Ship WARDEN-WP-0030: delegation register for every catalog lane
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Every execution position is now explicit. Catalog entries carry
delegation.mode (permanent / native / interim) with intended owner and
blocker. warden route gaps lists the interim set. Promotion requires
the ownership question. Doctrine lives in AccessRouting.md; the
register was published to the named owner repos.
This commit is contained in:
tegwick 2026-08-15 20:54:58 +02:00
parent 8d3706fa06
commit c93e3c9b43
11 changed files with 619 additions and 29 deletions

View file

@ -4,13 +4,13 @@ type: workplan
title: "Delegation register — make gap-covering interim, visible, and retirable"
domain: infotech
repo: ops-warden
status: proposed
owner: claude
status: finished
owner: grok
topic_slug: custodian
planning_priority: high
planning_order: 30
created: "2026-08-11"
updated: "2026-08-11"
updated: "2026-08-15"
state_hub_workstream_id: "29f3fcb3-e3c5-4f9d-bdfd-f76254754e21"
---
@ -87,7 +87,7 @@ to *"who should own this front door, and what is missing?"*
```task
id: WARDEN-WP-0030-T01
status: todo
status: done
priority: high
state_hub_task_id: "3d76f6c2-5007-4ad5-8d6f-360f9303c929"
```
@ -103,7 +103,7 @@ targets. Cross-link INTENT.md §9.
```task
id: WARDEN-WP-0030-T02
status: todo
status: done
priority: high
state_hub_task_id: "8013020b-d0a5-4e89-8e0b-bc418a761c84"
```
@ -123,11 +123,26 @@ Backfill all 24 entries. `exec_owner` lanes become `mode: native`.
eleven undelegated proxies are classified per the founder review below — five
`interim` now, six held pending secrets-engine's answer.
**Landed 2026-08-15.** Catalog is now 27 entries. All 27 carry `delegation:`.
- `permanent` (1): `ssh-cert-host-access`
- `native` (10): both `exec_owner` lanes plus the route-only pointers
- `interim` (16): the five founder-classified now; the six held pending
secrets-engine (still unanswered as of 2026-08-15, msg `7d55d332`) recorded as
`interim` / `intended_owner: secrets-engine` / `blocked_on` the generic-vs-per-lane
question — **not** `permanent`; plus five new-since-survey lanes drafted the same
way (`email-connect-transactional` same held question; two AppRoles;
`coulomb-social-runtime-env`; draft `scaleway-bootstrap`)
The six are not guessed permanent. Interim is the default until secrets-engine
answers. Reclassify to `permanent` only if they confirm `exec --catalog` stays
per-lane.
### T03 — `warden route gaps` + conformance test
```task
id: WARDEN-WP-0030-T03
status: todo
status: done
priority: medium
state_hub_task_id: "e7755708-e1bf-4d42-999c-4a60330cf154"
```
@ -142,7 +157,7 @@ entries in the existing drift/stale review cadence.
```task
id: WARDEN-WP-0030-T04
status: todo
status: done
priority: medium
state_hub_task_id: "ddc0268b-1279-4875-b223-0627c97d657a"
```
@ -156,7 +171,7 @@ checklist.
```task
id: WARDEN-WP-0030-T05
status: todo
status: done
priority: medium
state_hub_task_id: "d8796e25-e896-463d-9476-f002e38b6897"
```
@ -167,16 +182,29 @@ what ops-warden currently fronts on your behalf, here is what would let us step
back. This is the artefact that converts a private ops-warden position into a
fleet-visible capability gap.
**Landed 2026-08-15.** Register sent (no secret values):
| To | Message |
| --- | --- |
| secrets-engine | `9c1d753f` — 1 native + 7 interim pending generic-exec answer |
| tenant-engine | `17c851b1` — 2 Binky tenant lanes |
| user-engine | `38aeccd5` — confirm USER_ENGINE_PROXY_SECRET ownership |
| railiance-platform | `e75793e3` — 1 native + 4 interim |
| net-kingdom | `3fea09df` — object-storage-sts remains native/draft |
| key-cape | `28ded56c` — rapp-qonto-keycape-client (founder-classified interim) |
## Acceptance
- [ ] `wiki/AccessRouting.md` states the interim-custodianship boundary and names
- [x] `wiki/AccessRouting.md` states the interim-custodianship boundary and names
the delegation targets
- [ ] All 24 catalog entries carry `delegation`; `warden route gaps` returns the
interim set with owner + blocker
- [ ] Routing test fails when a proxy lane omits `delegation`
- [ ] Promotion playbook gates draft→active on the ownership question
- [ ] Founder has reviewed the interim/permanent classification of the eleven
- [ ] Register delivered to the named owner repos
- [x] All catalog entries carry `delegation`; `warden route gaps` returns the
interim set with owner + blocker (27 entries; 15 active interim)
- [x] Routing test fails when a proxy lane omits `delegation`
- [x] Promotion playbook gates draft→active on the ownership question
- [x] Founder has reviewed the interim/permanent classification of the eleven
(2026-08-11); the six held lanes stay interim pending secrets-engine, not
marked permanent
- [x] Register delivered to the named owner repos (T05)
## Classification of the eleven (founder review, 2026-08-11)