coulomb/railiance-forge
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

workplans: persist FORGE-WP-0008 hub identifiers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 99543@bnt-lap001
Assistant-Session: 05d24177-20b9-4e96-a91b-b73be1d6e99e
This commit is contained in:
tegwick 2026-10-18 02:34:54 +02:00
parent 5f05cf12ff
commit d55d4dbd26
2 changed files with 9 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

9
.custodian-brief.md
View file

@ -2,17 +2,12 @@
# Custodian Brief — railiance-forge
**Domain:** financials
**Last synced:** 2026-10-13 17:10 UTC
**Last synced:** 2026-10-18 00:34 UTC
**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
## Active Workstreams
### Enforce secret detection independently in the forge receive path
Progress: 1/3 done | workplan_id: `69458fdc-d727-5391-b88b-d03da0afe24e`
**Open tasks:**
- ► Admit the inventory and activate a reviewed server profile `210e7935`
- ► Verify CI independence, detection response and complete coverage `e65f9093`
*(none — repo may need first-session setup)*
## Inbox Hygiene

7
workplans/FORGE-WP-0008-secret-detection-residual-coverage.md
View file

@ -11,6 +11,7 @@ created: "2026-10-18"
updated: "2026-10-18"
flavor: implementation
depends_on: [FORGE-WP-0006]
state_hub_workstream_id: "5334ba5c-a1a6-5579-b482-12e3e968b2b5"
---
Continues FORGE-WP-0006, which closed with receive-path prevention verified on
@ -26,6 +27,7 @@ acceptance. Reuse the admitted scanner, adapter and hook profile.
id: FORGE-WP-0008-T01
status: todo
priority: high
state_hub_task_id: "a4af89e2-7c05-5481-8826-522f0256a024"
```
Repository 55 is the only builtin-only repository. Its four submodule URLs use
@ -41,6 +43,7 @@ Evidence: Custodian `docs/evidence/2026-10-13-netkingdom-security/forge-gitlink-
id: FORGE-WP-0008-T02
status: todo
priority: high
state_hub_task_id: "edeea212-f0c2-5a44-a1b7-fe7a9dc79f28"
```
Upstream import and pull-mirror content arrives via clone/fetch, not
@ -54,6 +57,7 @@ existing mirrors, with refusal or quarantine evidence.
id: FORGE-WP-0008-T03
status: todo
priority: medium
state_hub_task_id: "ca04df14-ad59-55ff-ae21-d9464ab76139"
```
The live route acceptance used the API with a PAT. Prove web UI file edit,
@ -66,6 +70,7 @@ content, in an owned disposable repository with verified cleanup.
id: FORGE-WP-0008-T04
status: todo
priority: high
state_hub_task_id: "344861de-873b-5845-837a-3df6792fb7b1"
```
Carried from FORGE-WP-0006-T03. Review who can alter workflows, required checks
@ -80,6 +85,7 @@ is already done and is not repeated here.
id: FORGE-WP-0008-T05
status: todo
priority: high
state_hub_task_id: "e0cdc4ac-5306-59ff-a27e-dfc30d8483b0"
```
Carried from FORGE-WP-0006-T03. Exercise private synthetic finding
@ -92,6 +98,7 @@ false-positive governance, an exact receipt and the recovery path.
id: FORGE-WP-0008-T06
status: todo
priority: medium
state_hub_task_id: "c9b20a8c-61cb-5cc2-beb5-f10ea4171225"
```
Carried from FORGE-WP-0006-T03. Receive hooks only see introduced history.