WARDEN-WP-0027: backlog with cancelled deferred tasks

C-23 forces active when tasks are wait/progress; C-15 preferred wait over
todo. Park Strand B as backlog and cancel T01–T03 until an activation gate
fires (then re-open as todo).

workplans/WARDEN-WP-0027-credential-governance-lockdown.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Tamper-resistant credential governance + mass rotation/lockdown (Strand B)"
 domain: infotech
 repo: ops-warden
-status: active
+status: backlog
 owner: codex
 topic_slug: custodian
 planning_priority: medium
@@ -29,6 +29,10 @@ governance against silent drift or malicious change.
 
 ## Status: backlog (captured, not scheduled)
 
+Tasks are **`cancel`** (deferred with the workplan, not abandoned) so hub
+consistency C-23 does not force `active`. On activation: set workplan to
+`ready`/`active` and re-open tasks as `todo`/`progress`.
+
 Frontmatter `status: backlog` as of 2026-07-17 (Strand A / WP-0026 and tenant
 custody WP-0028 are finished; no activation gate has fired). Tasks remain
 `todo` (not `wait`/`progress`) so hub consistency **C-23** does not force the
@@ -64,7 +68,7 @@ path; ops-warden sequences and verifies it.
 
 ```task
 id: WARDEN-WP-0027-T01
-status: wait
+status: cancel
 priority: high
 state_hub_task_id: "604aad14-d398-4c02-85e5-7ff37a905a1b"
 ```
@@ -85,7 +89,7 @@ each verified capabilities-safe, taint cleared only on success.
 
 ```task
 id: WARDEN-WP-0027-T02
-status: wait
+status: cancel
 priority: medium
 state_hub_task_id: "9d004d8f-6215-4178-bd13-5785d24fd152"
 ```
@@ -104,7 +108,7 @@ policy toggles.
 
 ```task
 id: WARDEN-WP-0027-T03
-status: wait
+status: cancel
 priority: medium
 state_hub_task_id: "94d5dcaf-abf0-417c-a6ef-26e8c50905a8"
 ```