ops-bridge/workplans
tegwick bd169a07e2 feat(directive): implement BRIDGE-WP-0004 AccessManagementDirective alignment
- ActorType enum (adm/agt/atm) replaces actor_class string; config validates
  naming convention (adm-*/agt-*/atm-*) with hard ConfigError on mismatch;
  legacy 'human'/'automation' values accepted with DeprecationWarning
- cert_command: pluggable shell string run before each SSH launch; cert written
  to state dir; -i cert appended to SSH command alongside -i key
- TTL-aware cert refresh: parses Valid-to via ssh-keygen -L; pre-emptive restart
  5 min before expiry (no backoff, no attempt increment); CERT_EXPIRING logged
- CertAcquisitionError: cert failures trigger normal backoff/retry loop
- cert_identity: Key ID parsed from cert and recorded in BRIDGE_CONNECTED event
- bridge cert-status: new CLI command; exit 1 on expired cert; --json flag
- 233 tests passing, ruff clean

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-15 09:38:29 +02:00
..
BRIDGE-WP-0001-initial-implementation.md chore: mark BRIDGE-WP-0001 and BRIDGE-WP-0002 workplans as completed 2026-03-12 03:37:32 +01:00
BRIDGE-WP-0002-opscatalog-extension.md chore: mark BRIDGE-WP-0001 and BRIDGE-WP-0002 workplans as completed 2026-03-12 03:37:32 +01:00
BRIDGE-WP-0003-mcp-skill-cross-mode-tests.md feat(BRIDGE-WP-0003): MCP server, /bridge-status skill, cross-mode coverage enforcement 2026-03-12 11:33:16 +01:00
BRIDGE-WP-0004-directive-alignment.md feat(directive): implement BRIDGE-WP-0004 AccessManagementDirective alignment 2026-05-15 09:38:29 +02:00
OPS-WP-0001-diagnostics.md feat(diagnostics): end-to-end tunnel check, stale state detection, MCP extensions 2026-03-21 15:07:47 +01:00
OPS-WP-0002-agent-usability.md feat(mcp): SSE/HTTP mode, workplan OPS-WP-0002 done 2026-03-27 14:10:49 +01:00
WARDEN-WP-0001-initial-implementation.md chore(workplans): sync BRIDGE-WP-0004 and WARDEN-WP-0001 tasks to state hub 2026-05-15 00:29:51 +02:00