From 19776ae587c7c368e607ed5393b128aaef2f399d Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 9 Oct 2026 20:11:40 +0200 Subject: [PATCH] MASON-WP-0005-T05: non-member refusal proven (platform-root refused by the role) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0 --- ...ASON-WP-0005-fluid-telegram-operator-credential-lane.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md b/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md index fdfe430..6059ca6 100644 --- a/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md +++ b/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md @@ -218,7 +218,7 @@ id: MASON-WP-0005-T05 status: progress depends_on: [MASON-WP-0005-T04] blocked_on: human -blocking_reason: "ops-mason checks pass (2026-10-09). Founder runs scripts/verify-fluid-telegram-lane.sh member, then non-member, and shares the two receipts; fluid-telegram runs the salt create-once probe (FT-WP-0002)." +blocking_reason: "ops-mason checks and the non-member refusal pass (2026-10-09). Founder runs scripts/verify-fluid-telegram-lane.sh member as tegwick (MFA) and shares the receipt; fluid-telegram runs the salt create-once probe (FT-WP-0002)." priority: high state_hub_task_id: "4c205be7-4f1f-5dd1-aafa-fc112fdd640e" ``` @@ -250,6 +250,11 @@ login and a non-member login with `scripts/verify-fluid-telegram-lane.sh` (capabilities only, receipt under `~/.local/state/railiance/receipts/`), and the salt create-once probe by fluid-telegram (message `f966db1c`). +2026-10-09: non-member check passed. A login on the role as `platform-root` +(not in `fluid-telegram-operators`) was refused by OpenBao with "claim groups +does not match any associated bound claim values" (receipt +`fluid-telegram-lane-non-member.txt`, 18:11Z). Member run as `tegwick` pending. + ## Hand off routing and keep the adapter lane separate ```task