ops-mason/workplans/MASON-WP-0014-mas-tem-relay-smtp.md
tegwick dee677f226 MASON-WP-0013: record the survey, CCR, and founder decision
The ops-mason-survey grant confirmed the existing private-reader lane and the MAS delivery metadata. CCR-2026-0046 and founder decision 9833715e are recorded apart from the disclosure consent. The plan stays reviewed, and the draft catalog route is not activated.

Assistant: grok
Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a
2026-10-22 00:24:00 +02:00

2.7 KiB
Raw Blame History

id type title domain repo status owner topic_slug created updated flavor depends_on state_hub_workstream_id
MASON-WP-0014 workplan Build the temporary MAS live-test TEM SMTP relay lane infotech ops-mason finished claude netkingdom-security-architecture 2026-10-18 2026-10-22 implementation
1df71ade-cb20-5eae-8f6b-bae416058970

MAS TEM SMTP relay lane

Demand: hub message 14bdd217 from mail-address-semantics (MAS-WP-0003-T03). Plan: plans/mas-tem-relay-smtp.md. Temporary; retires with namespace mas.

Draft the construction plan

id: MASON-WP-0014-T01
status: done
priority: high
state_hub_task_id: "5fbbb560-3b0d-5e1c-bf45-c7d191357515"

Drafted plans/mas-tem-relay-smtp.md (status draft) and replied to the requester with the proposed path, role and store names.

Live survey and self-review

id: MASON-WP-0014-T02
status: done
priority: high
state_hub_task_id: "cebd25bc-20eb-56ec-9802-e020ee1aa645"

Needs an ops-mason-survey grant (bao-session.sh grant MASON-WP-0014-T02). Run plan-survey.py as given in plan §2, then set the plan to reviewed. Done 2026-10-18 (survey 10:13:55Z, decision: no existing lane). The KV value was written by the founder as v2.

CCR and founder approval

id: MASON-WP-0014-T03
status: done
priority: high
state_hub_task_id: "f9c89f3b-6c07-560b-abd0-7c9c83940e83"

railiance-platform allocates the CCR for plan rows 1–3. The founder approves the plan and the CCR, applies them through the delegated applier, and fills password in the OpenBao UI.

Done 2026-10-18: the founder wrote the value (v2) and approved the plan and CCR-2026-0051. ops-mason built the policy and role under ops-mason-construct (plan §6). The build happened before confirm-binding; see the deviation note.

Verify delivery and record teardown

id: MASON-WP-0014-T04
status: done
priority: medium
state_hub_task_id: "75eb71c8-5ac4-5512-bee3-6c0e4bee4dfd"

Confirm KV metadata exists and that Secret mas/mas-relay syncs (names only). Record the teardown steps (plan rows 6–7) as a residual against MAS-WP-0003 close.

Done 2026-10-21T22:15:18Z under grant token-claude-MASON-WP-0014-T04 (policies default, ops-mason-survey). No kv get and no data body.

  • KV platform/suppliers/scaleway/mas-tem-relay exists, current_version=2.
  • Policy workload-kv-read-mas-tem-relay grants read on that data path. Role external-secrets-mas-tem-relay binds SA mas-tem-relay-eso in mas.
  • ExternalSecret mas-relay is Ready True, reason SecretSynced, binding name mas-relay. The Secret object was not read.
  • Teardown rows 6–7 are live intake MASON-IN-0007 (origin: residual, origin_ref: MASON-WP-0014), due at MAS-WP-0003 close. Not executed.