coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

fix(workplans): adopt ADR-007 derived identifiers for unregistered records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 20:16:12 +02:00
parent 76e545ecf0
commit 186fa99f58
10 changed files with 61 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

16
workplans/WARDEN-WP-0028-tenant-secret-custody.md
View file

@ -11,7 +11,7 @@ planning_priority: high
planning_order: 28
created: "2026-07-16"
updated: "2026-07-17"
state_hub_workstream_id: "85b18255-d6a7-4c5e-bae0-e5b5bbc43757"
state_hub_workstream_id: "6b66228a-199a-5b85-b5e2-a7afeaab903b"
---
# WARDEN-WP-0028 — Tenant secret custody (NetKingdom pattern)
@ -228,7 +228,7 @@ while binky is founder-operated only.
id: WARDEN-WP-0028-T01
status: done
priority: high
state_hub_task_id: "b78cfae0-6863-4889-8a1c-81dc0b44ff3b"
state_hub_task_id: "9982a884-7a50-593e-861e-cc8d2343a0ba"
```
Done 2026-07-17: `wiki/playbooks/tenant-secret-onboarding.md` + CredentialRouting
@ -252,7 +252,7 @@ updated to match (or superseded with link).
id: WARDEN-WP-0028-T02
status: done
priority: high
state_hub_task_id: "030c9e0d-cc25-44ea-93f1-ff575905dec4"
state_hub_task_id: "d7d7ee9d-2ecf-5492-8a13-0b747d899456"
```
Done 2026-07-17: `binky-control/integrations/company-email-openbao.md` rewritten
@ -275,7 +275,7 @@ implementation (T01 in BINKY was "prepared only").
id: WARDEN-WP-0028-T03
status: done
priority: high
state_hub_task_id: "7ebc0a27-d2cc-4b71-985b-f793db583d91"
state_hub_task_id: "e0b675ef-9c08-5f89-8f13-ef4249ca2364"
```
Done 2026-07-17: `tenants/` KV v2 mount live; CCR applier allowlist extended;
@ -307,7 +307,7 @@ reads for verify).
id: WARDEN-WP-0028-T04
status: done
priority: high
state_hub_task_id: "bcb8b75c-9ed6-4fbd-a2d9-19fe127d6d86"
state_hub_task_id: "9405b13d-4045-519b-8e3f-79a891323397"
```
Done 2026-07-17: catalog draft `binky-company-email-imap` (`risk: high`,
@ -329,7 +329,7 @@ expected pointers; after T03+T05, `resolvable: true`.
id: WARDEN-WP-0028-T05
status: done
priority: high
state_hub_task_id: "0f56a6ef-349b-41db-a6df-fe3f3cccdd13"
state_hub_task_id: "f17bba95-bc53-5c2a-8b44-7df9e42b2341"
```
Done 2026-07-17: Founder provisioned via OpenBao UI (KV version 2; not
@ -352,7 +352,7 @@ promoted active/resolvable; CCR verification evidence complete.
id: WARDEN-WP-0028-T06
status: done
priority: medium
state_hub_task_id: "913389da-72d8-4caf-a670-fdb74c20ee97"
state_hub_task_id: "76bd01a0-1d03-5ff9-8f59-a1b44763979d"
```
Done 2026-07-17 with T01: `wiki/playbooks/tenant-secret-onboarding.md` +
@ -373,7 +373,7 @@ session notes for tenant repos.
id: WARDEN-WP-0028-T07
status: done
priority: low
state_hub_task_id: "f65eafda-9e31-4b18-aeba-2e7a9d906ac6"
state_hub_task_id: "46c8f8a9-3bbe-568f-8a45-07b690874273"
```
Done 2026-07-17: **Decision** — tenant production lanes use `mount: tenants`