coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

MASON-WP-0005-T01: live survey for the fluid-telegram operator lane

Browse source 
Generated section 2 plus a full policy-body scan and the netkingdom OIDC
role list: path unused, names free, only platform-admin covers the target,
live reference role confirms the groups+aal2 binding shape. T01 now waits
only on net-kingdom's group evidence. Grant revoked after use.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
This commit is contained in:
tegwick 2026-10-08 23:54:41 +02:00
parent 4a7f23f176
commit a09dda651b
2 changed files with 94 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md
View file

@ -45,7 +45,7 @@ consumer workplan `FT-WP-0002` (`f2373858-c932-5a4d-81b6-db9a3595135a`).
id: MASON-WP-0005-T01
status: wait
blocked_on: message-from:net-kingdom
blocking_reason: "Founder go given 2026-10-08 (group fluid-telegram-operators, member tegwick); net-kingdom creates it and returns metadata-only evidence. Also needs a scoped OpenBao grant (bao-session.sh grant MASON-WP-0005-T01) for the live survey."
blocking_reason: "Founder go given 2026-10-08 (group fluid-telegram-operators, member tegwick); net-kingdom creates it and returns metadata-only evidence. Live survey done 2026-10-08."
priority: high
state_hub_task_id: "18c9099f-882f-575c-93b9-cc68d7fbc2af"
```
@ -87,6 +87,13 @@ members, and a scoped grant for the live survey (no operator session today).
net-kingdom (message `259ec26d`), which owns directory acts; ops-mason does not
write LLDAP. Waiting for net-kingdom's metadata-only evidence.
2026-10-08: live survey run under grant `claude-MASON-WP-0005-T01`
(`ops-mason-survey`), recorded in the plan's section 2: path unused, proposed
policy and OIDC role names free, all 81 policy bodies scanned and only
`platform-admin` covers the path, no catalog route. The live
`keycape-secrets-engine-openbao-operator` role confirms the binding shape. Only
the group evidence remains for T01; the plan can then move to `reviewed`.
## Extend the construction and credential-change contracts
```task