From ea847816adf02a1da95b918a5fbb164592944463 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 18 Oct 2026 11:49:46 +0200 Subject: [PATCH] Record State Hub ids for MASON-WP-0015 and MASON-IN-0005; T05 owners notified Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 278674@bnt-lap001 Assistant-Session: 64827407-e196-4ce3-b70c-76e7b537493f --- .custodian-brief.md | 12 +++++++++++- WORK-RECORDS.md | 8 ++++++++ intakes/intakes.md | 1 + workplans/MASON-WP-0015-construct-grant.md | 9 ++++++++- 4 files changed, 28 insertions(+), 2 deletions(-) diff --git a/.custodian-brief.md b/.custodian-brief.md index 7e27602..a59ffeb 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,11 +2,21 @@ # Custodian Brief — ops-mason **Domain:** infotech -**Last synced:** 2026-10-18 09:27 UTC +**Last synced:** 2026-10-18 09:49 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams +### Restore ops-mason as the OpenBao builder: the ops-mason-construct grant +Progress: 1/6 done | workplan_id: `384b3efc-f9a5-5ea9-b224-0ce900e79804` + +**Open tasks:** +- ! Live negative and positive tests `8b512822` +- · Install the policy (founder act) `1c8893bd` +- · Executor and post-build check `7b7a436f` +- · Align ops-warden and railiance-platform references `8fbac212` +- · Close the Kubernetes variant `feb17422` + ### Describe every stored credential so the store is navigable Progress: 2/4 done | workplan_id: `e5656747-a974-581a-a3d4-4e6bb7262f4c` diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index e841d1b..5718566 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -24,6 +24,7 @@ | workplan | MASON-WP-0012 | finished | — | workplans/MASON-WP-0012-sign-in-diagnosis-caller-proof.md | | workplan | MASON-WP-0013 | proposed | — | workplans/MASON-WP-0013-reuse-surface-private-source-reader.md | | workplan | MASON-WP-0014 | proposed | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md | +| workplan | MASON-WP-0015 | active | — | workplans/MASON-WP-0015-construct-grant.md | | task | ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md | | task | ADHOC-2026-10-11-T02 | done | — | workplans/ADHOC-2026-10-11.md | | task | ADHOC-2026-10-11-T03 | done | — | workplans/ADHOC-2026-10-11.md | @@ -94,7 +95,14 @@ | task | MASON-WP-0014-T02 | wait | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md | | task | MASON-WP-0014-T03 | wait | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md | | task | MASON-WP-0014-T04 | wait | — | workplans/MASON-WP-0014-mas-tem-relay-smtp.md | +| task | MASON-WP-0015-T01 | done | — | workplans/MASON-WP-0015-construct-grant.md | +| task | MASON-WP-0015-T02 | todo | — | workplans/MASON-WP-0015-construct-grant.md | +| task | MASON-WP-0015-T03 | wait | — | workplans/MASON-WP-0015-construct-grant.md | +| task | MASON-WP-0015-T04 | todo | — | workplans/MASON-WP-0015-construct-grant.md | +| task | MASON-WP-0015-T05 | todo | — | workplans/MASON-WP-0015-construct-grant.md | +| task | MASON-WP-0015-T06 | todo | — | workplans/MASON-WP-0015-construct-grant.md | | intake | MASON-IN-0001 | closed | green | intakes/intakes.md | | intake | MASON-IN-0002 | closed | — | intakes/intakes.md | | intake | MASON-IN-0003 | open | — | intakes/intakes.md | | intake | MASON-IN-0004 | closed | — | intakes/intakes.md | +| intake | MASON-IN-0005 | open | — | intakes/intakes.md | diff --git a/intakes/intakes.md b/intakes/intakes.md index f1f7ba0..e8e7fb8 100644 --- a/intakes/intakes.md +++ b/intakes/intakes.md @@ -226,4 +226,5 @@ resolution: >- over-broad content. ops-mason-survey stays for survey-only sessions. Implementation and install: MASON-WP-0015. updated: '2026-10-18T00:00:00Z' +state_hub_intake_id: "01a14e6a-47d0-7e1d-bc28-2908e7c50b35" ``` diff --git a/workplans/MASON-WP-0015-construct-grant.md b/workplans/MASON-WP-0015-construct-grant.md index 662ea8e..11c0249 100644 --- a/workplans/MASON-WP-0015-construct-grant.md +++ b/workplans/MASON-WP-0015-construct-grant.md @@ -11,6 +11,7 @@ created: "2026-10-18" updated: "2026-10-18" flavor: implementation depends_on: [] +state_hub_workstream_id: "384b3efc-f9a5-5ea9-b224-0ce900e79804" --- # ops-mason-construct grant @@ -25,6 +26,7 @@ provides it. The grant breaks the MASON-IN-0004 chain at the login step. id: MASON-WP-0015-T01 status: done priority: high +state_hub_task_id: "55448e8c-44a0-5509-9acc-c88e65c680a0" ``` Reviewed ops-mason and ops-warden INTENT.md. The bodies agree (ops-mason @@ -39,6 +41,7 @@ AGENTS.md OpenBao section. id: MASON-WP-0015-T02 status: todo priority: high +state_hub_task_id: "1c8893bd-8dfe-5293-87dd-8678b20e7313" ``` Same silent wrapper and hash receipt as the survey policy (AGENTS.md), with @@ -52,6 +55,7 @@ session can mint a token carrying it (`bao-session.sh build MASON-WP-0015-T03`). id: MASON-WP-0015-T03 status: wait priority: high +state_hub_task_id: "8b512822-ace0-50b0-bf19-52985b229090" ``` Under the build grant, against throwaway names (`workload-kv-read-mason-probe`, @@ -70,6 +74,7 @@ stanzas before any build. id: MASON-WP-0015-T04 status: todo priority: high +state_hub_task_id: "7b7a436f-c585-5fa8-8afc-5bb033f205f8" ``` `src/ops_mason/executor.py` `build_approle_kv_lane` mints the role-id and @@ -83,8 +88,9 @@ fails the build record. ```task id: MASON-WP-0015-T05 -status: todo +status: done priority: medium +state_hub_task_id: "8fbac212-1b42-5e08-b65e-8217c481d995" ``` ops-warden `registry/routing/catalog.yaml` and @@ -100,6 +106,7 @@ only. They edit their own files. id: MASON-WP-0015-T06 status: todo priority: medium +state_hub_task_id: "feb17422-9490-51f4-a62d-55647a5f6b05" ``` A Kubernetes role ops-mason builds can be logged in to by anyone holding a