MASON-WP-0013-T04: cite the reader-scope denial journal

cust81-forge-reader-r1.jsonl records reader_scope seven_exact_no_extra_private_grants for attempt bb2693a7640f00b4e401467e. That status is written only after the excluded private repo, admin route, and Actions routes are refused. The workplan is finished. The plan stays reviewed.

Assistant: grok
Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a
This commit is contained in:
tegwick 2026-10-22 00:35:58 +02:00
parent a35d388c63
commit 7af68f2af4
4 changed files with 30 additions and 21 deletions

View file

@ -122,14 +122,15 @@ def test_private_reader_survey_records_lane_without_approving_apply():
proposal = (
ROOT / "builds" / "reuse-surface-private-source-reader" / "catalog-proposal.yaml"
).read_text()
assert _frontmatter(workplan)["status"] == "active"
assert _frontmatter(workplan)["status"] == "finished"
assert _frontmatter(plan)["status"] == "reviewed"
assert _frontmatter(plan)["approved_by"] is None
assert _task_status(workplan, "MASON-WP-0013-T02") == "done"
assert _task_status(workplan, "MASON-WP-0013-T03") == "done"
assert _task_status(workplan, "MASON-WP-0013-T04") == "wait"
assert "blocked_on: message-from:railiance-platform" in workplan
assert "reader least-privilege denial" in workplan
assert _task_status(workplan, "MASON-WP-0013-T04") == "done"
assert "cust81-forge-reader-r1.jsonl" in workplan
assert "seven_exact_no_extra_private_grants" in workplan
assert "coulomb/rapp-core-hub" in workplan
flat_plan = _flat(plan)
flat_workplan = _flat(workplan)
assert "token-claude-MASON-WP-0014-T04" in flat_plan