Commit graph

213 commits

Author SHA1 Message Date
custodian-sync
1bea4da92e chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 20:12:37 +02:00
19776ae587 MASON-WP-0005-T05: non-member refusal proven (platform-root refused by the role)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 20:11:40 +02:00
777f8df707 verify-fluid-telegram-lane: clear message when the member login is refused
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 20:10:43 +02:00
custodian-sync
b1f6a3dab1 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:55:10 +02:00
676a0423d8 chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:53:50 +02:00
custodian-sync
5db9d80d30 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:53:49 +02:00
3e49ed4c0c MASON-WP-0010-T03: ops-mason build --case; Forgejo case bundle built
Builds from an accepted case and its reviewed, undrifted plan into CCR drafts
for railiance-platform's applier, policy HCL, catalog proposal, exact rollback
and manifest; the local audit log records case, type and acceptance. Drafts
pass the platform's own CCR validator. 6 tests; suite 175 passed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:52:55 +02:00
a97d1931dd chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:48:12 +02:00
custodian-sync
27cc9aaee7 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:48:08 +02:00
cd251f7c2e WP-0005-T05: lane verified from policy and role; owner-run check script; Forgejo case plan rendered
Live policy and role equal the approved spec, 8 agent denies present, custody
at coulomb v1. verify-fluid-telegram-lane.sh lets the founder prove member
capabilities and non-member refusal without printing a token. T06 entry
proposed to ops-warden. plans/case-forgejo-netkingdom-oidc.md: reviewed,
no collisions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:47:45 +02:00
e10bc2b82b chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:42:30 +02:00
custodian-sync
5397ecb2cd chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:42:29 +02:00
a3e97c8bd4 plan --case: explicit reference-case render; WP-0005-T04 done; factor-issuer described
--allow-unimplemented (acknowledged type only, plan marked reference_case)
lets the accepted Forgejo case render; reviewed now requires a live survey.
WP-0005 lane applied and custody moved by the founder. keycape-factor-issuer
filled from net-kingdom, rotation gap attributed to railiance-platform.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:42:02 +02:00
c6eb701c3d chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:02:19 +02:00
custodian-sync
f45107f3df chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:02:18 +02:00
4dafcf5ed4 MASON-WP-0010-T02 done: ops-mason plan --case renders a construction plan from a SecurityCase
Uses net-kingdom's case validator and renderer, adds a read-only collision
review against live structure, and puts the case acceptance in place of the
executive summary. 8 tests; suite 167 passed. WP-0010 now blocked on the type
being implemented; WP-0004-T04 blocker made precise.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:01:28 +02:00
21b5a076f6 chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 15:54:02 +02:00
custodian-sync
492b6839b1 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 15:54:01 +02:00
930bcadb92 MASON-WP-0007 finished: tenant-engine audit-core sender projection verified
Live policy equals the declared file, role bound to tenant-engine-eso only,
store Ready, ExternalSecret SecretSynced. ops-warden adds the pointer;
tenant-engine notified.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 15:53:29 +02:00
3e9ed6e862 chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:59:45 +02:00
custodian-sync
245a01c7de chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:59:44 +02:00
5dc876f566 WP-0007-T06 in progress (tenant-engine ESO synced); WP-0010-T02 unblocked
rapp-tenant-engine applied by the founder: store Ready, ExternalSecret
SecretSynced. NK type oidc-browser-relying-party acknowledged (decision
e418263e resolved), so rendering from a case can start.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:59:09 +02:00
dc5a71bf07 MASON-WP-0009-T05: CCR-2026-0038 already applied (2026-10-08); waits on login proof
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:41:48 +02:00
da222857da chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:29:23 +02:00
custodian-sync
2b87675e42 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:29:22 +02:00
5bfd8e6100 MASON-WP-0004-T02 done: 29 paths described and verified; T03 asks owners for the rest
custody-inventory: 49 paths, 16 undescribed (from 45), none of the 29 accepted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:28:52 +02:00
8aa3398308 MASON-WP-0004-T02: all 29 accepted descriptions applied (receipt 29/29 merged)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:25:56 +02:00
custodian-sync
c867ee6bdf chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:10:25 +02:00
84beefc406 MASON-WP-0004-T02: 27/29 descriptions applied; clip to OpenBao's byte limit
Founder run 4 merged 27 accepted descriptions. Two failed with HTTP 400:
used_by was 514 bytes because clipping counted characters and appended a
3-byte ellipsis. Clip and check now count bytes; manifest re-clipped.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:09:52 +02:00
6bab3bbfdf custody-describe apply: record HTTP code, merge-put fallback when patch is refused
Third founder run: every write exited 2 (bao's generic error code), cause not
visible. The receipt now keeps only the HTTP status from stderr; on 403/405
for patch it reads metadata (never data), merges and writes it back whole,
preserving custom_metadata set by earlier CCRs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:45:51 +02:00
6c9b450043 custody-describe apply: receipt under the real home, default BAO_ADDR
The warden wrapper runs with a temporary HOME and without BAO_ADDR, so the
second founder run exited non-zero and its receipt vanished with the
temporary directory. Failures now record bao's exit code in the receipt.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:41:31 +02:00
c2b6bd5ef3 MASON-WP-0004-T02: founder accepts the 29 complete custody descriptions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:29:57 +02:00
7d54d049c1 custody-describe apply: silent, results to a 0600 receipt
The warden admin wrapper refuses any output; the first founder run was
refused (nothing written, all entries still drafts).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:22:46 +02:00
6f529413c8 MASON-WP-0004-T02: draft custody descriptions and a metadata-only apply tool
custody-describe.py drafts the five custody fields from CCRs, the routing
catalog and the owner proposals (no OpenBao access), and applies accepted
entries with bao kv metadata patch only, silently. 29/38 drafts complete;
gaps left empty for owners. 4 tests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:19:30 +02:00
ccd8e62eab chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:03:15 +02:00
custodian-sync
ce98fb9fc7 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:03:14 +02:00
cd6c61d034 MASON-WP-0004-T01 done: founder rulings on tenant conflict and unclear paths
A: coulomb as approved; four infotech hall-of-helix values move there as
part of MASON-WP-0005-T04. B1 retire duplicate activity-core/default entry,
B2 forgejo-mailer -> rapp-forgejo, B3 target-revenue deferred.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:02:47 +02:00
9b3ec41f0e MASON-WP-0004-T01: live inventory and owner proposals for 45 undescribed paths
49 paths, 45 without custody fields. 38 owners proposed from catalog/CCRs,
3 genuinely unclear, and 4 undocumented fluid-telegram entries under tenant
infotech that conflict with the approved coulomb plan; WP-0005-T04 on hold
until the founder rules.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 10:54:08 +02:00
3ac63b23fc MASON-WP-0007-T06: Secret presence check only through the safe helper
Per the-custodian standing notice 51e9eace (2026-09-28).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 10:46:53 +02:00
c24732e8a8 MASON-IN-0003: ask fluid-telegram for the adapter deployment identity
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 10:45:03 +02:00
515644de98 chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:45:52 +02:00
custodian-sync
739f707a62 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:45:46 +02:00
21bce610b5 MASON-WP-0005-T03 done: founder approved the fluid-telegram operator lane
Plan status approved (Bernd Worsch, 2026-10-09) with build_spec and
approved_spec_sha256 41a0ca27; the executor's approval gate accepts it.
T04 now waits on the founder-run applier (RPF-WP-0035-T03, decision 62aa95e4).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:45:03 +02:00
031801f71f chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:43:54 +02:00
custodian-sync
3538939d9e chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:43:53 +02:00
8377f5ca9b MASON-WP-0005-T01 done; fluid-telegram operator plan reviewed with executive summary
Founder confirmed LLDAP group fluid-telegram-operators exists with member
tegwick. Plan moves draft -> reviewed: platform matrix checked against the
executor, section 5 written for the T03 approval.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:43:19 +02:00
401616bb0b MASON-WP-0009-T05: lane packaged as CCR-2026-0038, waits on founder apply
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:33:51 +02:00
5daa9f936a chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:29:16 +02:00
custodian-sync
cb8218941d chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:29:15 +02:00
bc3e03941e MASON-WP-0007-T04 done: tenant-engine ESO objects declared (rapp-tenant-engine c160be2)
Matches plan rows 4-6. Deployment is a founder make target, not ArgoCD;
T06 now waits on that apply, then metadata-only verification.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 00:28:42 +02:00