coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CUST-WP-0075-T03: route human gates to hub decisions

Browse source 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: fable
Assistant-Process: 3775@bnt-lap001
Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3
This commit is contained in:
tegwick 2026-10-03 03:12:18 +02:00
parent c69073601d
commit 2076d5c0dd
4 changed files with 18 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
workplans/MASON-WP-0004-credential-inventory-descriptions.md
View file

@ -9,7 +9,7 @@ flavor: planning
owner: codex
topic_slug: custodian
created: "2026-08-28"
updated: "2026-09-28"
updated: "2026-10-03"
related:
- MASON-WP-0003
- NK-WP-0033
@ -51,6 +51,7 @@ read, and `ops-mason-build` cannot read one.
id: MASON-WP-0004-T01
status: wait
needs_human: true
decision_id: e9f44beb-ad15-4285-8996-1e66d312fe59
blocking_reason: "Founder ruling on the genuinely unclear paths; no scoped metadata grant or complete inventory yet."
priority: medium
state_hub_task_id: "5bda75f2-f780-579e-9d44-cc4011662b9a"
@ -67,12 +68,15 @@ than an empty one, because a rotation will trust it.
Acceptance: every one of the seventeen has a named owner, or is explicitly
listed as unknown with the question that would settle it.
2026-10-03: human gate routed to hub decision e9f44beb-ad15-4285-8996-1e66d312fe59 (D8: ops-mason plan approvals: unclear metadata paths and the live-survey plan) by CUST-WP-0075; resolving that decision raises C-40 here.
## Describe the paths whose purpose is already documented
```task
id: MASON-WP-0004-T02
status: wait
needs_human: true
decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
blocking_reason: "Requires a valid scoped metadata grant (operator) before the described paths can be written and verified."
priority: medium
state_hub_task_id: "a6a944d7-21c5-5043-a78d-b3809de0ee64"
@ -87,6 +91,8 @@ pointing at the real procedure rather than paraphrasing it.
Acceptance: `custody-inventory.py` reports these paths without a `!`, and each
`rotation` field names a document that exists.
2026-10-03: human gate routed to hub decision 62aa95e4-3ccc-4867-8806-5e3db005b483 (D1: Attended OpenBao provisioning window: one session clears the pending credential lanes) by CUST-WP-0075; resolving that decision raises C-40 here.
## Resolve the rest with their owners
```task

5
workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md
View file

@ -9,7 +9,7 @@ flavor: planning
owner: codex
topic_slug: helix-forge
created: "2026-09-04"
updated: "2026-09-28"
updated: "2026-10-03"
state_hub_workstream_id: "483e56d6-6601-5377-9066-66225214c046"
---
@ -92,6 +92,7 @@ parent access, and the create-only salt shape.
id: MASON-WP-0005-T03
status: wait
needs_human: true
decision_id: e9f44beb-ad15-4285-8996-1e66d312fe59
depends_on: [MASON-WP-0005-T01, MASON-WP-0005-T02]
blocking_reason: "Explicit human approval of the plan (status: approved, approved_by, approved_at) after the live survey."
priority: high
@ -106,6 +107,8 @@ write-once recovery consequence, agent boundary, reversal procedure, and
adapter separation for explicit human approval. Only the plan's
`status: approved` plus `approved_by` and `approved_at` authorizes a build.
2026-10-03: human gate routed to hub decision e9f44beb-ad15-4285-8996-1e66d312fe59 (D8: ops-mason plan approvals: unclear metadata paths and the live-survey plan) by CUST-WP-0075; resolving that decision raises C-40 here.
## Build the approved operator lane
```task

5
workplans/MASON-WP-0006-readiness-tier-check.md
View file

@ -9,7 +9,7 @@ flavor: implementation
owner: claude
topic_slug: ops-mason
created: "2026-09-21"
updated: "2026-09-28"
updated: "2026-10-03"
state_hub_workstream_id: "1b900161-51ff-544f-8412-ba7fcab64bb5"
---
@ -218,6 +218,7 @@ rail-kubernetes ownership/layer assertion from INTENT.md.
id: MASON-WP-0006-T06
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocked_on: message-from:railiance-platform
blocking_reason: "Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception."
priority: medium
@ -229,6 +230,8 @@ comes up for review. Confirm with railiance-platform that policy-nexus is
onboarded to ArgoCD. The date check in T03 ends the transition in code on that
date either way.
2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.
## Loose-end review — 2026-09-28
T01–T05 are done: the founder resolved the whitehat placement and the guarded readiness implementation, tests, emergency evidence and docs are complete. T06 remains wait until the 2026-12-21 platform/exception review; this workplan is blocked on that dated review.

3
workplans/MASON-WP-0007-tenant-engine-audit-core-sender-projection.md
View file

@ -96,6 +96,7 @@ state_hub_task_id: "e56f0374-fede-5494-8266-a30f08896a6a"
id: MASON-WP-0007-T05
status: wait
needs_human: true
decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
depends_on: [MASON-WP-0007-T03]
blocked_on: founder
blocking_reason: "Wrapped platform-admin process copies the tenant-engine token from the registry document to platform/workloads/tenant-engine/audit-core-sender without printing it; ops-mason-build is denied value reads, so only an attended admin lane can do it."
@ -103,6 +104,8 @@ priority: high
state_hub_task_id: "1bb05319-25a5-579f-8b63-897ec583bc3e"
```
2026-10-03: human gate routed to hub decision 62aa95e4-3ccc-4867-8806-5e3db005b483 (D1: Attended OpenBao provisioning window: one session clears the pending credential lanes) by CUST-WP-0075; resolving that decision raises C-40 here.
## Verify and hand off
```task