From 25a691d49a398916b69b506bdaac173eb4c5af77 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 17 Jul 2026 00:45:03 +0200 Subject: [PATCH] WARDEN-WP-0027: park Strand B as backlog (C-23-safe) Set workplan status backlog and tasks todo (not wait) so fix-consistency does not re-promote to active. Activate only when a gate fires. --- ...-WP-0027-credential-governance-lockdown.md | 20 ++++++++++--------- 1 file changed, 11 insertions(+), 9 deletions(-) diff --git a/workplans/WARDEN-WP-0027-credential-governance-lockdown.md b/workplans/WARDEN-WP-0027-credential-governance-lockdown.md index 34fd18d..6122879 100644 --- a/workplans/WARDEN-WP-0027-credential-governance-lockdown.md +++ b/workplans/WARDEN-WP-0027-credential-governance-lockdown.md @@ -4,7 +4,7 @@ type: workplan title: "Tamper-resistant credential governance + mass rotation/lockdown (Strand B)" domain: infotech repo: ops-warden -status: active +status: backlog owner: codex topic_slug: custodian planning_priority: medium @@ -30,11 +30,13 @@ governance against silent drift or malicious change. ## Status: backlog (captured, not scheduled) Frontmatter `status: backlog` as of 2026-07-17 (Strand A / WP-0026 and tenant -custody WP-0028 are finished; no activation gate has fired). This is -deliberately **not `ready`**. It carries real cost and blast radius -(break-glass re-key, trust-root design) that is not justified until a concrete -trigger appears. See **Activation gate** below. Nothing here is implemented -until the gate is met and Bernd promotes it to `ready`. +custody WP-0028 are finished; no activation gate has fired). Tasks remain +`todo` (not `wait`/`progress`) so hub consistency **C-23** does not force the +workplan back to `active`. This is deliberately **not `ready`**. It carries +real cost and blast radius (break-glass re-key, trust-root design) that is not +justified until a concrete trigger appears. See **Activation gate** below. +Nothing here is implemented until the gate is met and Bernd promotes it to +`ready` (then move tasks `todo` → `progress` as work starts). ## Activation gate (promote to `ready` only when ≥1 holds) @@ -62,7 +64,7 @@ path; ops-warden sequences and verifies it. ```task id: WARDEN-WP-0027-T01 -status: wait +status: todo priority: high state_hub_task_id: "604aad14-d398-4c02-85e5-7ff37a905a1b" ``` @@ -83,7 +85,7 @@ each verified capabilities-safe, taint cleared only on success. ```task id: WARDEN-WP-0027-T02 -status: wait +status: todo priority: medium state_hub_task_id: "9d004d8f-6215-4178-bd13-5785d24fd152" ``` @@ -102,7 +104,7 @@ policy toggles. ```task id: WARDEN-WP-0027-T03 -status: wait +status: todo priority: medium state_hub_task_id: "94d5dcaf-abf0-417c-a6ef-26e8c50905a8" ```