Resolve repository owner requests

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018

workplans/ADHOC-2026-08-22.md

@@ -0,0 +1,66 @@
+---
+id: ADHOC-2026-08-22
+type: workplan
+title: "Attend repository owner requests"
+domain: financials
+repo: railiance-infra
+status: finished
+owner: codex
+topic_slug: repository-owner-requests
+created: "2026-08-22"
+updated: "2026-08-22"
+---
+
+# Attend repository owner requests
+
+## Review the RAILIANCE-WP-0024 host recovery contract
+
+```task
+id: ADHOC-2026-08-22-T01
+status: done
+priority: high
+```
+
+Review the final hash-bound railiance-infra owner assertions, run the named
+read-only checks, and submit the procedure-only decision without authorizing a
+live reboot window.
+
+Result: approved contract digest
+`f86d418f951f829f075de04dd825c6e2e185e577019ee23d6da1fa9040302d62`.
+Focused unit tests and node-reboot preflight passed read-only; receipt message
+`9bbf986c-7385-42de-964f-9040eebdfee4` records that no secret values were
+observed. No live window or reboot was authorized.
+
+## Resolve the ADR publication cleanup packet
+
+```task
+id: ADHOC-2026-08-22-T02
+status: done
+priority: medium
+```
+
+Make status metadata honest, identify the canonical source for duplicated
+ADRs, and add complete publication front matter to current decisions.
+
+Result: `railiance-infra` is the canonical source for the shared ADR-003 and
+ADR-004 because `railiance-hosts` declares itself superseded by this repo.
+ADR-002 is explicitly superseded; ADR-003 through ADR-005 now have complete,
+globally unique `RINFRA-ADR-*` publication metadata. Policy Nexus and the
+historical repo were notified of the ruling.
+
+## Triage the proposed confidential custody transfer
+
+```task
+id: ADHOC-2026-08-22-T03
+status: done
+priority: high
+```
+
+Check the proposed destination and confidentiality policy, then accept or
+return a value-safe change request without copying restricted material into an
+inappropriate repository.
+
+Result: changes requested. Forgejo reports this repository as public, while
+the complete proposed tree is `client_confidential`. No engagement material
+was copied; kaizen-agentic was asked to use restricted custody or propose a
+separately reviewed, redacted public-safe subset.