WARDEN-WP-0042: route the OpenBao structure survey to ops-mason

Pointer-only catalog entry openbao-structure-survey (warden_executes: false,
owner ops-mason, ceremony lane, not exec_capable) pointing at ops-mason's
ops-mason-build grant, scripts/plan-survey.py and construction-plan-format
section 2, plus a short pointer playbook. ops-warden holds no survey code
and no token. Routing-lane coverage re-measured: not_applicable 15 -> 16.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1170398@bnt-lap001
Assistant-Session: 622cd705-cb31-4322-ba08-dd42e44fa583

registry/routing/catalog.yaml

@@ -1385,3 +1385,31 @@ entries:
         - "In Scaleway IAM, revoke the bootstrap API key after the scoped bucket key exists."
         - "Delete or overwrite platform/workloads/railiance/scaleway/bootstrap; do not copy values into chat."
         - "Confirm metadata gone or version bumped; capabilities-safe only."
+
+  - id: openbao-structure-survey
+    title: OpenBao existing-structure survey for a construction plan (section 2)
+    # Pointer only (WARDEN-WP-0042). Founder decision: ops-warden routes,
+    # ops-mason surveys. No survey code and no token live in ops-warden; the
+    # survey runs under ops-mason's own scoped ops-mason-build grant.
+    risk: high
+    workload_ref:
+      applicability: not-applicable
+      reason: "Attended builder survey under a founder-minted grant; reads OpenBao structure metadata, not a workload credential."
+    need_keywords: [survey, structure survey, openbao structure, existing structure, existing policies, existing lane, auth roles, approle roles, policy list, auth list, secrets list, construction plan, construction plan section 2, plan-survey, ops-mason-build]
+    owner_repo: ops-mason
+    subsystem: OpenBao structure metadata via ops-mason-build grant
+    warden_executes: false
+    wiki_ref: wiki/playbooks/openbao-structure-survey.md#worker-checklist
+    canon_ref: ops-mason/docs/construction-plan-format.md
+    reviewed: "2026-10-05"
+    status: active
+    delegation:
+      mode: native
+      intended_owner: ops-mason
+      reviewed: "2026-10-05"
+      verified: source-read
+    auth_method: "founder-minted scoped grant: ops-mason scripts/bao-session.sh grant <task> (policy ops-mason-build, 45m, display_name claude-<task>)"
+    exec_owner: ops-mason
+    exec_command: "ops-mason/scripts/plan-survey.py --kv-path <PATH> --policy <POLICY> --approle <ROLE> --consumer <REPO> --keyword <WORD>"
+    exec_capable: false
+    lane: ceremony