ops-warden/workplans
tegwick b76ee0edae Close WARDEN-WP-0039 with fetch-pin receipts; activate audit-core-senders pointer
- WP-0039-T03: receipts against flex-auth-ops-warden-fetch with ops-warden's
  own caller token. Positive forgejo-admin-api-token allow; negatives for
  unknown need, wrong owner (403), wrong tenant and anonymous caller (401).
  Policy decisions only, no credential read. WP-0039 finished.
- audit-core-senders: active as a pointer on ops-mason's custody check
  (message 5a516911). Custody text corrected to OpenBao KV v2 read via ESO;
  delegation verified source-read.
- WP-0044: oidc-browser-relying-party 1.1 is plannable; the case-ref is taken
  at run time because it covers the case status.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 427672@bnt-lap001
Assistant-Session: a0a2367e-4697-440c-a4e5-9713c009f6d8
2026-10-10 15:26:38 +02:00
..
archived repo.work.assign_missing_identifiers 2026-09-01 00:51:59 +02:00
ADHOC-2026-06-27.md repo.work.assign_missing_identifiers 2026-09-01 00:51:59 +02:00
ADHOC-2026-06-29.md repo.work.assign_missing_identifiers 2026-09-01 00:51:59 +02:00
ADHOC-2026-08-11.md repo.work.assign_missing_identifiers 2026-09-01 00:51:59 +02:00
ADHOC-2026-08-17.md repo.work.assign_missing_identifiers 2026-09-01 00:51:59 +02:00
ADHOC-2026-09-08.md chore: record hub ids for 2026-09-08 workplans 2026-09-08 14:57:42 +02:00
ADHOC-2026-10-03.md repo.work.assign_missing_identifiers 2026-10-03 17:51:15 +02:00
WARDEN-WP-0016-ops-bridge-tunnel-cert-pilot.md feat(WARDEN-WP-0016): ops-bridge cert_command readiness gate + handoff 2026-06-27 19:50:28 +02:00
WARDEN-WP-0017-access-front-door-discoverability.md feat(WARDEN-WP-0018): activate whynot-design npm publish lane + resolvable flag 2026-06-29 00:32:00 +02:00
WARDEN-WP-0018-whynot-design-npm-lane-activation.md chore(WARDEN-WP-0018): stamp state_hub task ids from consistency sync 2026-06-29 00:36:35 +02:00
WARDEN-WP-0019-route-to-secrets-engine.md chore(WARDEN-WP-0019): stamp state_hub ids from consistency sync 2026-06-29 17:43:44 +02:00
WARDEN-WP-0020-ops-warden-worker.md feat(WARDEN-WP-0020): T4 scheduling tick + T5 SCOPE — worker complete 2026-06-30 00:41:04 +02:00
WARDEN-WP-0021-enable-scheduled-worker-tick.md feat(WARDEN-WP-0021): T3-T5 — visibility, approve loop, runbook (scheduled worker complete) 2026-06-30 15:24:10 +02:00
WARDEN-WP-0022-audit-trail-and-activity.md Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
WARDEN-WP-0023-intent-scope-alignment-closeout.md Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
WARDEN-WP-0024-experiential-memory-and-agent-sessions.md Implement WARDEN-WP-0024 experiential memory and agent sessions. 2026-07-02 23:40:45 +02:00
WARDEN-WP-0025-forgejo-admin-api-token-lane.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:16:12 +02:00
WARDEN-WP-0026-credential-disclosure-hygiene.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:16:12 +02:00
WARDEN-WP-0027-credential-governance-lockdown.md CUST-WP-0075-T03: route human gates to hub decisions 2026-10-03 03:13:15 +02:00
WARDEN-WP-0028-tenant-secret-custody.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:16:12 +02:00
WARDEN-WP-0029-policy-front-door-and-founder-surface.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:16:12 +02:00
WARDEN-WP-0030-delegation-register.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:16:12 +02:00
WARDEN-WP-0031-policy-caller-identity.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:16:12 +02:00
WARDEN-WP-0032-security-zones.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:16:12 +02:00
WARDEN-WP-0033-native-lane-handoff.md WARDEN-WP-0033 finished — key-cape accepted the issuance question five days ago 2026-08-28 22:00:09 +02:00
WARDEN-WP-0034-layer-model-v07-conformance.md Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, gate root R2 credential provisioning) 2026-09-28 23:38:13 +02:00
WARDEN-WP-0035-policy-nexus-forgejo-source-read-route.md repo.work.assign_missing_identifiers 2026-09-01 00:51:59 +02:00
WARDEN-WP-0036-attended-login-openbao-output.md Fix attended login result auditing and reconcile blocked workplans 2026-09-28 09:44:49 +02:00
WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md WARDEN-WP-0037-T03: encode the founder hold as blocking_reason, depends_on SECRETS-WP-0006-T06 and decision D3 (CUST-WP-0075) 2026-10-03 03:45:54 +02:00
WARDEN-WP-0038-plan-mutation-intent.md feat: refuse to answer a write with a read (WARDEN-WP-0038) 2026-09-10 08:02:10 +02:00
WARDEN-WP-0039-explicit-policy-refusal.md Close WARDEN-WP-0039 with fetch-pin receipts; activate audit-core-senders pointer 2026-10-10 15:26:38 +02:00
WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md WARDEN-WP-0040-T02: compile activity-core's backup-daily declaration 2026-10-09 00:13:47 +02:00
WARDEN-WP-0041-catalog-lane-scaffolding.md Verify offline scaffolds and preserve Forge qualifier receiving 2026-10-04 02:32:36 +02:00
WARDEN-WP-0042-openbao-structure-survey-route.md repo.work.assign_missing_identifiers 2026-10-05 13:22:49 +02:00
WARDEN-WP-0043-platform-supplier-credentials.md WARDEN-WP-0043-T03: IONOS supplier values provisioned; WP-0043 finished 2026-10-09 19:45:55 +02:00
WARDEN-WP-0044-security-case-follow-through.md Close WARDEN-WP-0039 with fetch-pin receipts; activate audit-core-senders pointer 2026-10-10 15:26:38 +02:00