coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(consistency): register NK-WP-0045 and sync write-back
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details

Browse source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 6969@bnt-lap001
Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0
This commit is contained in:
tegwick 2026-09-29 23:02:34 +02:00
parent 98bd475b29
commit ecd7c619c5
3 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
WORK-RECORDS.md
View file

@ -38,6 +38,7 @@
| workplan | NK-WP-0042 | blocked | — | workplans/NK-WP-0042-workload-mfa-step-up.md |
| workplan | NK-WP-0043 | finished | — | workplans/NK-WP-0043-cadence-assessment-and-operating-guidance.md |
| workplan | NK-WP-0044 | active | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md |
| workplan | NK-WP-0045 | proposed | — | workplans/NK-WP-0045-root-grant-custody-record.md |
| task | NK-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md |
| task | NK-WP-ADHOC-2026-07-02-T02 | done | — | workplans/ADHOC-2026-07-02.md |
| task | NK-WP-ADHOC-2026-08-14-T01 | done | — | workplans/ADHOC-2026-08-14.md |
@ -168,6 +169,13 @@
| task | NK-WP-0044-T04 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md |
| task | NK-WP-0044-T05 | wait | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md |
| task | NK-WP-0044-T06 | wait | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md |
| task | NK-WP-0044-T07 | wait | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md |
| task | NK-WP-0045-T01 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md |
| task | NK-WP-0045-T02 | todo | — | workplans/NK-WP-0045-root-grant-custody-record.md |
| task | NK-WP-0045-T03 | todo | — | workplans/NK-WP-0045-root-grant-custody-record.md |
| task | NK-WP-0045-T04 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md |
| task | NK-WP-0045-T05 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md |
| task | NK-WP-0045-T06 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md |
| intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
| intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
| intake | NET-IN-0001 | open | — | intakes/intakes.md |

1
workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md
View file

@ -113,6 +113,7 @@ status: wait
needs_human: true
blocking_reason: "Content work, not scheduled: needs a decision to start. The seven runbooks map without gaps (runbook-tutorials/docs/console-mapping.md)."
priority: low
state_hub_task_id: "8628d5eb-6e5d-501d-a8f5-960d6b5db8f4"
```
The security bootstrap console's seven runbooks (privacyIDEA realm repair, key material compromised, generate new unseal keys, emergency lock-down,

7
workplans/NK-WP-0045-root-grant-custody-record.md
View file

@ -11,6 +11,7 @@ topic_slug: netkingdom
created: "2026-09-29"
updated: "2026-09-29"
related: [NK-ADR-0017, NK-WP-0042]
state_hub_workstream_id: "43fbb1aa-b711-5792-b72b-07cd93ca8f45"
---
NK-ADR-0017 makes the platform-root custody record the authority for the root
@ -27,6 +28,7 @@ status: wait
needs_human: true
blocking_reason: "Bernd accepts or amends NK-ADR-0017 (proposed) after user-engine confirms the AccountAuthority mapping."
priority: high
state_hub_task_id: "25489680-c611-59f9-a0c4-291c4e2a7356"
```
Resolve the open points (15-minute cache bound, envelope mapping) and move the
@ -39,6 +41,7 @@ id: NK-WP-0045-T02
status: todo
depends_on: [NK-WP-0045-T01]
priority: high
state_hub_task_id: "49d8dd25-b555-55e9-a481-037d2b98fcc5"
```
Add `canon/schemas/custody-record_v0.1.schema.json`: record id and revision,
@ -53,6 +56,7 @@ id: NK-WP-0045-T03
status: todo
depends_on: [NK-WP-0045-T02]
priority: medium
state_hub_task_id: "6372f282-a12b-54b4-b2ea-327b20e58c8f"
```
Validator with grant, revocation and supersession fixtures, plus negative cases:
@ -68,6 +72,7 @@ depends_on: [NK-WP-0045-T02]
needs_human: true
blocking_reason: "Needs a decision on where a workload reads the record (OpenBao-held, platform service, or repository artifact) and which owner delivers it."
priority: high
state_hub_task_id: "472e191f-8b7a-5d0e-84ef-2717f92bc83c"
```
Options and the owner (net-kingdom versus railiance-platform) go to Bernd; the
@ -81,6 +86,7 @@ status: wait
depends_on: [NK-WP-0045-T04]
blocking_reason: "Depends on the read-surface decision and on the delivering owner."
priority: medium
state_hub_task_id: "628e8a3b-17a4-5f97-a484-c564a87d650d"
```
Hand off the schema and read contract to the owner; NetKingdom does not absorb
@ -94,6 +100,7 @@ status: wait
depends_on: [NK-WP-0045-T05]
blocking_reason: "Needs the delivered read path."
priority: medium
state_hub_task_id: "eb71faf7-d6c7-5a3a-bdb6-17281cc5a01a"
```
Tell user-engine the read path is live so USER-WP-0037-T02 can derive