MASON-WP-0005-T01: group creation is a founder UI step for now

net-kingdom has no agent path (provisioner endpoint not deployed, groups
lane pending WARDEN-WP-0044); T01 waits on the founder creating the group.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
This commit is contained in:
tegwick 2026-10-09 00:24:51 +02:00
parent a09dda651b
commit 49ec281c87

View file

@ -44,8 +44,8 @@ consumer workplan `FT-WP-0002` (`f2373858-c932-5a4d-81b6-db9a3595135a`).
```task
id: MASON-WP-0005-T01
status: wait
blocked_on: message-from:net-kingdom
blocking_reason: "Founder go given 2026-10-08 (group fluid-telegram-operators, member tegwick); net-kingdom creates it and returns metadata-only evidence. Live survey done 2026-10-08."
blocked_on: human
blocking_reason: "Founder creates LLDAP group fluid-telegram-operators (member tegwick) in the LLDAP admin UI and reports names only; no agent path exists yet (net-kingdom reply a2693a9d). Live survey done 2026-10-08."
priority: high
state_hub_task_id: "18c9099f-882f-575c-93b9-cc68d7fbc2af"
```
@ -94,6 +94,13 @@ policy and OIDC role names free, all 81 policy bodies scanned and only
`keycape-secrets-engine-openbao-operator` role confirms the binding shape. Only
the group evidence remains for T01; the plan can then move to `reviewed`.
2026-10-09: net-kingdom (reply `a2693a9d`, earlier `62e1b721`): no agent path
today. identity-provisioner `POST /v1/groups/ensure` exists only from
net-kingdom `630ebfd`, the live image is the older `main-6c4fcaf`, and the
`identity-provisioner-groups` lane waits on WARDEN-WP-0044. The founder creates
the group in the LLDAP admin UI (Groups, Create group, add `tegwick` only) and
reports names only; `tegwick` may need to sign in again before the claim shows.
## Extend the construction and credential-change contracts
```task