From 1f562b81f77ae82bff2c0e94ef6f78eb228ecb88 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 3 Oct 2026 03:13:15 +0200 Subject: [PATCH] CUST-WP-0075-T03: route human gates to hub decisions Co-Authored-By: Claude Fable 5.1 Assistant: claude-code Assistant-Model: fable Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3 --- workplans/WARDEN-WP-0027-credential-governance-lockdown.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/workplans/WARDEN-WP-0027-credential-governance-lockdown.md b/workplans/WARDEN-WP-0027-credential-governance-lockdown.md index ac86464..12aa4ec 100644 --- a/workplans/WARDEN-WP-0027-credential-governance-lockdown.md +++ b/workplans/WARDEN-WP-0027-credential-governance-lockdown.md @@ -11,7 +11,7 @@ topic_slug: custodian planning_priority: medium planning_order: 27 created: "2026-07-16" -updated: "2026-09-28" +updated: "2026-10-03" state_hub_workstream_id: "21528e8d-a049-523d-9ae1-da7a27cb8bbf" --- @@ -91,6 +91,7 @@ each verified capabilities-safe, taint cleared only on success. id: WARDEN-WP-0027-T02 status: wait needs_human: true +decision_id: 1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa blocking_reason: "Trust-root design is a founder decision: who holds unseal shares and recovery keys, quorum, break-glass invocation; executable seal steps are attended." priority: medium state_hub_task_id: "cae498ee-6307-5d32-9f1b-a471cfcc2536" @@ -258,6 +259,8 @@ fully parameterized green preflight, and a new human GO. It is executed by the platform owner, never by a coding agent. That is an operator decision, not an agent one, so T02 stays `progress` and the decision is surfaced rather than taken. +2026-10-03: human gate routed to hub decision 1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa (D3: Trust root and secret custody: unseal/recovery holders, break-glass, and the deferred rotation of exposed material) by CUST-WP-0075; resolving that decision raises C-40 here. + ## Task: Tamper-evident policy governance + reconcile ```task