coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Route the missing ops-mason-survey grant to a founder decision

Browse source 
MASON-WP-0013-T02 and MASON-WP-0014-T04 stay wait. Hub decision
0b55e53b-2531-466c-a2f9-282618b183f8 asks the founder to mint the two
scoped grants. An agent does not log in or grant, and this decision
does not approve the private-reader plan.

Assistant: grok
Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a
This commit is contained in:
tegwick 2026-10-22 00:08:06 +02:00
parent 78a31e1444
commit ca5e98d4e4
3 changed files with 16 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tests/test_wp_0013_0014_evidence.py
View file

@ -102,6 +102,8 @@ def test_mas_delivery_check_stays_wait_until_metadata_grant():
plan = (ROOT / "plans" / "mas-tem-relay-smtp.md").read_text()
assert _frontmatter(workplan)["status"] == "proposed"
assert _task_status(workplan, "MASON-WP-0014-T04") == "wait"
assert "needs_human: true" in workplan
assert "0b55e53b-2531-466c-a2f9-282618b183f8" in workplan
assert _task_status(workplan, "MASON-WP-0014-T01") == "done"
for text in (workplan, plan):
flat = _flat(text)
@ -125,6 +127,9 @@ def test_private_reader_stays_draft_without_survey_or_success():
"MASON-WP-0013-T04",
):
assert _task_status(workplan, task_id) == "wait"
assert "needs_human: true" in workplan
assert "0b55e53b-2531-466c-a2f9-282618b183f8" in workplan
assert "does not approve this plan" in _flat(workplan)
flat_plan = _flat(plan)
flat_workplan = _flat(workplan)
assert "no ops-mason-survey grant" in flat_plan

6
workplans/MASON-WP-0013-reuse-surface-private-source-reader.md
View file

@ -42,6 +42,9 @@ and independent mechanism/owner reviews are missing.
```task
id: MASON-WP-0013-T02
status: wait
needs_human: true
decision_id: 0b55e53b-2531-466c-a2f9-282618b183f8
blocking_reason: "Founder mints ./scripts/bao-session.sh grant MASON-WP-0013-T02. An agent does not log in or grant. This decision is not plan approval."
priority: high
state_hub_task_id: "a05e88da-9a75-516d-aab4-7a5d266f1ac6"
```
@ -56,7 +59,8 @@ Do not use operator tokens or another agent supervision record.
(`no ops-mason-survey grant`) and cites Forgejo-owner `sec_dsm_order` Q1–Q3
from `forge-owner-review-r2.json` (2026-10-14T23:08:34Z). That citation is not
a metadata survey. Exact installed path, policy, and role remain unconfirmed.
Plan status stays `draft`.
Plan status stays `draft`. Founder grant gate is hub decision
`0b55e53b-2531-466c-a2f9-282618b183f8`. It does not approve this plan.
## Bind owner CCR and executable inputs to founder decision

6
workplans/MASON-WP-0014-mas-tem-relay-smtp.md
View file

@ -67,6 +67,9 @@ CCR-2026-0051. ops-mason built the policy and role under `ops-mason-construct`
```task
id: MASON-WP-0014-T04
status: wait
needs_human: true
decision_id: 0b55e53b-2531-466c-a2f9-282618b183f8
blocking_reason: "Founder mints ./scripts/bao-session.sh grant MASON-WP-0014-T04 so KV metadata can be re-read. ExternalSecret sync is already name-only Ready/SecretSynced. An agent does not log in or grant."
priority: medium
state_hub_task_id: "75eb71c8-5ac4-5512-bee3-6c0e4bee4dfd"
```
@ -90,3 +93,6 @@ Record the teardown steps (plan rows 6–7) as a residual against MAS-WP-0003 cl
`mas-relay`. The Secret object was not read.
- Teardown rows 6–7 are live intake `MASON-IN-0007` (`origin: residual`,
`origin_ref: MASON-WP-0014`), due at MAS-WP-0003 close. Not executed.
- The metadata re-read waits on founder decision
`0b55e53b-2531-466c-a2f9-282618b183f8` (mint `ops-mason-survey` for this
task). That decision is not a new approval of the built lane.