MASON-WP-0013: record the survey, CCR, and founder decision

The ops-mason-survey grant confirmed the existing private-reader lane and the MAS delivery metadata. CCR-2026-0046 and founder decision 9833715e are recorded apart from the disclosure consent. The plan stays reviewed, and the draft catalog route is not activated.

Assistant: grok
Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a
This commit is contained in:
tegwick 2026-10-22 00:24:00 +02:00
parent ca5e98d4e4
commit dee677f226
7 changed files with 378 additions and 165 deletions

View file

@ -0,0 +1,24 @@
# Draft pointer for ops-warden. Not installed. Not activated.
# MASON-WP-0013-T04. warden_executes is false. Do not copy this file into
# the ops-warden catalog until ops-warden reviews it.
id: reuse-surface-forgejo-source-read
title: Reuse-surface exact seven private repository reader
status: draft
owner_repo: railiance-platform
subsystem: OpenBao KV via existing reuse-surface ESO identity
warden_executes: false
risk: high
need_keywords:
- reuse-surface
- forgejo
- forgejo-source-read
- private-reader
path_template: platform/workloads/reuse/reuse-surface/forgejo-source-read
policy_ref: workload-kv-read-reuse-surface-runtime-eso
auth_method: Kubernetes auth role reuse-surface-runtime-eso, ServiceAccount reuse/reuse-surface-eso, audience openbao
canon_ref: CCR-2026-0046
reviewed: "2026-10-22"
activation: not-activated
notes: >
Proposal only. The field name is FORGEJO_SOURCE_TOKEN. This file stores
no value. Runtime rotation remains RPF-WP-0058-T05.