coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

fix(workplans): adopt ADR-007 derived identifiers for unregistered records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 20:16:12 +02:00
parent 76e545ecf0
commit 186fa99f58
10 changed files with 61 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

16
workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
View file

@ -11,7 +11,7 @@ planning_priority: high
planning_order: 26
created: "2026-07-16"
updated: "2026-07-16"
state_hub_workstream_id: "1adb34af-d5f8-42c5-89b4-44593995a281"
state_hub_workstream_id: "331c7620-bd34-5acd-9135-591985b568e5"
---
# Credential disclosure hygiene + rotation guidance (Strand A)
@ -63,7 +63,7 @@ advisory knowledge held next to the routing catalog, not in OpenBao.
id: WARDEN-WP-0026-T01
status: done
priority: high
state_hub_task_id: "9329e72d-c07c-41ce-88ce-e8602eb72c43"
state_hub_task_id: "1cb22a40-b7c6-560a-a805-7766a5786dcc"
```
Done 2026-07-16: canonical capabilities-safe verification pattern added to
@ -90,7 +90,7 @@ it (see T07).
id: WARDEN-WP-0026-T02
status: done
priority: high
state_hub_task_id: "3f28c573-8e58-4851-8aa0-925f9367f266"
state_hub_task_id: "bcb7da96-0a28-5484-bf3e-06e97acf5873"
```
Done 2026-07-16: sanctioned transports added to `warden access` so a value never
@ -117,7 +117,7 @@ the anti-pattern is documented fleet-wide.
id: WARDEN-WP-0026-T03
status: done
priority: medium
state_hub_task_id: "21ab08d5-7782-4567-a08d-980211dd7851"
state_hub_task_id: "d90b0628-fa1d-527d-99c3-28a7ed933e52"
```
Done 2026-07-16: `warden/mask.py` (`fingerprint`/`mask_value` — presence, length,
@ -142,7 +142,7 @@ limitation documented.
id: WARDEN-WP-0026-T04
status: done
priority: high
state_hub_task_id: "f95d4381-f995-4c9d-b438-70b4f0ed90c5"
state_hub_task_id: "827fa67d-5f69-5fac-bdce-9903b1b909fb"
```
Done 2026-07-16: Catalog `risk: high|standard` (default standard). High-risk:
@ -170,7 +170,7 @@ while still allowing wrapped/proxied access, verified via capabilities checks.
id: WARDEN-WP-0026-T05
status: done
priority: medium
state_hub_task_id: "e989f8f0-930e-4d2f-9037-221e04f34199"
state_hub_task_id: "09ef8727-31da-59ac-aac7-2d47924569fe"
```
Done 2026-07-16: Convention documented in `wiki/playbooks/exposed-taint.md`
@ -196,7 +196,7 @@ a lane (advisory; no auto-rotation here).
id: WARDEN-WP-0026-T06
status: done
priority: high
state_hub_task_id: "b8a43aee-18c7-46cd-9cfe-1f73234746d3"
state_hub_task_id: "a2e1544e-e501-57eb-a40e-9a2147cef12a"
```
Done 2026-07-16: `rotation:` block (method rotate|re-establish, ordered steps,
@ -228,7 +228,7 @@ every active lane, and the scorecard fails if any active lane lacks guidance.
id: WARDEN-WP-0026-T07
status: done
priority: medium
state_hub_task_id: "9944f46d-3706-43a4-9300-7f63bf87c9ff"
state_hub_task_id: "62d8286f-7954-52a8-bce6-6a16072e5246"
```
Done 2026-07-16: Lessons note present. Capabilities-safe live re-verify on