From d55d4dbd26717fce40b9f9de747f74d2f867e3bf Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 18 Oct 2026 02:34:54 +0200 Subject: [PATCH] workplans: persist FORGE-WP-0008 hub identifiers Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 99543@bnt-lap001 Assistant-Session: 05d24177-20b9-4e96-a91b-b73be1d6e99e --- .custodian-brief.md | 9 ++------- .../FORGE-WP-0008-secret-detection-residual-coverage.md | 7 +++++++ 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/.custodian-brief.md b/.custodian-brief.md index 4f3de41..8e0f49c 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,17 +2,12 @@ # Custodian Brief — railiance-forge **Domain:** financials -**Last synced:** 2026-10-13 17:10 UTC +**Last synced:** 2026-10-18 00:34 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams -### Enforce secret detection independently in the forge receive path -Progress: 1/3 done | workplan_id: `69458fdc-d727-5391-b88b-d03da0afe24e` - -**Open tasks:** -- ► Admit the inventory and activate a reviewed server profile `210e7935` -- ► Verify CI independence, detection response and complete coverage `e65f9093` +*(none — repo may need first-session setup)* ## Inbox Hygiene diff --git a/workplans/FORGE-WP-0008-secret-detection-residual-coverage.md b/workplans/FORGE-WP-0008-secret-detection-residual-coverage.md index 5304312..2aec41c 100644 --- a/workplans/FORGE-WP-0008-secret-detection-residual-coverage.md +++ b/workplans/FORGE-WP-0008-secret-detection-residual-coverage.md @@ -11,6 +11,7 @@ created: "2026-10-18" updated: "2026-10-18" flavor: implementation depends_on: [FORGE-WP-0006] +state_hub_workstream_id: "5334ba5c-a1a6-5579-b482-12e3e968b2b5" --- Continues FORGE-WP-0006, which closed with receive-path prevention verified on @@ -26,6 +27,7 @@ acceptance. Reuse the admitted scanner, adapter and hook profile. id: FORGE-WP-0008-T01 status: todo priority: high +state_hub_task_id: "a4af89e2-7c05-5481-8826-522f0256a024" ``` Repository 55 is the only builtin-only repository. Its four submodule URLs use @@ -41,6 +43,7 @@ Evidence: Custodian `docs/evidence/2026-10-13-netkingdom-security/forge-gitlink- id: FORGE-WP-0008-T02 status: todo priority: high +state_hub_task_id: "edeea212-f0c2-5a44-a1b7-fe7a9dc79f28" ``` Upstream import and pull-mirror content arrives via clone/fetch, not @@ -54,6 +57,7 @@ existing mirrors, with refusal or quarantine evidence. id: FORGE-WP-0008-T03 status: todo priority: medium +state_hub_task_id: "ca04df14-ad59-55ff-ae21-d9464ab76139" ``` The live route acceptance used the API with a PAT. Prove web UI file edit, @@ -66,6 +70,7 @@ content, in an owned disposable repository with verified cleanup. id: FORGE-WP-0008-T04 status: todo priority: high +state_hub_task_id: "344861de-873b-5845-837a-3df6792fb7b1" ``` Carried from FORGE-WP-0006-T03. Review who can alter workflows, required checks @@ -80,6 +85,7 @@ is already done and is not repeated here. id: FORGE-WP-0008-T05 status: todo priority: high +state_hub_task_id: "e0cdc4ac-5306-59ff-a27e-dfc30d8483b0" ``` Carried from FORGE-WP-0006-T03. Exercise private synthetic finding @@ -92,6 +98,7 @@ false-positive governance, an exact receipt and the recovery path. id: FORGE-WP-0008-T06 status: todo priority: medium +state_hub_task_id: "c9b20a8c-61cb-5cc2-beb5-f10ea4171225" ``` Carried from FORGE-WP-0006-T03. Receive hooks only see introduced history.