ops-warden/history
tegwick baf53602ca Revert the npm field, re-measure coverage, and hold the layer divergence
Five inbox items worked, none of which changed a credential value or moved a
secret.

whynot-design-npm-publish: field reverted npm_token -> NPM_AUTH_TOKEN and the
path confirmed, on railiance-platform's attended, read-only, no-value field
enumeration (their docs/evidence/2026-09-10-npm-lane-field-resolution.json).
Exactly one field is present at the governed path. The 2026-09-09 change was
adopted from a coordination message and would have failed at the WP-0037-T03
rotation. The ungoverned second location is recorded as an explicit non-lane,
not deleted and not tidied away.

pep-stance coverage: published figures were stale by eight lanes (unknown
18->20, not_applicable 12->15) while resolved stayed at 3 — the denominator
moved, the classification did not. Caught by the test that asserts the published
block equals what report_coverage.py measures. tests/test_workload_join.py held
the same stale counts; both now measure the same populations.

rapp-qonto-keycape-client: blocker character updated — authority exists and is
unexercised by owner decision ("not yet", offer open), which is not the same as
no authority existing. Reopen triggers are events, never elapsed time.

flex-auth -> access-engine rename (WARDEN-IN-0003): access-engine added to the
policy-check lane's keywords so routing resolves under both names from today.
owner_repo deliberately not flipped — policy.py sends it as resource.system on
every /v1/check, and FLEX-DEC-2026-013 keeps runtime names as flex-auth.

layer declaration: INTENT.md says Staff, layer.yaml says staff, section 11 does
not say which governs. Neither changed; gate-house holds the ruling. Position in
docs/layer-declaration-precedence.md, wait in WARDEN-WP-0034-T06, and a comment
in layer.yaml telling the next session not to "fix" it — the divergence is the
evidence the ruling is made against.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
2026-09-21 02:16:33 +02:00
..
2026-06-17-intent-scope-assessment.md Define INTENT, refresh SCOPE, and plan NetKingdom stewardship 2026-06-17 08:20:32 +02:00
2026-06-17-intent-scope-reassessment.md WARDEN-WP-0006: NetKingdom stewardship docs and alignment 2026-06-17 08:22:45 +02:00
2026-06-17-openbao-production-verify.md chore(WP-0008): finish and archive production SSH path closeout 2026-06-18 01:28:49 +02:00
2026-06-17-post-wp0007-reassessment.md chore(WP-0008): finish and archive production SSH path closeout 2026-06-18 01:28:49 +02:00
2026-06-18-access-routing-intent-shift-assessment.md docs(WP-0010): rewire INTENT to "issue SSH, route the rest"; add access-routing plan 2026-06-18 20:07:01 +02:00
2026-06-18-post-wp0008-intent-scope-reassessment.md docs: post-WP-0008 INTENT↔SCOPE reassessment and gap snapshot 2026-06-18 01:36:23 +02:00
2026-06-23-flex-auth-policy-gate-local-smoke.md feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
2026-06-23-flex-auth-policy-gate-production-smoke.md feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
2026-06-23-flex-auth-production-pickup-suggestion.md feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
2026-06-24-intent-scope-gap-analysis.md feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
2026-06-24-ops-bridge-cert-command-pilot-coordination.md feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
2026-06-27-operator-access-assist-charter.md docs(WARDEN-WP-0014): T5 — assist-layer docs, security model, INTENT/SCOPE 2026-06-27 17:35:57 +02:00
2026-06-27-workload-security-posture-charter.md Clarify workload secret posture stewardship 2026-06-27 18:22:09 +02:00
2026-07-01-intent-scope-gap-analysis.md Add July INTENT↔SCOPE gap analysis and WARDEN-WP-0023 alignment closeout 2026-07-01 23:27:14 +02:00
2026-07-16-credential-disclosure-lessons.md WARDEN-WP-0026 T01: capabilities-safe lane verification + incident note 2026-07-16 14:26:05 +02:00
2026-08-11-delegation-surface-assessment.md Classify 5 proxy lanes interim; hold 6 pending secrets-engine 2026-08-12 01:33:29 +02:00
2026-08-19-flex-auth-caller-identity-evidence.md Retire CoulombCore references; correct the 16443 diagnosis 2026-08-19 19:31:41 +02:00
2026-08-28-security-layer-model-assent.md Assent to the NetKingdom security layer model (WARDEN-IN-0001) 2026-08-28 21:47:44 +02:00
2026-08-29-layer-model-v04-review.md Review layer model v0.4; correct an unsound audit claim it exposes 2026-08-29 02:46:50 +02:00
2026-08-29-layer-model-v06-review.md Review layer model v0.6; publish the PEP stance map §6.4 requires 2026-08-29 10:20:49 +02:00
2026-08-29-v07-scope-intent-assessment.md Align INTENT and SCOPE to layer model v0.7; assess gaps; open WARDEN-WP-0034 2026-08-29 14:50:55 +02:00
2026-09-09-layer-model-v08-review.md docs: mark the unknown cell, measure the coverage we asked to publish 2026-09-10 08:02:10 +02:00
2026-09-21-gate-house-a16-a17-response.md Revert the npm field, re-measure coverage, and hold the layer divergence 2026-09-21 02:16:33 +02:00