coulomb/qonto-assistant
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete Phase 1: policy kernel, REST service, and local smoke tooling

Browse source 
Implements QONTO-WP-0002 (policy-gated Qonto REST service with audit
logging, rate limiting, and credential handling) and the ADHOC-2026-07-21
follow-up (fixture-backed local smoke mode, repo classification metadata).
Marks QONTO-WP-0001/0002 and the ad-hoc workplan finished, and regenerates
WORK-RECORDS.md and the ADHOC workplan's state_hub_workstream_id via
fix-consistency.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-07-22 21:21:05 +02:00
parent eef408bb19
commit ca12843013
33 changed files with 2533 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

24
workplans/QONTO-WP-0002-policy-kernel-and-rest.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Phase 1 — policy kernel and read-only REST"
domain: infotech
repo: qonto-assistant
status: active
status: finished
owner: codex
topic_slug: the-custodian
created: "2026-07-21"
@ -29,7 +29,7 @@ CCR-2026-0008) — already provisioned.
```task
id: QONTO-WP-0002-T01
status: progress
status: done
priority: high
state_hub_task_id: "f9e129f3-5bd4-43e1-b7a0-281e4d3dec2a"
```
@ -47,7 +47,7 @@ policy, qonto client, api, audit).
```task
id: QONTO-WP-0002-T02
status: progress
status: done
priority: high
state_hub_task_id: "552ff651-dc66-4e65-97fe-3ec26652bbdd"
```
@ -69,7 +69,7 @@ Done when: policy tests pass in CI/local; no network required.
```task
id: QONTO-WP-0002-T03
status: progress
status: done
priority: high
state_hub_task_id: "be3aa7b6-f28c-4436-bd5d-d6940de6c2ce"
```
@ -92,7 +92,7 @@ Done when: unit tests with mocked HTTP; optional live smoke behind a flag.
```task
id: QONTO-WP-0002-T04
status: progress
status: done
priority: high
state_hub_task_id: "678b0b26-15af-4037-849f-d24d320588ac"
```
@ -114,7 +114,7 @@ mapping is explicit and shared with future MCP.
```task
id: QONTO-WP-0002-T05
status: progress
status: done
priority: medium
state_hub_task_id: "4a42dff1-1281-4cc1-ba6a-24702bce7dc9"
```
@ -131,7 +131,7 @@ Done when: tests assert secrets absent from log lines for a sample allow/deny.
```task
id: QONTO-WP-0002-T06
status: progress
status: done
priority: medium
state_hub_task_id: "7b7ca0f7-f523-473e-b3f6-fe0564f54ed5"
```
@ -147,10 +147,14 @@ pasting keys into chat.
```task
id: QONTO-WP-0002-T07
status: todo
status: done
priority: low
state_hub_task_id: "9b99ba05-99f2-4624-9044-89bf37055434"
```
Mark workplan finished when T01–T06 done; note Phase 2 seed (MCP surface for
all harnesses) in closure. Run `statehub fix-consistency`.
**Done 2026-07-21:** Phase 1 landed in `src/qonto_assistant/` with a
FastAPI-based REST service, policy YAML, Qonto client, audit layer, rate
limits, concurrency bounds, and operator runbook. Verified with
`PYTHONPATH=src ../state-hub/.venv/bin/python -m pytest` (`12 passed`) plus
`python3 -m compileall src tests`. Phase 2 seed remains the MCP surface on the
same capability core and policy engine. Run `statehub fix-consistency`.