ops-warden/WORK-RECORDS.md
tegwick 5b1a508610
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
docs: mark the unknown cell, measure the coverage we asked to publish
gate-house ruled the v0.8 assent round (GH-DEC-2026-011, net-kingdom@64394e9):
ask 1 declined, ask 2 adopted.

Ask 1's refusal is accepted without reservation and the reason is better than
the ask -- a sanctioned transitional fail_open is indistinguishable at runtime
from the stance the rule forbids, and would make the rule optional at the only
moment it costs anything.

Ask 2 gave §13.1 a Coverage column with this repo's figures as its first
entries. Since we asked for the column, we owe it accuracy:
scripts/report_coverage.py measures both populations from the artifacts the
runtime uses (reusing the workload-join build rather than re-deriving it), and
a test asserts pep-stance.yaml's published block equals what it measures.
A hand-counted number in a register that explicitly does not recompute it
decays silently, and a stale figure beside a marked cell is worse than the
blank the other four rows carry.

pep-stance.yaml marks the unknown cell inline as a declared gap -- assent, the
measured reason for not flipping, the declined ask, WARDEN-WP-0040 as route --
and a second test keeps it marked while it is fail_open, failing when it is
flipped. standard_version stays 0.7 because that is what binds; v0.8 is
proposed, so it gains standard_version_reviewed rather than pre-adopting.

Separately, gate-house corrected GH-DEC-2026-008: the claim/decision digest
comparison it originally required is unimplementable and a fail-closed
consumer obeying it would have denied permanently. We had never copied the
wording, so nothing to unwind -- but everything they have sent about this lane
was living in an inbox thread, a bad home for a correction that only matters
when someone finally wires the consume. Now wiki/ApprovalConsumption.md,
leading with "nothing is wired", carrying the corrected target and the
attribution gap that digest matching does not discharge.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013EPuTc18FjU5WFqoSEKH3C

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1276224@bnt-lap001
Assistant-Session: 426ec497-e1c4-4dd3-b417-dfce1ca1dbc3
2026-09-10 08:02:10 +02:00

16 KiB

Work Records — ops-warden

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind ID Status Lane Source
workplan WARDEN-WP-ADHOC-2026-06-27 finished workplans/ADHOC-2026-06-27.md
workplan WARDEN-WP-ADHOC-2026-06-29 finished workplans/ADHOC-2026-06-29.md
workplan WARDEN-WP-ADHOC-2026-08-11 finished workplans/ADHOC-2026-08-11.md
workplan WARDEN-WP-ADHOC-2026-08-17 finished workplans/ADHOC-2026-08-17.md
workplan WARDEN-WP-ADHOC-2026-09-08 finished workplans/ADHOC-2026-09-08.md
workplan WARDEN-WP-0016 finished workplans/WARDEN-WP-0016-ops-bridge-tunnel-cert-pilot.md
workplan WARDEN-WP-0017 finished workplans/WARDEN-WP-0017-access-front-door-discoverability.md
workplan WARDEN-WP-0018 finished workplans/WARDEN-WP-0018-whynot-design-npm-lane-activation.md
workplan WARDEN-WP-0019 finished workplans/WARDEN-WP-0019-route-to-secrets-engine.md
workplan WARDEN-WP-0020 finished workplans/WARDEN-WP-0020-ops-warden-worker.md
workplan WARDEN-WP-0021 finished workplans/WARDEN-WP-0021-enable-scheduled-worker-tick.md
workplan WARDEN-WP-0022 finished workplans/WARDEN-WP-0022-audit-trail-and-activity.md
workplan WARDEN-WP-0023 finished workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
workplan WARDEN-WP-0024 finished workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
workplan WARDEN-WP-0025 finished workplans/WARDEN-WP-0025-forgejo-admin-api-token-lane.md
workplan WARDEN-WP-0026 finished workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
workplan WARDEN-WP-0027 active workplans/WARDEN-WP-0027-credential-governance-lockdown.md
workplan WARDEN-WP-0028 finished workplans/WARDEN-WP-0028-tenant-secret-custody.md
workplan WARDEN-WP-0029 finished workplans/WARDEN-WP-0029-policy-front-door-and-founder-surface.md
workplan WARDEN-WP-0030 finished workplans/WARDEN-WP-0030-delegation-register.md
workplan WARDEN-WP-0031 finished workplans/WARDEN-WP-0031-policy-caller-identity.md
workplan WARDEN-WP-0032 finished workplans/WARDEN-WP-0032-security-zones.md
workplan WARDEN-WP-0033 finished workplans/WARDEN-WP-0033-native-lane-handoff.md
workplan WARDEN-WP-0034 active workplans/WARDEN-WP-0034-layer-model-v07-conformance.md
workplan WARDEN-WP-0035 finished workplans/WARDEN-WP-0035-policy-nexus-forgejo-source-read-route.md
workplan WARDEN-WP-0036 finished workplans/WARDEN-WP-0036-attended-login-openbao-output.md
workplan WARDEN-WP-0037 active workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md
workplan WARDEN-WP-0038 finished workplans/WARDEN-WP-0038-plan-mutation-intent.md
workplan WARDEN-WP-0039 blocked workplans/WARDEN-WP-0039-explicit-policy-refusal.md
workplan WARDEN-WP-0040 proposed workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md
task WARDEN-WP-ADHOC-2026-06-27-T01 done workplans/ADHOC-2026-06-27.md
task WARDEN-WP-ADHOC-2026-06-29-T01 done workplans/ADHOC-2026-06-29.md
task WARDEN-WP-ADHOC-2026-08-11-T01 done workplans/ADHOC-2026-08-11.md
task WARDEN-WP-ADHOC-2026-08-11-T02 done workplans/ADHOC-2026-08-11.md
task WARDEN-WP-ADHOC-2026-08-11-T03 done workplans/ADHOC-2026-08-11.md
task WARDEN-WP-ADHOC-2026-08-17-T01 done workplans/ADHOC-2026-08-17.md
task WARDEN-WP-ADHOC-2026-08-17-T02 done workplans/ADHOC-2026-08-17.md
task WARDEN-WP-ADHOC-2026-08-17-T03 done workplans/ADHOC-2026-08-17.md
task WARDEN-WP-ADHOC-2026-08-17-T04 done workplans/ADHOC-2026-08-17.md
task WARDEN-WP-ADHOC-2026-09-08-T01 done workplans/ADHOC-2026-09-08.md
task WARDEN-WP-ADHOC-2026-09-08-T02 done workplans/ADHOC-2026-09-08.md
task WARDEN-WP-ADHOC-2026-09-08-T03 done workplans/ADHOC-2026-09-08.md
task WARDEN-WP-ADHOC-2026-09-08-T04 done workplans/ADHOC-2026-09-08.md
task WARDEN-WP-ADHOC-2026-09-08-T05 done workplans/ADHOC-2026-09-08.md
task WARDEN-WP-ADHOC-2026-09-08-T06 done workplans/ADHOC-2026-09-08.md
task WARDEN-WP-0016-T01 done workplans/WARDEN-WP-0016-ops-bridge-tunnel-cert-pilot.md
task WARDEN-WP-0016-T02 done workplans/WARDEN-WP-0016-ops-bridge-tunnel-cert-pilot.md
task WARDEN-WP-0016-T03 done workplans/WARDEN-WP-0016-ops-bridge-tunnel-cert-pilot.md
task WARDEN-WP-0016-T04 done workplans/WARDEN-WP-0016-ops-bridge-tunnel-cert-pilot.md
task WARDEN-WP-0017-T01 done workplans/WARDEN-WP-0017-access-front-door-discoverability.md
task WARDEN-WP-0017-T02 done workplans/WARDEN-WP-0017-access-front-door-discoverability.md
task WARDEN-WP-0017-T03 done workplans/WARDEN-WP-0017-access-front-door-discoverability.md
task WARDEN-WP-0018-T01 done workplans/WARDEN-WP-0018-whynot-design-npm-lane-activation.md
task WARDEN-WP-0018-T02 done workplans/WARDEN-WP-0018-whynot-design-npm-lane-activation.md
task WARDEN-WP-0018-T03 done workplans/WARDEN-WP-0018-whynot-design-npm-lane-activation.md
task WARDEN-WP-0019-T01 done workplans/WARDEN-WP-0019-route-to-secrets-engine.md
task WARDEN-WP-0019-T02 done workplans/WARDEN-WP-0019-route-to-secrets-engine.md
task WARDEN-WP-0020-T01 done workplans/WARDEN-WP-0020-ops-warden-worker.md
task WARDEN-WP-0020-T02 done workplans/WARDEN-WP-0020-ops-warden-worker.md
task WARDEN-WP-0020-T03 done workplans/WARDEN-WP-0020-ops-warden-worker.md
task WARDEN-WP-0020-T04 done workplans/WARDEN-WP-0020-ops-warden-worker.md
task WARDEN-WP-0020-T05 done workplans/WARDEN-WP-0020-ops-warden-worker.md
task WARDEN-WP-0021-T01 done workplans/WARDEN-WP-0021-enable-scheduled-worker-tick.md
task WARDEN-WP-0021-T02 done workplans/WARDEN-WP-0021-enable-scheduled-worker-tick.md
task WARDEN-WP-0021-T03 done workplans/WARDEN-WP-0021-enable-scheduled-worker-tick.md
task WARDEN-WP-0021-T04 done workplans/WARDEN-WP-0021-enable-scheduled-worker-tick.md
task WARDEN-WP-0021-T05 done workplans/WARDEN-WP-0021-enable-scheduled-worker-tick.md
task WARDEN-WP-0022-T01 done workplans/WARDEN-WP-0022-audit-trail-and-activity.md
task WARDEN-WP-0022-T02 done workplans/WARDEN-WP-0022-audit-trail-and-activity.md
task WARDEN-WP-0022-T03 done workplans/WARDEN-WP-0022-audit-trail-and-activity.md
task WARDEN-WP-0022-T04 done workplans/WARDEN-WP-0022-audit-trail-and-activity.md
task WARDEN-WP-0023-T01 done workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
task WARDEN-WP-0023-T02 done workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
task WARDEN-WP-0023-T03 done workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
task WARDEN-WP-0023-T04 done workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
task WARDEN-WP-0023-T05 done workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
task WARDEN-WP-0023-T06 done workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
task WARDEN-WP-0023-T07 done workplans/WARDEN-WP-0023-intent-scope-alignment-closeout.md
task WARDEN-WP-0024-T01 done workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
task WARDEN-WP-0024-T02 done workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
task WARDEN-WP-0024-T03 done workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
task WARDEN-WP-0024-T04 done workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
task WARDEN-WP-0024-T05 done workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
task WARDEN-WP-0024-T06 done workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
task WARDEN-WP-0024-T07 done workplans/WARDEN-WP-0024-experiential-memory-and-agent-sessions.md
task WARDEN-WP-0025-T01 done workplans/WARDEN-WP-0025-forgejo-admin-api-token-lane.md
task WARDEN-WP-0025-T02 done workplans/WARDEN-WP-0025-forgejo-admin-api-token-lane.md
task WARDEN-WP-0025-T03 done workplans/WARDEN-WP-0025-forgejo-admin-api-token-lane.md
task WARDEN-WP-0025-T04 done workplans/WARDEN-WP-0025-forgejo-admin-api-token-lane.md
task WARDEN-WP-0025-T05 done workplans/WARDEN-WP-0025-forgejo-admin-api-token-lane.md
task WARDEN-WP-0026-T01 done workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
task WARDEN-WP-0026-T02 done workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
task WARDEN-WP-0026-T03 done workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
task WARDEN-WP-0026-T04 done workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
task WARDEN-WP-0026-T05 done workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
task WARDEN-WP-0026-T06 done workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
task WARDEN-WP-0026-T07 done workplans/WARDEN-WP-0026-credential-disclosure-hygiene.md
task WARDEN-WP-0027-T01 cancel workplans/WARDEN-WP-0027-credential-governance-lockdown.md
task WARDEN-WP-0027-T02 progress workplans/WARDEN-WP-0027-credential-governance-lockdown.md
task WARDEN-WP-0027-T03 cancel workplans/WARDEN-WP-0027-credential-governance-lockdown.md
task WARDEN-WP-0028-T01 done workplans/WARDEN-WP-0028-tenant-secret-custody.md
task WARDEN-WP-0028-T02 done workplans/WARDEN-WP-0028-tenant-secret-custody.md
task WARDEN-WP-0028-T03 done workplans/WARDEN-WP-0028-tenant-secret-custody.md
task WARDEN-WP-0028-T04 done workplans/WARDEN-WP-0028-tenant-secret-custody.md
task WARDEN-WP-0028-T05 done workplans/WARDEN-WP-0028-tenant-secret-custody.md
task WARDEN-WP-0028-T06 done workplans/WARDEN-WP-0028-tenant-secret-custody.md
task WARDEN-WP-0028-T07 done workplans/WARDEN-WP-0028-tenant-secret-custody.md
task WARDEN-WP-0029-T01 done workplans/WARDEN-WP-0029-policy-front-door-and-founder-surface.md
task WARDEN-WP-0029-T02 done workplans/WARDEN-WP-0029-policy-front-door-and-founder-surface.md
task WARDEN-WP-0029-T03 done workplans/WARDEN-WP-0029-policy-front-door-and-founder-surface.md
task WARDEN-WP-0029-T04 done workplans/WARDEN-WP-0029-policy-front-door-and-founder-surface.md
task WARDEN-WP-0029-T05 done workplans/WARDEN-WP-0029-policy-front-door-and-founder-surface.md
task WARDEN-WP-0030-T01 done workplans/WARDEN-WP-0030-delegation-register.md
task WARDEN-WP-0030-T02 done workplans/WARDEN-WP-0030-delegation-register.md
task WARDEN-WP-0030-T03 done workplans/WARDEN-WP-0030-delegation-register.md
task WARDEN-WP-0030-T04 done workplans/WARDEN-WP-0030-delegation-register.md
task WARDEN-WP-0030-T05 done workplans/WARDEN-WP-0030-delegation-register.md
task WARDEN-WP-0031-T01 done workplans/WARDEN-WP-0031-policy-caller-identity.md
task WARDEN-WP-0031-T02 done workplans/WARDEN-WP-0031-policy-caller-identity.md
task WARDEN-WP-0031-T03 done workplans/WARDEN-WP-0031-policy-caller-identity.md
task WARDEN-WP-0031-T04 done workplans/WARDEN-WP-0031-policy-caller-identity.md
task WARDEN-WP-0031-T05 cancel workplans/WARDEN-WP-0031-policy-caller-identity.md
task WARDEN-WP-0032-T01 done workplans/WARDEN-WP-0032-security-zones.md
task WARDEN-WP-0032-T02 done workplans/WARDEN-WP-0032-security-zones.md
task WARDEN-WP-0032-T03 done workplans/WARDEN-WP-0032-security-zones.md
task WARDEN-WP-0032-T04 done workplans/WARDEN-WP-0032-security-zones.md
task WARDEN-WP-0032-T05 done workplans/WARDEN-WP-0032-security-zones.md
task WARDEN-WP-0032-T06 done workplans/WARDEN-WP-0032-security-zones.md
task WARDEN-WP-0032-T07 done workplans/WARDEN-WP-0032-security-zones.md
task WARDEN-WP-0033-T01 done workplans/WARDEN-WP-0033-native-lane-handoff.md
task WARDEN-WP-0033-T02 done workplans/WARDEN-WP-0033-native-lane-handoff.md
task WARDEN-WP-0033-T03 done workplans/WARDEN-WP-0033-native-lane-handoff.md
task WARDEN-WP-0033-T04 done workplans/WARDEN-WP-0033-native-lane-handoff.md
task WARDEN-WP-0033-T05 done workplans/WARDEN-WP-0033-native-lane-handoff.md
task WARDEN-WP-0033-T06 done workplans/WARDEN-WP-0033-native-lane-handoff.md
task WARDEN-WP-0034-T01 done workplans/WARDEN-WP-0034-layer-model-v07-conformance.md
task WARDEN-WP-0034-T02 done workplans/WARDEN-WP-0034-layer-model-v07-conformance.md
task WARDEN-WP-0034-T03 done workplans/WARDEN-WP-0034-layer-model-v07-conformance.md
task WARDEN-WP-0034-T04 done workplans/WARDEN-WP-0034-layer-model-v07-conformance.md
task WARDEN-WP-0034-T05 wait workplans/WARDEN-WP-0034-layer-model-v07-conformance.md
task WARDEN-WP-0035-T01 done workplans/WARDEN-WP-0035-policy-nexus-forgejo-source-read-route.md
task WARDEN-WP-0035-T02 done workplans/WARDEN-WP-0035-policy-nexus-forgejo-source-read-route.md
task WARDEN-WP-0036-T01 done workplans/WARDEN-WP-0036-attended-login-openbao-output.md
task WARDEN-WP-0036-T02 done workplans/WARDEN-WP-0036-attended-login-openbao-output.md
task WARDEN-WP-0037-T01 done workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md
task WARDEN-WP-0037-T02 done workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md
task WARDEN-WP-0037-T03 wait workplans/WARDEN-WP-0037-whynot-design-forgejo-npm-lane.md
task WARDEN-WP-0039-T01 done workplans/WARDEN-WP-0039-explicit-policy-refusal.md
task WARDEN-WP-0039-T02 done workplans/WARDEN-WP-0039-explicit-policy-refusal.md
task WARDEN-WP-0039-T03 wait workplans/WARDEN-WP-0039-explicit-policy-refusal.md
task WARDEN-WP-0040-T01 todo workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md
task WARDEN-WP-0040-T02 todo workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md
task WARDEN-WP-0040-T03 wait workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md
task WARDEN-WP-0040-T04 todo workplans/WARDEN-WP-0040-unknown-zone-fail-closed-adoption.md
intake WARDEN-IN-0001 closed intakes/intakes.md
intake WARDEN-IN-0002 open intakes/intakes.md