From ecd7c619c587de8e12db990d7dabcc2458fc44b6 Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 29 Sep 2026 23:02:34 +0200 Subject: [PATCH] chore(consistency): register NK-WP-0045 and sync write-back Co-Authored-By: Claude Sonnet 5.5 Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0 --- WORK-RECORDS.md | 8 ++++++++ .../NK-WP-0044-runbook-packs-for-runbook-tutorials.md | 1 + workplans/NK-WP-0045-root-grant-custody-record.md | 7 +++++++ 3 files changed, 16 insertions(+) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 86fb2d1..e2ade46 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -38,6 +38,7 @@ | workplan | NK-WP-0042 | blocked | — | workplans/NK-WP-0042-workload-mfa-step-up.md | | workplan | NK-WP-0043 | finished | — | workplans/NK-WP-0043-cadence-assessment-and-operating-guidance.md | | workplan | NK-WP-0044 | active | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| workplan | NK-WP-0045 | proposed | — | workplans/NK-WP-0045-root-grant-custody-record.md | | task | NK-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md | | task | NK-WP-ADHOC-2026-07-02-T02 | done | — | workplans/ADHOC-2026-07-02.md | | task | NK-WP-ADHOC-2026-08-14-T01 | done | — | workplans/ADHOC-2026-08-14.md | @@ -168,6 +169,13 @@ | task | NK-WP-0044-T04 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | | task | NK-WP-0044-T05 | wait | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | | task | NK-WP-0044-T06 | wait | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0044-T07 | wait | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0045-T01 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T02 | todo | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T03 | todo | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T04 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T05 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T06 | wait | — | workplans/NK-WP-0045-root-grant-custody-record.md | | intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md | | intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md | | intake | NET-IN-0001 | open | — | intakes/intakes.md | diff --git a/workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md b/workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md index ba5a17b..8df4b8d 100644 --- a/workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md +++ b/workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md @@ -113,6 +113,7 @@ status: wait needs_human: true blocking_reason: "Content work, not scheduled: needs a decision to start. The seven runbooks map without gaps (runbook-tutorials/docs/console-mapping.md)." priority: low +state_hub_task_id: "8628d5eb-6e5d-501d-a8f5-960d6b5db8f4" ``` The security bootstrap console's seven runbooks (privacyIDEA realm repair, key material compromised, generate new unseal keys, emergency lock-down, diff --git a/workplans/NK-WP-0045-root-grant-custody-record.md b/workplans/NK-WP-0045-root-grant-custody-record.md index cf68097..1521345 100644 --- a/workplans/NK-WP-0045-root-grant-custody-record.md +++ b/workplans/NK-WP-0045-root-grant-custody-record.md @@ -11,6 +11,7 @@ topic_slug: netkingdom created: "2026-09-29" updated: "2026-09-29" related: [NK-ADR-0017, NK-WP-0042] +state_hub_workstream_id: "43fbb1aa-b711-5792-b72b-07cd93ca8f45" --- NK-ADR-0017 makes the platform-root custody record the authority for the root @@ -27,6 +28,7 @@ status: wait needs_human: true blocking_reason: "Bernd accepts or amends NK-ADR-0017 (proposed) after user-engine confirms the AccountAuthority mapping." priority: high +state_hub_task_id: "25489680-c611-59f9-a0c4-291c4e2a7356" ``` Resolve the open points (15-minute cache bound, envelope mapping) and move the @@ -39,6 +41,7 @@ id: NK-WP-0045-T02 status: todo depends_on: [NK-WP-0045-T01] priority: high +state_hub_task_id: "49d8dd25-b555-55e9-a481-037d2b98fcc5" ``` Add `canon/schemas/custody-record_v0.1.schema.json`: record id and revision, @@ -53,6 +56,7 @@ id: NK-WP-0045-T03 status: todo depends_on: [NK-WP-0045-T02] priority: medium +state_hub_task_id: "6372f282-a12b-54b4-b2ea-327b20e58c8f" ``` Validator with grant, revocation and supersession fixtures, plus negative cases: @@ -68,6 +72,7 @@ depends_on: [NK-WP-0045-T02] needs_human: true blocking_reason: "Needs a decision on where a workload reads the record (OpenBao-held, platform service, or repository artifact) and which owner delivers it." priority: high +state_hub_task_id: "472e191f-8b7a-5d0e-84ef-2717f92bc83c" ``` Options and the owner (net-kingdom versus railiance-platform) go to Bernd; the @@ -81,6 +86,7 @@ status: wait depends_on: [NK-WP-0045-T04] blocking_reason: "Depends on the read-surface decision and on the delivering owner." priority: medium +state_hub_task_id: "628e8a3b-17a4-5f97-a484-c564a87d650d" ``` Hand off the schema and read contract to the owner; NetKingdom does not absorb @@ -94,6 +100,7 @@ status: wait depends_on: [NK-WP-0045-T05] blocking_reason: "Needs the delivered read path." priority: medium +state_hub_task_id: "eb71faf7-d6c7-5a3a-bdb6-17281cc5a01a" ``` Tell user-engine the read path is live so USER-WP-0037-T02 can derive