Enforce readiness tiers and reconcile blocked workplans

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e75a-fc5c-7913-9dba-9846210c766d

workplans/MASON-WP-0004-credential-inventory-descriptions.md

@@ -4,11 +4,12 @@ type: workplan
 title: "Describe every stored credential so the store is navigable"
 domain: infotech
 repo: ops-mason
-status: proposed
+status: blocked
 flavor: planning
 owner: codex
 topic_slug: custodian
 created: "2026-08-28"
+updated: "2026-09-28"
 related:
   - MASON-WP-0003
   - NK-WP-0033
@@ -48,7 +49,7 @@ read, and `ops-mason-build` cannot read one.
 
 ```task
 id: MASON-WP-0004-T01
-status: todo
+status: wait
 priority: medium
 state_hub_task_id: "5bda75f2-f780-579e-9d44-cc4011662b9a"
 ```
@@ -68,7 +69,7 @@ listed as unknown with the question that would settle it.
 
 ```task
 id: MASON-WP-0004-T02
-status: todo
+status: wait
 priority: medium
 state_hub_task_id: "a6a944d7-21c5-5043-a78d-b3809de0ee64"
 ```
@@ -121,3 +122,9 @@ the report has a reader.
 
 Acceptance: an undescribed path added today surfaces without anyone
 remembering to look.
+
+## Loose-end review — 2026-09-28
+
+T01–T04 remain wait: no valid scoped metadata grant/current inventory or complete owner/recovery confirmations are available. Inventory failure handling and the private-tunnel defaults are fixed and tested; scheduled reporting still needs its reader and credential.
+
+Evidence and precise resumption conditions: [review](../docs/evidence/2026-09-28-loose-end-review.md). Existing tasks retain all remaining obligations; no new task or workplan was opened.