coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record State Hub ids for MASON-WP-0015 and MASON-IN-0005; T05 owners notified

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 278674@bnt-lap001
Assistant-Session: 64827407-e196-4ce3-b70c-76e7b537493f
This commit is contained in:
tegwick 2026-10-18 11:49:46 +02:00
parent e7a368af0f
commit ea847816ad
4 changed files with 28 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.custodian-brief.md
View file

@ -2,11 +2,21 @@
# Custodian Brief — ops-mason
**Domain:** infotech
**Last synced:** 2026-10-18 09:27 UTC
**Last synced:** 2026-10-18 09:49 UTC
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
## Active Workstreams
### Restore ops-mason as the OpenBao builder: the ops-mason-construct grant
Progress: 1/6 done | workplan_id: `384b3efc-f9a5-5ea9-b224-0ce900e79804`
**Open tasks:**
- ! Live negative and positive tests `8b512822`
- · Install the policy (founder act) `1c8893bd`
- · Executor and post-build check `7b7a436f`
- · Align ops-warden and railiance-platform references `8fbac212`
- · Close the Kubernetes variant `feb17422`
### Describe every stored credential so the store is navigable
Progress: 2/4 done | workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c`

8
WORK-RECORDS.md
View file

@ -24,6 +24,7 @@
| workplan | MASON-WP-0012 | finished | — | workplans/MASON-WP-0012-sign-in-diagnosis-caller-proof.md |
| workplan | MASON-WP-0013 | proposed | — | workplans/MASON-WP-0013-reuse-surface-private-source-reader.md |
| workplan | MASON-WP-0014 | proposed | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md |
| workplan | MASON-WP-0015 | active | — | workplans/MASON-WP-0015-construct-grant.md |
| task | ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md |
| task | ADHOC-2026-10-11-T02 | done | — | workplans/ADHOC-2026-10-11.md |
| task | ADHOC-2026-10-11-T03 | done | — | workplans/ADHOC-2026-10-11.md |
@ -94,7 +95,14 @@
| task | MASON-WP-0014-T02 | wait | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md |
| task | MASON-WP-0014-T03 | wait | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md |
| task | MASON-WP-0014-T04 | wait | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md |
| task | MASON-WP-0015-T01 | done | — | workplans/MASON-WP-0015-construct-grant.md |
| task | MASON-WP-0015-T02 | todo | — | workplans/MASON-WP-0015-construct-grant.md |
| task | MASON-WP-0015-T03 | wait | — | workplans/MASON-WP-0015-construct-grant.md |
| task | MASON-WP-0015-T04 | todo | — | workplans/MASON-WP-0015-construct-grant.md |
| task | MASON-WP-0015-T05 | todo | — | workplans/MASON-WP-0015-construct-grant.md |
| task | MASON-WP-0015-T06 | todo | — | workplans/MASON-WP-0015-construct-grant.md |
| intake | MASON-IN-0001 | closed | green | intakes/intakes.md |
| intake | MASON-IN-0002 | closed | — | intakes/intakes.md |
| intake | MASON-IN-0003 | open | — | intakes/intakes.md |
| intake | MASON-IN-0004 | closed | — | intakes/intakes.md |
| intake | MASON-IN-0005 | open | — | intakes/intakes.md |

1
intakes/intakes.md
View file

@ -226,4 +226,5 @@ resolution: >-
over-broad content. ops-mason-survey stays for survey-only sessions.
Implementation and install: MASON-WP-0015.
updated: '2026-10-18T00:00:00Z'
state_hub_intake_id: "01a14e6a-47d0-7e1d-bc28-2908e7c50b35"
```

9
workplans/MASON-WP-0015-construct-grant.md
View file

@ -11,6 +11,7 @@ created: "2026-10-18"
updated: "2026-10-18"
flavor: implementation
depends_on: []
state_hub_workstream_id: "384b3efc-f9a5-5ea9-b224-0ce900e79804"
---
# ops-mason-construct grant
@ -25,6 +26,7 @@ provides it. The grant breaks the MASON-IN-0004 chain at the login step.
id: MASON-WP-0015-T01
status: done
priority: high
state_hub_task_id: "55448e8c-44a0-5509-9acc-c88e65c680a0"
```
Reviewed ops-mason and ops-warden INTENT.md. The bodies agree (ops-mason
@ -39,6 +41,7 @@ AGENTS.md OpenBao section.
id: MASON-WP-0015-T02
status: todo
priority: high
state_hub_task_id: "1c8893bd-8dfe-5293-87dd-8678b20e7313"
```
Same silent wrapper and hash receipt as the survey policy (AGENTS.md), with
@ -52,6 +55,7 @@ session can mint a token carrying it (`bao-session.sh build MASON-WP-0015-T03`).
id: MASON-WP-0015-T03
status: wait
priority: high
state_hub_task_id: "8b512822-ace0-50b0-bf19-52985b229090"
```
Under the build grant, against throwaway names (`workload-kv-read-mason-probe`,
@ -70,6 +74,7 @@ stanzas before any build.
id: MASON-WP-0015-T04
status: todo
priority: high
state_hub_task_id: "7b7a436f-c585-5fa8-8afc-5bb033f205f8"
```
`src/ops_mason/executor.py` `build_approle_kv_lane` mints the role-id and
@ -83,8 +88,9 @@ fails the build record.
```task
id: MASON-WP-0015-T05
status: todo
status: done
priority: medium
state_hub_task_id: "8fbac212-1b42-5e08-b65e-8217c481d995"
```
ops-warden `registry/routing/catalog.yaml` and
@ -100,6 +106,7 @@ only. They edit their own files.
id: MASON-WP-0015-T06
status: todo
priority: medium
state_hub_task_id: "feb17422-9490-51f4-a62d-55647a5f6b05"
```
A Kubernetes role ops-mason builds can be logged in to by anyone holding a