coulomb/ops-mason
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record founder approval on the rein-openweights AppRole plan

Browse source 
status: approved, approved_by: Bernd Worsch, approved_at: 2026-07-27.
Verified against the real executor code: ConstructionPlan.load(...)
.is_approved() returns True for this file. MASON-WP-0001-T05 moves from
todo to wait -- the approval gate is cleared, phase 4 execution is
blocked only on a real OpenBao session existing somewhere (bao token
lookup still 403 from this workstation).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-07-27 00:59:37 +02:00
parent 233bcef478
commit 116db485d9
2 changed files with 20 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

11
plans/rein-openweights-openrouter-approle.md
View file

@ -3,9 +3,9 @@ id: rein-openweights-openrouter-approle
demand_source: glas-harness/workplans/GLAS-WP-0002-T02 demand_source: glas-harness/workplans/GLAS-WP-0002-T02
consumer_repo: rein-openweights consumer_repo: rein-openweights
credential_type: openbao-approle-kv credential_type: openbao-approle-kv
status: reviewed status: approved
approved_by: null approved_by: "Bernd Worsch"
approved_at: null approved_at: "2026-07-27"
created: "2026-07-27" created: "2026-07-27"
updated: "2026-07-27" updated: "2026-07-27"
--- ---
@ -150,6 +150,11 @@ reuse in §2).
with feedback (e.g. different TTL, different path name, or "actually with feedback (e.g. different TTL, different path name, or "actually
reuse the shared lane instead"). reuse the shared lane instead").
**Decision: approved as proposed** (Bernd Worsch, 2026-07-27). Ready for
phase 4 — still blocked on a real OpenBao session existing in whatever
environment executes the build (`bao token lookup` from this workstation
returns `403`; unchanged since `GLAS-WP-0002-T02` first flagged it).
## 6. Build result (phase 4) ## 6. Build result (phase 4)
<!-- Appended once MASON-WP-0001-T04/T05 execute this plan after approval. --> <!-- Appended once MASON-WP-0001-T04/T05 execute this plan after approval. -->

13
workplans/MASON-WP-0001-foundation.md
View file

@ -150,9 +150,20 @@ value exists outside OpenBao. Once done, notify `glas-harness`/
`rein-openweights` so `GLAS-WP-0002-T02`'s live OpenBao verification can `rein-openweights` so `GLAS-WP-0002-T02`'s live OpenBao verification can
proceed. proceed.
**Phases 1-3 done, approved (2026-07-27):**
`plans/rein-openweights-openrouter-approle.md` is now `status: approved`
(Bernd Worsch, 2026-07-27) — `ConstructionPlan.load(...).is_approved()`
confirmed `True` against the real file. **Blocked on phase 4 execution
only:** no valid OpenBao session from this workstation (`bao token
lookup` still `403`) to actually run
`build_approle_kv_lane`/`bao policy write`/`bao write auth/approle/...`.
Whoever has (or provisions) real `bao` access can run phase 4 directly
against this approved plan — the gate is cleared, only the environment
is missing.
```task ```task
id: MASON-WP-0001-T05 id: MASON-WP-0001-T05
status: todo status: wait
priority: high priority: high
state_hub_task_id: "01782608-aa5a-4f9b-a1fb-9a64f6d9c299" state_hub_task_id: "01782608-aa5a-4f9b-a1fb-9a64f6d9c299"
``` ```