From 167e29de99d913925ae24dca86986ec427c62a6b Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 16 Jul 2026 01:43:19 +0200 Subject: [PATCH] chore(consistency): write state-hub IDs into WARDEN-WP-0026 [auto] Co-Authored-By: Claude Opus 4.8 --- workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md b/workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md index 3adfcb6..7725d58 100644 --- a/workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md +++ b/workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md @@ -11,6 +11,7 @@ planning_priority: high planning_order: 26 created: "2026-07-16" updated: "2026-07-16" +state_hub_workstream_id: "1adb34af-d5f8-42c5-89b4-44593995a281" --- # Credential disclosure hygiene + rotation guidance (Strand A) @@ -62,6 +63,7 @@ advisory knowledge held next to the routing catalog, not in OpenBao. id: WARDEN-WP-0026-T01 status: todo priority: high +state_hub_task_id: "9329e72d-c07c-41ce-88ce-e8602eb72c43" ``` Replace secret-reading verify flows with capability checks. Positive test: @@ -80,6 +82,7 @@ it (see T07). id: WARDEN-WP-0026-T02 status: todo priority: high +state_hub_task_id: "3f28c573-8e58-4851-8aa0-925f9367f266" ``` `warden access` / fetch paths must emit values only into an env var, a file, or @@ -97,6 +100,7 @@ the anti-pattern is documented fleet-wide. id: WARDEN-WP-0026-T03 status: todo priority: medium +state_hub_task_id: "21ab08d5-7782-4567-a08d-980211dd7851" ``` In the warden wrapper, mask KV data values by default when any listing/status is @@ -112,6 +116,7 @@ limitation documented. id: WARDEN-WP-0026-T04 status: todo priority: high +state_hub_task_id: "f95d4381-f995-4c9d-b438-70b4f0ed90c5" ``` **Repo: railiance-platform (OpenBao policy/roles).** Agent identities receive @@ -129,6 +134,7 @@ while still allowing wrapped/proxied access, verified via capabilities checks. id: WARDEN-WP-0026-T05 status: todo priority: medium +state_hub_task_id: "e989f8f0-930e-4d2f-9037-221e04f34199" ``` **Repo: railiance-platform (OpenBao) + ops-warden surface.** Establish a KV v2 @@ -146,6 +152,7 @@ a lane (advisory; no auto-rotation here). id: WARDEN-WP-0026-T06 status: todo priority: high +state_hub_task_id: "b8a43aee-18c7-46cd-9cfe-1f73234746d3" ``` Give every catalog lane **structured-but-advisory** renewal guidance, held in the @@ -165,6 +172,7 @@ every active lane, and the scorecard fails if any active lane lacks guidance. id: WARDEN-WP-0026-T07 status: todo priority: medium +state_hub_task_id: "9944f46d-3706-43a4-9300-7f63bf87c9ff" ``` Write a short lessons-learned note (buildup context; exposure accepted; the three