diff --git a/workplans/RCLK-WP-0001-foundation.md b/workplans/RCLK-WP-0001-foundation.md index 2a26e47..8ca6d5d 100644 --- a/workplans/RCLK-WP-0001-foundation.md +++ b/workplans/RCLK-WP-0001-foundation.md @@ -9,6 +9,7 @@ owner: codex topic_slug: custodian created: "2026-09-14" updated: "2026-09-14" +state_hub_workstream_id: "b0f3b971-5520-5d76-a4c9-85b5f5685b7d" --- Seed requested by the operator. Runtime and cross-owner adoption are deliberately future work in RCLK-WP-0002–0005. @@ -19,6 +20,7 @@ Seed requested by the operator. Runtime and cross-owner adoption are deliberatel id: RCLK-WP-0001-T01 status: done priority: high +state_hub_task_id: "431d9291-a5ee-552e-bbaa-54e0a53b33a9" ``` Write INTENT, scope, draft sample/clock specification, threat model, behavioral acceptance matrix and ecosystem boundary. Validate document links and workplan shape before registration. @@ -29,6 +31,7 @@ Write INTENT, scope, draft sample/clock specification, threat model, behavioral id: RCLK-WP-0001-T02 status: done priority: high +state_hub_task_id: "3fc0be26-22a4-5be7-9dcd-589f25a7f9f0" ``` Create live 0002–0005 workplans with acceptance gates and dependencies. No unfinished implementation is hidden in a finished foundation plan. @@ -39,6 +42,7 @@ Create live 0002–0005 workplans with acceptance gates and dependencies. No unf id: RCLK-WP-0001-T03 status: progress priority: high +state_hub_task_id: "e94fdaa0-e386-572e-91e1-6d2522eebe2b" ``` Register tooling/infotech repository and workstation path after baseline commit; synchronize deterministic IDs and exact pushed commit on primary/railiance01. Record repo identity and receipt. Send owner handoffs and prefix reservation request; pending assent remains in 0002. diff --git a/workplans/RCLK-WP-0002-contract-review.md b/workplans/RCLK-WP-0002-contract-review.md index acedc11..2e23484 100644 --- a/workplans/RCLK-WP-0002-contract-review.md +++ b/workplans/RCLK-WP-0002-contract-review.md @@ -11,6 +11,7 @@ created: "2026-09-14" updated: "2026-09-14" depends_on_workplans: - RCLK-WP-0001 +state_hub_workstream_id: "8a320731-32a6-5d33-9517-2242a05c0d30" --- Ready to perform review of the completed draft, not ready for production security adoption. Resolve every cross-owner decision before accepting implementation as normative. @@ -21,6 +22,7 @@ Ready to perform review of the completed draft, not ready for production securit id: RCLK-WP-0002-T01 status: todo priority: high +state_hub_task_id: "437734bd-8930-56d5-9eb3-2835cb19db8b" ``` Obtain Railiance architecture and NetKingdom/gate-house review. Resolve authority host operation, Forgejo evidence role, source/runtime packaging and time-provider layer/PEP classification. Publish adopted role declaration only after review. Confirm RCLK-WP prefix ownership. @@ -31,6 +33,7 @@ Obtain Railiance architecture and NetKingdom/gate-house review. Resolve authorit id: RCLK-WP-0002-T02 status: todo priority: high +state_hub_task_id: "5f7dd460-06d7-59ef-9d37-102ca9a22f6c" ``` Choose established signing profile, canonical encoding and wire schema; trust bootstrap, key distribution/rotation/revocation, replay/nonce scope, authority epoch and rollback recovery. Pin upstream UTC/leap convention and defend delayed authentic samples. Satisfy C02–C05/C09/C14. @@ -41,6 +44,7 @@ Choose established signing profile, canonical encoding and wire schema; trust bo id: RCLK-WP-0002-T03 status: todo priority: high +state_hub_task_id: "8038f9ee-8585-57e3-a769-701e16ff7e8b" ``` Review interval arithmetic with explicit timer/upstream assumptions, drift/age policies and unsupported-platform behavior. Define Windows/Linux/WSL suspend/reboot detection and telemetry. No guessed ppm or offline lifetime as proven policy. Satisfy C01/C06/C08/C13/C15. @@ -51,6 +55,7 @@ Review interval arithmetic with explicit timer/upstream assumptions, drift/age p id: RCLK-WP-0002-T04 status: todo priority: high +state_hub_task_id: "53d248c0-b73d-5ee7-a3a8-360bd1b1042d" ``` Agree with flex-auth, approval-engine, secrets-engine and audit-core on clock injection/server-side execution, validity boundaries, CAS/check-to-use semantics and event attribution. Preserve current refusal until reviewed replacement. Pin accepted contract versions and update acceptance matrix C07/C10–C12/C16. Record disagreements as decisions/live work. diff --git a/workplans/RCLK-WP-0003-reference-implementation.md b/workplans/RCLK-WP-0003-reference-implementation.md index 38b3747..4e21a46 100644 --- a/workplans/RCLK-WP-0003-reference-implementation.md +++ b/workplans/RCLK-WP-0003-reference-implementation.md @@ -11,6 +11,7 @@ created: "2026-09-14" updated: "2026-09-14" depends_on_workplans: - RCLK-WP-0002 +state_hub_workstream_id: "904e08b5-978f-5bfc-b543-ca5347a56ac5" --- Implement only the reviewed contract. Runtime language selection, API schema and dependency policy follow RCLK-WP-0002; no live secrets needed for fake-clock development. @@ -21,6 +22,7 @@ Implement only the reviewed contract. Runtime language selection, API schema and id: RCLK-WP-0003-T01 status: wait priority: high +state_hub_task_id: "0d7841ac-b652-54d5-8cb0-da430bf9ff9d" ``` Depends on 0002 adopted sample/trust/UTC contract. Implement bounded sample exchange, nonce binding, health/error state and epoch handling with disposable signing keys. Verify C02–C05/C13–C15. @@ -31,6 +33,7 @@ Depends on 0002 adopted sample/trust/UTC contract. Implement bounded sample exch id: RCLK-WP-0003-T02 status: wait priority: high +state_hub_task_id: "b14d9306-eef8-5d78-8b3d-0c514cf10666" ``` Depends on adopted interval/platform contract. Provide explicit quality states, monotonic mapping, sample-age policy, restart/suspend invalidation and immutable event attribution. Verify C01/C06–C09/C11/C12. @@ -41,6 +44,7 @@ Depends on adopted interval/platform contract. Provide explicit quality states, id: RCLK-WP-0003-T03 status: wait priority: high +state_hub_task_id: "7aa67eff-af5b-5a99-97bf-1bdee81acde1" ``` Run deterministic boundary/property tests plus adversarial delay/replay and real platform lifecycle probes. Demonstrate +/− local clock skew with no OS changes. Preserve consumer approval/CAS failures with fixtures; publish dependency/SBOM and reproducible build evidence. No native production claim from synthetic fixtures. diff --git a/workplans/RCLK-WP-0004-deployment-adoption.md b/workplans/RCLK-WP-0004-deployment-adoption.md index f1c032a..743fc0e 100644 --- a/workplans/RCLK-WP-0004-deployment-adoption.md +++ b/workplans/RCLK-WP-0004-deployment-adoption.md @@ -12,6 +12,7 @@ updated: "2026-09-14" depends_on_workplans: - RCLK-WP-0003 - RCLK-WP-0005 +state_hub_workstream_id: "558f178b-1b2c-58e1-b45b-2a8a7f773790" --- Native operation is a separate production-admission decision. This plan also owns explicit later-scale scope so foundation has no untracked residuals. @@ -22,6 +23,7 @@ Native operation is a separate production-admission decision. This plan also own id: RCLK-WP-0004-T01 status: wait priority: high +state_hub_task_id: "a4040b78-ba86-54aa-b6b5-43fdefb3ddda" ``` Consume RCLK-WP-0005 infrastructure placement, custody, health and exact-source deployment receipts. Verify they satisfy the adopted 0002/0003 contract before consumer pilot. Infrastructure implementation belongs to 0005 and its owner records, not a duplicate apply here. @@ -32,6 +34,7 @@ Consume RCLK-WP-0005 infrastructure placement, custody, health and exact-source id: RCLK-WP-0004-T02 status: wait priority: high +state_hub_task_id: "28b4c1e0-833c-583d-9cca-fd794d58a0ac" ``` Exercise skewed corporate workstation without OS changes, bootstrap limitations, source outage, restart/rollback, delayed samples and suspend/resume. Measure interval coverage/width, latency and holdover; agree versioned thresholds. Verify cleanup, rollback and authority-key revocation. Retain audit evidence, not secrets. @@ -42,6 +45,7 @@ Exercise skewed corporate workstation without OS changes, bootstrap limitations, id: RCLK-WP-0004-T03 status: wait priority: high +state_hub_task_id: "2d7b4769-0196-5108-83a4-4b481f20d923" ``` Choose server-side native execution where feasible. With consumer-owner approval, test correct use and wrong-caller/owner/tenant/signature/expiry negatives, uncertain boundaries and concurrent consume. Update the consumer contract before replacing its clock. IR-WP-0004/SECRETS-WP-0010 remain independently open until their own return gates pass. @@ -52,6 +56,7 @@ Choose server-side native execution where feasible. With consumer-owner approval id: RCLK-WP-0004-T04 status: wait priority: high +state_hub_task_id: "dc91e30a-412d-5406-8921-25ce4773c785" ``` Review availability/SLO, independent backup authorities, long offline holdover, additional languages and optional authenticated NTP/NTS infrastructure offering. Keep single-host limitations explicit. Any actionable work not delivered becomes live successor records before this plan finishes. diff --git a/workplans/RCLK-WP-0005-infrastructure-as-code.md b/workplans/RCLK-WP-0005-infrastructure-as-code.md index 47ed059..71b5f23 100644 --- a/workplans/RCLK-WP-0005-infrastructure-as-code.md +++ b/workplans/RCLK-WP-0005-infrastructure-as-code.md @@ -13,6 +13,7 @@ related_workplans: - RCLK-WP-0002 - RCLK-WP-0003 - RCLK-WP-0004 +state_hub_workstream_id: "5af117db-3721-509a-a3a6-36ae6bab7af3" --- Operator-requested infrastructure plan. Read docs/infrastructure.md. This plan @@ -27,6 +28,7 @@ Production applies require concrete owner admission, not just this plan's existe id: RCLK-WP-0005-T01 status: todo priority: high +state_hub_task_id: "883743c4-d368-5f94-878b-0e122eab39ee" ``` Inspect railiance01 time sources/daemon, synchronization health, virtualization, @@ -45,6 +47,7 @@ explicit adoption of existing settings or a bounded source diff; no second daemo id: RCLK-WP-0005-T02 status: wait priority: high +state_hub_task_id: "f3eea5a7-e745-57a2-9d76-b78eeba0bf06" ``` Depends on T01 and RCLK-WP-0002's UTC/leap/quality contract. In the S1 owner, @@ -66,6 +69,7 @@ alone does not prove bounded UTC accuracy. id: RCLK-WP-0005-T03 status: wait priority: high +state_hub_task_id: "bc07711b-96d1-5d72-aee1-21d39942564c" ``` Depends on adopted RCLK-WP-0002 trust contract and RCLK-WP-0003 artifact. Use @@ -92,6 +96,7 @@ usable Railiance time before the first sample with no independent bootstrap path id: RCLK-WP-0005-T04 status: wait priority: high +state_hub_task_id: "584440e4-49ce-57f4-b6f1-953c0feec710" ``` Coordinate with railiance-bootstrap after T01 establishes owners. Add ordering: @@ -112,6 +117,7 @@ state owners. No unsupported claim that corporate workstations can be converged. id: RCLK-WP-0005-T05 status: wait priority: high +state_hub_task_id: "1b9fa2cb-77c5-5519-a4d3-184cb8597f86" ``` Depends on T02/T03 readiness and specific live owner authorization. Apply the @@ -133,6 +139,7 @@ restoring old epochs/trust. No unnoticed unrelated resource or credential change id: RCLK-WP-0005-T06 status: wait priority: high +state_hub_task_id: "c2edb898-7446-5e82-8d2a-9f3f45f41b00" ``` Deliver alert ownership, quality/error budgets, backup/recovery and key-rotation