Commit graph

233 commits

Author SHA1 Message Date
98dd9ea2e0 Retain reviewed work-record index and synchronization metadata
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 18:45:52 +02:00
969fe218df Prepare independently reviewed native custody capability verification
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 14:16:58 +02:00
custodian-sync
c52be782d0 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-11:
  - update .custodian-brief.md for ops-mason

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 14:01:31 +02:00
a36b6100fc Record independent custody verifier review and required corrections
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 14:00:37 +02:00
custodian-sync
6196be5dca chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-11:
  - update .custodian-brief.md for ops-mason

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 04:10:46 +02:00
a41312e5a4 Prepare reviewed Forgejo consumer ESO scope and truthful recovery records
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 04:09:26 +02:00
f52c94cd4e Prepare typed structural evidence without credential success circularity
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 02:42:57 +02:00
247c829569 MASON-WP-0010: mark the missing-role cause as unconfirmed
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 15:51:58 +02:00
d1703b360c chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 15:51:49 +02:00
custodian-sync
45c1b93ef3 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-10:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 15:51:48 +02:00
437074dff6 MASON-WP-0009-T05: service-JWT role verified, ops-mason checks complete; pointer proposed
Also confirms the Forgejo ESO role is live as applied (WP-0010).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 15:51:17 +02:00
efefb8bbc7 MASON-WP-0009-T05: updated ops-mason-survey installed, hash matches repo file
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 15:45:43 +02:00
28386d3b4c Rebuild Forgejo bundle from type 1.1; draft fluid-telegram custody descriptions
Bundle validates; ESO policy identical to applied CCR-2026-0041. Four
fluid-telegram entries drafted from the approved plan; email-connect asked
for its new path.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 15:12:56 +02:00
2ef0101412 WP-0009-T05 invariant (ii) verified; survey policy covers keycape-services roles; Forgejo plan re-rendered
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 14:13:02 +02:00
8f8692a100 MASON-WP-0004-T03: 34 descriptions applied; operators/ metadata write refused (403)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 14:08:21 +02:00
ab17d859cb plan --case: a case's own built objects are not collisions on re-render
Objects listed in the case's committed build bundle (same case id) are shown
as already present from this case; others still collide. 2 tests; suite 177.
Forgejo plan marked stale after net-kingdom's type change (new render digest).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 13:17:22 +02:00
1c07b65a3c MASON-WP-0004-T03: founder accepts six owner-supplied custody descriptions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 12:59:45 +02:00
c9b1cea83b Fix case render self-lifecycle stanzas; record overnight replies
case_build: policies carry lookup-self/revoke-self when the CCR declares
token_self_lifecycle (CCR-2026-0041 review); Forgejo bundle updated.
WP-0004: six descriptions completed from owner replies (draft, awaiting
acceptance). WP-0009-T05: login proof passed. WP-0010-T03: CCR-2026-0041
applied. WP-0005-T06: ops-warden catalogued the entry as draft.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 12:41:20 +02:00
ae403c8402 MASON-WP-0005-T05: tegwick's factor comes through user-engine self-service MFA
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 00:37:08 +02:00
bc507455da MASON-WP-0005-T05: member check waits on a TOTP factor for tegwick
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-10 00:21:08 +02:00
custodian-sync
1bea4da92e chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 20:12:37 +02:00
19776ae587 MASON-WP-0005-T05: non-member refusal proven (platform-root refused by the role)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 20:11:40 +02:00
777f8df707 verify-fluid-telegram-lane: clear message when the member login is refused
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 20:10:43 +02:00
custodian-sync
b1f6a3dab1 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:55:10 +02:00
676a0423d8 chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:53:50 +02:00
custodian-sync
5db9d80d30 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:53:49 +02:00
3e49ed4c0c MASON-WP-0010-T03: ops-mason build --case; Forgejo case bundle built
Builds from an accepted case and its reviewed, undrifted plan into CCR drafts
for railiance-platform's applier, policy HCL, catalog proposal, exact rollback
and manifest; the local audit log records case, type and acceptance. Drafts
pass the platform's own CCR validator. 6 tests; suite 175 passed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:52:55 +02:00
a97d1931dd chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:48:12 +02:00
custodian-sync
27cc9aaee7 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:48:08 +02:00
cd251f7c2e WP-0005-T05: lane verified from policy and role; owner-run check script; Forgejo case plan rendered
Live policy and role equal the approved spec, 8 agent denies present, custody
at coulomb v1. verify-fluid-telegram-lane.sh lets the founder prove member
capabilities and non-member refusal without printing a token. T06 entry
proposed to ops-warden. plans/case-forgejo-netkingdom-oidc.md: reviewed,
no collisions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:47:45 +02:00
e10bc2b82b chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:42:30 +02:00
custodian-sync
5397ecb2cd chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:42:29 +02:00
a3e97c8bd4 plan --case: explicit reference-case render; WP-0005-T04 done; factor-issuer described
--allow-unimplemented (acknowledged type only, plan marked reference_case)
lets the accepted Forgejo case render; reviewed now requires a live survey.
WP-0005 lane applied and custody moved by the founder. keycape-factor-issuer
filled from net-kingdom, rotation gap attributed to railiance-platform.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:42:02 +02:00
c6eb701c3d chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:02:19 +02:00
custodian-sync
f45107f3df chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:02:18 +02:00
4dafcf5ed4 MASON-WP-0010-T02 done: ops-mason plan --case renders a construction plan from a SecurityCase
Uses net-kingdom's case validator and renderer, adds a read-only collision
review against live structure, and puts the case acceptance in place of the
executive summary. 8 tests; suite 167 passed. WP-0010 now blocked on the type
being implemented; WP-0004-T04 blocker made precise.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 19:01:28 +02:00
21b5a076f6 chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 15:54:02 +02:00
custodian-sync
492b6839b1 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 15:54:01 +02:00
930bcadb92 MASON-WP-0007 finished: tenant-engine audit-core sender projection verified
Live policy equals the declared file, role bound to tenant-engine-eso only,
store Ready, ExternalSecret SecretSynced. ops-warden adds the pointer;
tenant-engine notified.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 15:53:29 +02:00
3e9ed6e862 chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:59:45 +02:00
custodian-sync
245a01c7de chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:59:44 +02:00
5dc876f566 WP-0007-T06 in progress (tenant-engine ESO synced); WP-0010-T02 unblocked
rapp-tenant-engine applied by the founder: store Ready, ExternalSecret
SecretSynced. NK type oidc-browser-relying-party acknowledged (decision
e418263e resolved), so rendering from a case can start.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:59:09 +02:00
dc5a71bf07 MASON-WP-0009-T05: CCR-2026-0038 already applied (2026-10-08); waits on login proof
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 14:41:48 +02:00
da222857da chore(consistency): refresh WORK-RECORDS after sync
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:29:23 +02:00
custodian-sync
2b87675e42 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:29:22 +02:00
5bfd8e6100 MASON-WP-0004-T02 done: 29 paths described and verified; T03 asks owners for the rest
custody-inventory: 49 paths, 16 undescribed (from 45), none of the 29 accepted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:28:52 +02:00
8aa3398308 MASON-WP-0004-T02: all 29 accepted descriptions applied (receipt 29/29 merged)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:25:56 +02:00
custodian-sync
c867ee6bdf chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-10-09:
  - update .custodian-brief.md for ops-mason

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:10:25 +02:00
84beefc406 MASON-WP-0004-T02: 27/29 descriptions applied; clip to OpenBao's byte limit
Founder run 4 merged 27 accepted descriptions. Two failed with HTTP 400:
used_by was 514 bytes because clipping counted characters and appended a
3-byte ellipsis. Clip and check now count bytes; manifest re-clipped.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 12:09:52 +02:00
6bab3bbfdf custody-describe apply: record HTTP code, merge-put fallback when patch is refused
Third founder run: every write exited 2 (bao's generic error code), cause not
visible. The receipt now keeps only the HTTP status from stderr; on 403/405
for patch it reads metadata (never data), merges and writes it back whole,
preserving custom_metadata set by earlier CCRs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
2026-10-09 11:45:51 +02:00