diff --git a/workplans/RAILIANCE-WP-0024-audit-core-custody-and-recovery-coordination.md b/workplans/RAILIANCE-WP-0024-audit-core-custody-and-recovery-coordination.md index fb33f38..494fb9f 100644 --- a/workplans/RAILIANCE-WP-0024-audit-core-custody-and-recovery-coordination.md +++ b/workplans/RAILIANCE-WP-0024-audit-core-custody-and-recovery-coordination.md @@ -12,6 +12,7 @@ updated: "2026-08-22" related: - AUDIT-WP-0008 - WH-ENG-20260822-AUDIT-E2-01 + - WH-ENG-20260822-AUDIT-E2-02 origin: routed origin_ref: "State Hub messages 10f80080-4c83-42ba-8590-f23c582d9f05 and a93fa88f-a9c5-4539-93ae-0c8f8490f53d" state_hub_workstream_id: "88c4ef7f-0af8-580e-90dc-a2bae2675a4d" @@ -83,6 +84,18 @@ temporary identities and exact engagement resources. Four unit tests, a live value-safe preflight, policy formatting, and Kubernetes server-side dry-run passed. Live projection and cleanup remain waiting for the attended window. +**Fresh-run readiness (2026-08-22):** the expired `-01` engagement is terminal +and clean. Its replacement, `WH-ENG-20260822-AUDIT-E2-02`, is operator-approved +and target-owner-acknowledged for 19:15Z–19:30Z. Commit `f135c0a` gives the new +run a dedicated `-02` policy, auth role, ClusterSecretStore, four exact KV +paths, and fail-closed procedure; no `-01` projection reference remains. The +projection gate is 19:15Z–19:18Z and cleanup must finish by 19:30Z. Platform +tests (114), Whitehat tests (53), both Kubernetes server-side dry-runs, and a +live value-safe preflight passed. At preflight there were no temporary token +paths, projection resources, runner pod, or temporary sender identities, and +no secret value was observed. This task remains `wait` until an attended +operator invokes projection inside the gate and completes the cleanup receipt. + ## T02 — Define the runtime database lease recovery exercise ```task