From 7e3e91ec25a343e15c73d45f4890e8dcea5b70f9 Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 21 Sep 2026 14:06:30 +0200 Subject: [PATCH] Name the founder, not a bare operator, on the WARDEN-WP-0037-T03 hold. Aligns with SecurityCanon's disambiguation rule: Operator is a CARING role and OPERATE an Auth Mode; the hold was the founder's decision. Co-Authored-By: Claude Opus 5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 63291@bnt-lap001 Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703 --- workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md b/workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md index c4003bb..7970bb4 100644 --- a/workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md +++ b/workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md @@ -61,7 +61,7 @@ id: WARDEN-WP-0037-T03 status: wait priority: high needs_human: true -intervention_note: "HOLD (operator, 2026-09-21): do not rotate yet. secrets-engine exec reads the ungoverned legacy path secret/coulomb/whynot-design/npm/publish (field npm_token); this runbook writes the governed path platform/workloads/coulomb/whynot-design/npm-publish (NPM_AUTH_TOKEN). A rotation now would not reach the live publish path. Resume after SECRETS-WP-0006-T06 moves the lane. Then: rotate the dedicated Forgejo package token, and prove a fresh publish and exact npm view through this lane." +intervention_note: "HOLD (founder, 2026-09-21): do not rotate yet. secrets-engine exec reads the ungoverned legacy path secret/coulomb/whynot-design/npm/publish (field npm_token); this runbook writes the governed path platform/workloads/coulomb/whynot-design/npm-publish (NPM_AUTH_TOKEN). A rotation now would not reach the live publish path. Resume after SECRETS-WP-0006-T06 moves the lane. Then: rotate the dedicated Forgejo package token, and prove a fresh publish and exact npm view through this lane." state_hub_task_id: "a8b1b855-ab34-5835-b9fd-5f48bc0b6817" ```