coulomb/ops-warden
5
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

WARDEN-WP-0042: route the OpenBao structure survey to ops-mason

Browse source 
Pointer-only catalog entry openbao-structure-survey (warden_executes: false,
owner ops-mason, ceremony lane, not exec_capable) pointing at ops-mason's
ops-mason-build grant, scripts/plan-survey.py and construction-plan-format
section 2, plus a short pointer playbook. ops-warden holds no survey code
and no token. Routing-lane coverage re-measured: not_applicable 15 -> 16.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1170398@bnt-lap001
Assistant-Session: 622cd705-cb31-4322-ba08-dd42e44fa583
This commit is contained in:
tegwick 2026-10-05 13:21:22 +02:00
parent a3555498dd
commit a53a55a980
5 changed files with 110 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

52
workplans/WARDEN-WP-0042-openbao-structure-survey-route.md Normal file
View file

@ -0,0 +1,52 @@
---
id: WARDEN-WP-0042
type: workplan
title: "Route the OpenBao existing-structure survey to ops-mason"
domain: infotech
repo: ops-warden
status: finished
flavor: implementation
owner: claude
topic_slug: netkingdom
created: "2026-10-05"
updated: "2026-10-05"
depends_on: []
---
ops-mason construction plans need an existing-structure survey (section 2)
built from live OpenBao metadata. Founder decision: ops-warden routes,
ops-mason surveys. ops-mason implements `scripts/plan-survey.py` under its
own `ops-mason-build` grant (`ops-mason/MASON-WP-0008`). ops-warden gets no
survey code and no token, per the no-double-source rule
(`WARDEN-WP-0010`, `docs/adr/ADR-0001-catalog-is-a-pointer-layer.md`).
## Add the pointer-only catalog entry
```task
id: WARDEN-WP-0042-T01
status: done
priority: medium
```
`registry/routing/catalog.yaml` entry `openbao-structure-survey`: owner
`ops-mason`, `warden_executes: false`, `exec_capable: false`, no `steps`,
native delegation to ops-mason, lane `ceremony` (the grant is a founder act),
`risk: high` (the grant can write policies and auth roles), `auth_method`
naming the ops-mason grant, `exec_owner`/`exec_command` pointing at the
survey script, `canon_ref` at `ops-mason/docs/construction-plan-format.md`.
Short pointer playbook `wiki/playbooks/openbao-structure-survey.md`.
## Verify routing offline
```task
id: WARDEN-WP-0042-T02
status: done
priority: medium
```
`make test` passes, including catalog validation and layer conformance.
`warden access "openbao structure survey"`, `warden access "construction
plan section 2"` and `warden route find "existing policies auth roles
survey"` resolve to the entry; `warden plan` returns `founder_required`
with the survey command; `warden access ... --exec` refuses (not
exec_capable).