coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

fix(workplans): adopt ADR-007 derived identifiers for unregistered records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 20:16:12 +02:00
parent 76e545ecf0
commit 186fa99f58
10 changed files with 61 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

16
workplans/WARDEN-WP-0032-security-zones.md
View file

@ -12,7 +12,7 @@ depends_on_workplans:
- WARDEN-WP-0031
created: "2026-08-19"
updated: "2026-08-22"
state_hub_workstream_id: "f1b6cdcb-5e16-48ab-a72b-339e909e92f0"
state_hub_workstream_id: "38c6a5f3-fb0d-5230-be85-f9e3ffc850f6"
quality_dod: DoD-Ok
quality_dod_at: "2026-08-22"
quality_dod_by: codex
@ -56,7 +56,7 @@ and most of that estate is ops-warden's:
id: WARDEN-WP-0032-T01
status: done
priority: high
state_hub_task_id: "b6dac514-4b05-47b8-8745-6a1c67b6100e"
state_hub_task_id: "b03a5caa-0bb5-5cdd-bb99-32c694b0da29"
```
**Hand the estate inputs to `ZONE-WP-0001-T02`.** Not a design proposal — the
@ -104,7 +104,7 @@ this repo's own input rather than out of supplying a new one.
id: WARDEN-WP-0032-T02
status: done
priority: high
state_hub_task_id: "08735f17-fe7e-4a6a-9b71-f350f98c30b1"
state_hub_task_id: "b3f41c85-a293-58ad-ac27-9f8110c51266"
```
**Replace `policy.enabled` with a zone-aware control.** Waits on
@ -175,7 +175,7 @@ sign/audit evidence records zone, failure mode, outcome, and decision id.
id: WARDEN-WP-0032-T03
status: done
priority: medium
state_hub_task_id: "fd642377-8d64-473c-b684-f8f1a842c223"
state_hub_task_id: "d04a737b-ecdf-5747-ba25-20dadd99d3bc"
```
**Declare ops-warden's zones** in the format `ZONE-WP-0001-T05` settles,
@ -221,7 +221,7 @@ passes net-kingdom's current `tenancy-posture_v0.1` validator.
id: WARDEN-WP-0032-T04
status: done
priority: medium
state_hub_task_id: "1af3d26e-ce21-46ca-a56c-486d52b76dcb"
state_hub_task_id: "c7879127-3dba-55c0-853c-a10775736873"
```
**Amend `ADR-0006`.** Once zones exist and enforcement scoping is owned by
@ -240,7 +240,7 @@ control and do not instruct operators to use a global bypass.
id: WARDEN-WP-0032-T05
status: done
priority: high
state_hub_task_id: "4d5d2756-c880-4e90-8fb7-1f03674a4cd9"
state_hub_task_id: "1d968627-83f4-59cd-84ca-0f9f35e435ff"
```
**Grade the five exposed lanes now — do not wait for the model.**
@ -284,7 +284,7 @@ policy covers these paths (T06).
id: WARDEN-WP-0032-T06
status: done
priority: medium
state_hub_task_id: "8c082416-0ff9-45dc-8cbd-e9ca7913a6ef"
state_hub_task_id: "4294084c-bf3f-5aa6-b84d-5173121882ff"
```
**Make absence impossible, once the model says what absence means.** Waits on
@ -398,7 +398,7 @@ The platform deny policy and its live proof above close the direct-OpenBao half.
id: WARDEN-WP-0032-T07
status: done
priority: medium
state_hub_task_id: "6b8c8181-978c-4b0a-ac7b-2cc9ad57b3ba"
state_hub_task_id: "6b4bbbed-2864-5fe9-82be-22ff9543f6f4"
```
**Adopt Repo Manager's workload-reference owner interface.** Accepted with one