status: wait depends_on: [NK-WP-0045-T02] needs_human: true +decision_id: cef97ccd-4ee7-40fe-859e-1df9c9360ecb blocking_reason: "Needs a decision on where a workload reads the record (OpenBao-held, platform service, or repository artifact) and which owner delivers it." priority: high state_hub_task_id: "472e191f-8b7a-5d0e-84ef-2717f92bc83c" @@ -78,6 +82,8 @@ state_hub_task_id: "472e191f-8b7a-5d0e-84ef-2717f92bc83c" Options and the owner (net-kingdom versus railiance-platform) go to Bernd; the answer fixes T05. +2026-10-03: human gate routed to hub decision cef97ccd-4ee7-40fe-859e-1df9c9360ecb (D10: Identity record and MFA: accept NK-ADR-0017, choose the record read surface, agree the MFA user experience) by CUST-WP-0075; resolving that decision raises C-40 here. + ## Deliver the read path with the owner ```task