coulomb/ops-mason
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record founder approval on the rein-openweights AppRole plan

Browse source 
status: approved, approved_by: Bernd Worsch, approved_at: 2026-07-27.
Verified against the real executor code: ConstructionPlan.load(...)
.is_approved() returns True for this file. MASON-WP-0001-T05 moves from
todo to wait -- the approval gate is cleared, phase 4 execution is
blocked only on a real OpenBao session existing somewhere (bao token
lookup still 403 from this workstation).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-07-27 00:59:37 +02:00
parent 233bcef478
commit 116db485d9
2 changed files with 20 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

11
plans/rein-openweights-openrouter-approle.md
View file

@ -3,9 +3,9 @@ id: rein-openweights-openrouter-approle
demand_source: glas-harness/workplans/GLAS-WP-0002-T02
consumer_repo: rein-openweights
credential_type: openbao-approle-kv
status: reviewed
approved_by: null
approved_at: null
status: approved
approved_by: "Bernd Worsch"
approved_at: "2026-07-27"
created: "2026-07-27"
updated: "2026-07-27"
---
@ -150,6 +150,11 @@ reuse in §2).
with feedback (e.g. different TTL, different path name, or "actually
reuse the shared lane instead").
**Decision: approved as proposed** (Bernd Worsch, 2026-07-27). Ready for
phase 4 — still blocked on a real OpenBao session existing in whatever
environment executes the build (`bao token lookup` from this workstation
returns `403`; unchanged since `GLAS-WP-0002-T02` first flagged it).
## 6. Build result (phase 4)
<!-- Appended once MASON-WP-0001-T04/T05 execute this plan after approval. -->

13
workplans/MASON-WP-0001-foundation.md
View file

@ -150,9 +150,20 @@ value exists outside OpenBao. Once done, notify `glas-harness`/
`rein-openweights` so `GLAS-WP-0002-T02`'s live OpenBao verification can
proceed.
**Phases 1-3 done, approved (2026-07-27):**
`plans/rein-openweights-openrouter-approle.md` is now `status: approved`
(Bernd Worsch, 2026-07-27) — `ConstructionPlan.load(...).is_approved()`
confirmed `True` against the real file. **Blocked on phase 4 execution
only:** no valid OpenBao session from this workstation (`bao token
lookup` still `403`) to actually run
`build_approle_kv_lane`/`bao policy write`/`bao write auth/approle/...`.
Whoever has (or provisions) real `bao` access can run phase 4 directly
against this approved plan — the gate is cleared, only the environment
is missing.
```task
id: MASON-WP-0001-T05
status: todo
status: wait
priority: high
state_hub_task_id: "01782608-aa5a-4f9b-a1fb-9a64f6d9c299"
```