Ship WARDEN-WP-0030: delegation register for every catalog lane
Every execution position is now explicit. Catalog entries carry delegation.mode (permanent / native / interim) with intended owner and blocker. warden route gaps lists the interim set. Promotion requires the ownership question. Doctrine lives in AccessRouting.md; the register was published to the named owner repos.
This commit is contained in:
parent
8d3706fa06
commit
c93e3c9b43
11 changed files with 619 additions and 29 deletions
|
|
@ -4,13 +4,13 @@ type: workplan
|
|||
title: "Delegation register — make gap-covering interim, visible, and retirable"
|
||||
domain: infotech
|
||||
repo: ops-warden
|
||||
status: proposed
|
||||
owner: claude
|
||||
status: finished
|
||||
owner: grok
|
||||
topic_slug: custodian
|
||||
planning_priority: high
|
||||
planning_order: 30
|
||||
created: "2026-08-11"
|
||||
updated: "2026-08-11"
|
||||
updated: "2026-08-15"
|
||||
state_hub_workstream_id: "29f3fcb3-e3c5-4f9d-bdfd-f76254754e21"
|
||||
---
|
||||
|
||||
|
|
@ -87,7 +87,7 @@ to *"who should own this front door, and what is missing?"*
|
|||
|
||||
```task
|
||||
id: WARDEN-WP-0030-T01
|
||||
status: todo
|
||||
status: done
|
||||
priority: high
|
||||
state_hub_task_id: "3d76f6c2-5007-4ad5-8d6f-360f9303c929"
|
||||
```
|
||||
|
|
@ -103,7 +103,7 @@ targets. Cross-link INTENT.md §9.
|
|||
|
||||
```task
|
||||
id: WARDEN-WP-0030-T02
|
||||
status: todo
|
||||
status: done
|
||||
priority: high
|
||||
state_hub_task_id: "8013020b-d0a5-4e89-8e0b-bc418a761c84"
|
||||
```
|
||||
|
|
@ -123,11 +123,26 @@ Backfill all 24 entries. `exec_owner` lanes become `mode: native`.
|
|||
eleven undelegated proxies are classified per the founder review below — five
|
||||
`interim` now, six held pending secrets-engine's answer.
|
||||
|
||||
**Landed 2026-08-15.** Catalog is now 27 entries. All 27 carry `delegation:`.
|
||||
|
||||
- `permanent` (1): `ssh-cert-host-access`
|
||||
- `native` (10): both `exec_owner` lanes plus the route-only pointers
|
||||
- `interim` (16): the five founder-classified now; the six held pending
|
||||
secrets-engine (still unanswered as of 2026-08-15, msg `7d55d332`) recorded as
|
||||
`interim` / `intended_owner: secrets-engine` / `blocked_on` the generic-vs-per-lane
|
||||
question — **not** `permanent`; plus five new-since-survey lanes drafted the same
|
||||
way (`email-connect-transactional` same held question; two AppRoles;
|
||||
`coulomb-social-runtime-env`; draft `scaleway-bootstrap`)
|
||||
|
||||
The six are not guessed permanent. Interim is the default until secrets-engine
|
||||
answers. Reclassify to `permanent` only if they confirm `exec --catalog` stays
|
||||
per-lane.
|
||||
|
||||
### T03 — `warden route gaps` + conformance test
|
||||
|
||||
```task
|
||||
id: WARDEN-WP-0030-T03
|
||||
status: todo
|
||||
status: done
|
||||
priority: medium
|
||||
state_hub_task_id: "e7755708-e1bf-4d42-999c-4a60330cf154"
|
||||
```
|
||||
|
|
@ -142,7 +157,7 @@ entries in the existing drift/stale review cadence.
|
|||
|
||||
```task
|
||||
id: WARDEN-WP-0030-T04
|
||||
status: todo
|
||||
status: done
|
||||
priority: medium
|
||||
state_hub_task_id: "ddc0268b-1279-4875-b223-0627c97d657a"
|
||||
```
|
||||
|
|
@ -156,7 +171,7 @@ checklist.
|
|||
|
||||
```task
|
||||
id: WARDEN-WP-0030-T05
|
||||
status: todo
|
||||
status: done
|
||||
priority: medium
|
||||
state_hub_task_id: "d8796e25-e896-463d-9476-f002e38b6897"
|
||||
```
|
||||
|
|
@ -167,16 +182,29 @@ what ops-warden currently fronts on your behalf, here is what would let us step
|
|||
back. This is the artefact that converts a private ops-warden position into a
|
||||
fleet-visible capability gap.
|
||||
|
||||
**Landed 2026-08-15.** Register sent (no secret values):
|
||||
|
||||
| To | Message |
|
||||
| --- | --- |
|
||||
| secrets-engine | `9c1d753f` — 1 native + 7 interim pending generic-exec answer |
|
||||
| tenant-engine | `17c851b1` — 2 Binky tenant lanes |
|
||||
| user-engine | `38aeccd5` — confirm USER_ENGINE_PROXY_SECRET ownership |
|
||||
| railiance-platform | `e75793e3` — 1 native + 4 interim |
|
||||
| net-kingdom | `3fea09df` — object-storage-sts remains native/draft |
|
||||
| key-cape | `28ded56c` — rapp-qonto-keycape-client (founder-classified interim) |
|
||||
|
||||
## Acceptance
|
||||
|
||||
- [ ] `wiki/AccessRouting.md` states the interim-custodianship boundary and names
|
||||
- [x] `wiki/AccessRouting.md` states the interim-custodianship boundary and names
|
||||
the delegation targets
|
||||
- [ ] All 24 catalog entries carry `delegation`; `warden route gaps` returns the
|
||||
interim set with owner + blocker
|
||||
- [ ] Routing test fails when a proxy lane omits `delegation`
|
||||
- [ ] Promotion playbook gates draft→active on the ownership question
|
||||
- [ ] Founder has reviewed the interim/permanent classification of the eleven
|
||||
- [ ] Register delivered to the named owner repos
|
||||
- [x] All catalog entries carry `delegation`; `warden route gaps` returns the
|
||||
interim set with owner + blocker (27 entries; 15 active interim)
|
||||
- [x] Routing test fails when a proxy lane omits `delegation`
|
||||
- [x] Promotion playbook gates draft→active on the ownership question
|
||||
- [x] Founder has reviewed the interim/permanent classification of the eleven
|
||||
(2026-08-11); the six held lanes stay interim pending secrets-engine, not
|
||||
marked permanent
|
||||
- [x] Register delivered to the named owner repos (T05)
|
||||
|
||||
## Classification of the eleven (founder review, 2026-08-11)
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue