From 03a74e839cd5d9637c7b9596c76cf16b0d3ced1d Mon Sep 17 00:00:00 2001 From: codex Date: Sat, 31 Oct 2026 14:44:00 +0100 Subject: [PATCH] RPF-WP-0069: State Hub ids written back by fix-consistency Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 994874@bnt-lap001 Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87 --- workplans/RPF-WP-0069-bounded-executor-lanes.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/workplans/RPF-WP-0069-bounded-executor-lanes.md b/workplans/RPF-WP-0069-bounded-executor-lanes.md index 16ec347..af50e6f 100644 --- a/workplans/RPF-WP-0069-bounded-executor-lanes.md +++ b/workplans/RPF-WP-0069-bounded-executor-lanes.md @@ -14,6 +14,7 @@ related: - NK-WP-0056 - NK-WP-0040 - RPF-WP-0067 +state_hub_workstream_id: "6eb39172-babd-57d1-8a3b-f23c41347c22" --- # RPF-WP-0069 — Bounded executor lanes (NK-WP-0056-T02 owner answer) @@ -30,6 +31,7 @@ part of T01; every CCR stays `proposed` until its approvers act. id: RPF-WP-0069-T01 status: done priority: high +state_hub_task_id: "27432a77-e111-5aa9-9c23-34fb4c9a2984" ``` Answer doc written; new contract-only request type `workload-kv-write-next-version` @@ -56,6 +58,7 @@ confirmed only after `sso/nk-bind-executor` exists from the reviewed rapp-* pack id: RPF-WP-0069-T03 status: wait priority: high +state_hub_task_id: "6b456804-c408-53bf-8e1d-49723108fca6" ``` After T02: an attended platform-admin (aal2) session sets `cas_required` on the svc-authelia key, @@ -69,6 +72,7 @@ setup/verify; write it once approval exists. The founder runs it. id: RPF-WP-0069-T04 status: wait priority: medium +state_hub_task_id: "5615be47-2b25-5f7d-a1c2-d4391b1377d0" ``` Draft a `workload-kv-read` CCR (native login, data read only, 15m) for @@ -81,6 +85,7 @@ CCR-2026-0057's `runtime_access: false`. Waits for T10 scheduling and the Servic id: RPF-WP-0069-T05 status: wait priority: medium +state_hub_task_id: "5c582aef-ee9d-56ab-a4eb-2019933f00ac" ``` After audit-core admits the sender and names it, draft a `workload-kv-read` CCR in the @@ -93,6 +98,7 @@ ESO into `sso/nk-bind-executor-audit`, ClusterSecretStore restricted to `sso`. id: RPF-WP-0069-T06 status: wait priority: medium +state_hub_task_id: "1456b467-f7c9-529d-9f3e-39404aaa36c6" ``` After secrets-engine answers the lane shape for the executor's LLDAP credential (its Q2),