coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

Park the warden-sign AppRole with explicit un-park triggers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Founder decision 2026-08-11: neither withdraw nor proceed. The broker covers
the workstation, but unattended signing on a remote tunnel host is unresolved,
and there the AppRole is narrower than placing the broker's issuer token.

Recorded where each trigger will be hit: WP-0027 break-glass task (trust-root
design), and the ops-bridge cutover playbook (token source must be resolved
before going live). secrets-engine told to stop holding apply readiness.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-08-11 14:32:04 +02:00
parent 9d42dd5abd
commit cd074caaaa
5 changed files with 74 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
workplans/WARDEN-WP-0030-delegation-register.md
View file

@ -11,6 +11,7 @@ planning_priority: high
planning_order: 30
created: "2026-08-11"
updated: "2026-08-11"
state_hub_workstream_id: "29f3fcb3-e3c5-4f9d-bdfd-f76254754e21"
---
# WARDEN-WP-0030 — Delegation register
@ -88,6 +89,7 @@ to *"who should own this front door, and what is missing?"*
id: WARDEN-WP-0030-T01
status: todo
priority: high
state_hub_task_id: "3d76f6c2-5007-4ad5-8d6f-360f9303c929"
```
Add a doctrine section to `wiki/AccessRouting.md` stating the boundary: the only
@ -103,6 +105,7 @@ targets. Cross-link INTENT.md §9.
id: WARDEN-WP-0030-T02
status: todo
priority: high
state_hub_task_id: "8013020b-d0a5-4e89-8e0b-bc418a761c84"
```
Extend the catalog entry schema with:
@ -126,6 +129,7 @@ flagged in the workplan for founder review rather than asserted as settled.
id: WARDEN-WP-0030-T03
status: todo
priority: medium
state_hub_task_id: "e7755708-e1bf-4d42-999c-4a60330cf154"
```
`warden route gaps [--json]` lists interim lanes with intended owner, blocker, and
@ -140,6 +144,7 @@ entries in the existing drift/stale review cadence.
id: WARDEN-WP-0030-T04
status: todo
priority: medium
state_hub_task_id: "ddc0268b-1279-4875-b223-0627c97d657a"
```
Update `wiki/playbooks/catalog-lane-promotion.md`: draft→active requires a
@ -153,6 +158,7 @@ checklist.
id: WARDEN-WP-0030-T05
status: todo
priority: medium
state_hub_task_id: "d8796e25-e896-463d-9476-f002e38b6897"
```
Once T02 is reviewed, send the interim register to secrets-engine, tenant-engine,