From 1da1c7760fa2c6b1a795fdbc7a50587c3b6c98fb Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 4 Oct 2026 03:04:42 +0200 Subject: [PATCH] Prepare October 4 attended window priorities and readiness evidence Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1046b-5629-7f52-badd-f718eadb6042 --- .../2026-10-04-1000/README.md | 78 ++++++ .../2026-10-04-1000/checklist.md | 20 ++ .../2026-10-04-1000/source-review.json | 253 ++++++++++++++++++ .../2026-10-04-1000/window.yaml | 3 + ...-0050-attended-provisioning-preparation.md | 4 +- 5 files changed, 357 insertions(+), 1 deletion(-) create mode 100644 docs/provisioning-windows/2026-10-04-1000/README.md create mode 100644 docs/provisioning-windows/2026-10-04-1000/checklist.md create mode 100644 docs/provisioning-windows/2026-10-04-1000/source-review.json create mode 100644 docs/provisioning-windows/2026-10-04-1000/window.yaml diff --git a/docs/provisioning-windows/2026-10-04-1000/README.md b/docs/provisioning-windows/2026-10-04-1000/README.md new file mode 100644 index 0000000..2562b93 --- /dev/null +++ b/docs/provisioning-windows/2026-10-04-1000/README.md @@ -0,0 +1,78 @@ +# Attended preparation — 4 October 2026, 10:00 Europe/Berlin + +Owner: railiance-platform, RPF-WP-0050-T03. Founder instruction: “Pick lanes by +relevance for today 10am.” This is a one-time preparation window, at 08:00 UTC, +using the selected existing batched attended custody. No recurrence is selected. + +## Selected priorities + +| Order | Lane / owning task | Relevance | Present readiness and required return | +| --- | --- | --- | --- | +| 1 | secrets-engine service JWT login / RPF-WP-0035-T02 | Enables the service's bounded identity login for credential workflows | NOT READY. KeyCape must confirm live `secrets-engine-openbao` registration and its separately approved client custody. Platform then reviews the isolated mount/config/self-policy/role child and receipt. The current workload-read CCR type cannot encode this JWT authority. | +| 2 | informed-decision sitting-requester workload delivery / INFD-WP-0005-T05 | Removes the attended secret-read dependency for decision intake | NOT READY. Requires a separately reviewed exact-path workload reader and namespace-restricted ESO delivery into the review pod. CCR-2026-0026/0027 are applied historical custody, not authority for this new reader. Founder per-change go and owner runtime acceptance remain. | +| 3 | email-connect transactional delivery / USER-WP-0035-T02 | Enables governed account/invitation mail delivery | NOT READY. CCR-2026-0010 is active historical custody, not an approved new provisioning candidate. email-connect/user-engine must identify the exact remaining delivery-token/runtime work, reviewed command, caller scope and acceptance receipt. Do not recreate SMTP custody. | + +These are preparation priorities, not three approved execution commands. Source +contracts: `docs/credential-lane-designs/secrets-engine-service-jwt.md`, +`informed-decision/docs/specs/FrictionlessDecisionIntake.md` (§4, §3.1), +`credential-change-requests/CCR-2026-0010-email-connect-transactional.yaml`, and +the named authoritative owner workplans. The informed-decision item has separate +decision `0d6792b6-59e4-4fa0-887a-c4e51ea8e131`; it is not joined to D1. + +## Receipt boundaries + +For secrets-engine, return public issuer/claim/registration and protected-custody +coordinates, reviewed source digests and compare-before-write conflict checks. +Native proof must cover correct-service login, exact effective self-only policy, +wrong issuer/audience/subject/tenant/role/scope denial, expiry/use exhaustion, +forbidden KV/admin/child-token actions and self-revocation. The published consumer +contract follows those checks. Abort disables only the exact role/client and +revokes its tokens; never alter a shared mount to recover this lane. + +For informed-decision, retain the existing client and `approval:create` scope. +Review the actual namespace/service account, exact path/field, fifteen-minute +reader bounds, store namespace conditions and explicit ESO target annotations. +Return delivery health, sibling-path/list denial, read-audit and rotation/cleanup +evidence without values. Listener/admission/forwarding rollout is separate work +and is not authorized by selecting this lane. + +For mail, the receiving owners must distinguish existing SMTP custody from the +remaining caller/token delivery. Return the exact approved caller and target, +native bounded delivery success, unauthorized caller denial, expiry/revocation +and protected-file cleanup evidence. No receipt or rollback command can be +invented before that contract is returned. + +Each actual item must have a named driver/abort owner, exact revision/digest, +expected result and rollback before founder execution approval. The founder runs +OIDC/MFA through the existing attended lane in their own terminal; all child +output/errors stay contained. A failed or interrupted step stops the batch until +actual state and session cleanup are established. No credential values belong in +this packet or its receipts. + +## Separate decision and exclusions + +RPF-WP-0035-T06 is a human acceptance of the passed approval-reader delivery proof +(informed-decision memo `infd-20261003-p01`), requiring no provisioning session. +Do not repeat its applied reader custody to obtain that answer. + +CCR-2026-0031 Core Hub private-source custody and MASON-WP-0007-T05 tenant-engine +sender seed were completed on 3 October. RPF-WP-0035-T08 factory sender custody +was applied on 11 September. They are excluded from replay. Remaining recovery, +resolver, factory, Fluid and publishing tasks retain their own owner/readiness +gates. The legacy whynot npm pointer remains on founder HOLD. + +## Generated inventory and Custodian handoff + +`window.yaml` deliberately has no execution candidates: none of the selected +priorities currently supplies a reviewed, eligible new action. `checklist.md` +shows the broader current D1 inventory as NOT READY rather than hiding omitted +joins. `source-review.json` pins the authoritative roots/files and verifies each +open D1 task's Hub identity, status and decision join. No complete or live-ready +claim follows from source review. Recheck revisions and owner returns at 10:00. + +Custodian residual CUST-WP-0076-T01 now has the founder's concrete date/time, +one-time cadence and delegated relevance selection in this packet. Its owner +must review/record that return in its own source; platform does not mark the +Custodian task done. RPF-WP-0050-T03 remains waiting on owner mappings, reviewed +commands and Custodian handoff review. D1 is not resolved and no automation or +live change is activated. diff --git a/docs/provisioning-windows/2026-10-04-1000/checklist.md b/docs/provisioning-windows/2026-10-04-1000/checklist.md new file mode 100644 index 0000000..a82f0df --- /dev/null +++ b/docs/provisioning-windows/2026-10-04-1000/checklist.md @@ -0,0 +1,20 @@ +# Attended provisioning preparation: 2026-10-04 +Decision: 62aa95e4-3ccc-4867-8806-5e3db005b483 +Preparation only. Founder window approval and each exact CCR revision remain required. +1. GLAS-WP-0015-T03: NOT READY — missing CCR/lane/receipt join. +2. HFACT-WP-0001-T01: NOT READY — missing CCR/lane/receipt join. +3. HFACT-WP-0001-T03: NOT READY — missing CCR/lane/receipt join. +4. HUB-WP-0012-T06: NOT READY — missing CCR/lane/receipt join. +5. IR-WP-0005-T02: NOT READY — missing CCR/lane/receipt join. +6. MARKITECT-WP-0002-T07: NOT READY — missing CCR/lane/receipt join. +7. MASON-WP-0004-T02: NOT READY — missing CCR/lane/receipt join. +8. RAPP-OPENBAO-WP-0002-T02: NOT READY — missing CCR/lane/receipt join. +9. RPF-WP-0027-T03: NOT READY — missing CCR/lane/receipt join. +10. RPF-WP-0027-T06: NOT READY — missing CCR/lane/receipt join. +11. RPF-WP-0035-T02: NOT READY — missing CCR/lane/receipt join. +12. RPF-WP-0035-T03: NOT READY — missing CCR/lane/receipt join. +13. RPF-WP-0035-T06: NOT READY — missing CCR/lane/receipt join. +14. RPF-WP-0038-T04: NOT READY — missing CCR/lane/receipt join. +15. SECRETS-WP-0006-T05: NOT READY — missing CCR/lane/receipt join. +16. USER-WP-0035-T02: NOT READY — missing CCR/lane/receipt join. +Checklist complete: false diff --git a/docs/provisioning-windows/2026-10-04-1000/source-review.json b/docs/provisioning-windows/2026-10-04-1000/source-review.json new file mode 100644 index 0000000..b4267cf --- /dev/null +++ b/docs/provisioning-windows/2026-10-04-1000/source-review.json @@ -0,0 +1,253 @@ +{ + "schema": "railiance-platform.provisioning-window-preparation.v1", + "date": "2026-10-04", + "local_time": "10:00", + "timezone": "Europe/Berlin", + "utc_time": "2026-10-04T08:00:00Z", + "recurrence": "none", + "custody": "batched-attended-existing", + "source": "Founder: Pick lanes by relevance for today 10am", + "decision_id": "62aa95e4-3ccc-4867-8806-5e3db005b483", + "roots": [ + "/home/worsch/glas-harness/workplans", + "/home/worsch/hub-core/workplans", + "/home/worsch/intelligence-radar/workplans", + "/home/worsch/markitect-main/workplans", + "/home/worsch/ops-mason/workplans", + "/home/worsch/prj-helixforge-factory/workplans", + "/home/worsch/railiance-platform/workplans", + "/home/worsch/rapp-openbao/workplans", + "/home/worsch/secrets-engine/workplans", + "/home/worsch/user-engine/workplans" + ], + "source_files": [ + { + "path": "/home/worsch/glas-harness/workplans/GLAS-WP-0015-production-dependency-coordination.md", + "sha256": "9d3342d809721f38b29ce1dd0c67b03b0ba774f3579eb76a0dd3fdd812021056" + }, + { + "path": "/home/worsch/hub-core/workplans/HUB-WP-0012-netkingdom-platform-root-access.md", + "sha256": "b65be630ca4b37d07a58494644d30878cceab6d15a246dc963ada94e755b7203" + }, + { + "path": "/home/worsch/intelligence-radar/workplans/IR-WP-0005-credential-delivery.md", + "sha256": "40afb58f4485e3c93952f34664fff697766f4e8ce99679281d436058da3a974a" + }, + { + "path": "/home/worsch/markitect-main/workplans/MARKITECT-WP-0002-testdrive-jsui-publication.md", + "sha256": "a91c4fd6efb1c0e7d4ac8049abf187357bcd8b1a963c67e31dd449e985b75bf5" + }, + { + "path": "/home/worsch/ops-mason/workplans/MASON-WP-0004-credential-inventory-descriptions.md", + "sha256": "6a7d66e7300319fe221bfa1cd077495ac81e223c29bcafb51e83c2f62cf85a7a" + }, + { + "path": "/home/worsch/ops-mason/workplans/MASON-WP-0007-tenant-engine-audit-core-sender-projection.md", + "sha256": "fd3049f09dabd52546749910445e317fb649f7ddad1f9b00d48313eda8dd0d24" + }, + { + "path": "/home/worsch/prj-helixforge-factory/workplans/HFACT-WP-0001-establish-internal-factory.md", + "sha256": "595a87069e71a1b0fb2b5d8f576898432d0e661dfe2a168f9c7a97ff256f6f52" + }, + { + "path": "/home/worsch/railiance-platform/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md", + "sha256": "34cce4706d4a55ad850249ca511187d2d25936b189b484e0085dea3cc22ff1c4" + }, + { + "path": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md", + "sha256": "726b02ebe324f1fbd9e8ac21e71c86a29110d68f224aa6daa3699c02e739f671" + }, + { + "path": "/home/worsch/railiance-platform/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md", + "sha256": "7aa80be92e2b8681fa30fa999e9696d6a2b1da8b02c40a2c981ef28ff841b8f9" + }, + { + "path": "/home/worsch/rapp-openbao/workplans/RAPP-OPENBAO-WP-0002-operator-only-ui-exposure.md", + "sha256": "d71a8ab4e3ddd660bb4e35448c11ebb120e40352ed784c976f7643cad0cdbf41" + }, + { + "path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0006-catalog-lane-adoption.md", + "sha256": "a5d6169fe080f1faac341a43a4c98b4a4dd85e2332740f7c1dd170322a1ddd7a" + }, + { + "path": "/home/worsch/user-engine/workplans/USER-WP-0035-onboarding-handoff-findings.md", + "sha256": "1b59a99ef4b9743b02646b6201ade9ed0e4f504f3d3c571890f18d39be6994b2" + } + ], + "task_joins": [ + { + "task_id": "GLAS-WP-0015-T03", + "task_uuid": "68fcc1b4-537b-5f5e-afb5-063c44e5e4db", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Await owner returns: secrets-engine config, holder admission, lane approvals and scoped delivery; operator input on placement and spend bounds." + }, + { + "task_id": "HFACT-WP-0001-T01", + "task_uuid": "5cee3251-faf9-5925-8ffd-7a8bf378b0a4", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Exact one-cycle runtime is installed and synthetically proved on workstation and Railiance; independent pilot oracle is pinned with verified red baseline. Await native holder/delivery, admitted profile/service/recovery, live provider bounds/FX/tariffs and G0 including oracle semantics; dispatch remains disabled." + }, + { + "task_id": "HFACT-WP-0001-T03", + "task_uuid": "67c80db1-01ba-54f1-80ff-76398f9e7823", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "September 16 native OpenRouter receipt resolves the generic requester, operator-reader, deployed approval and exact consume prerequisites; September 27 configured Glas owner/companion source and pins are ready. Await fresh Glas-specific human/action approvals, admitted current runtime/spend envelope, native primary/companion delivery, revocation and independent operating/audit acceptance. Historical receipt is not factory activation." + }, + { + "task_id": "HUB-WP-0012-T06", + "task_uuid": "97b0b242-e9a7-53cd-941f-a1822fcf93a5", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "T04/T05 live admission and Railiance/platform owners' attended receipts" + }, + { + "task_id": "IR-WP-0005-T02", + "task_uuid": "c4b2378a-5241-5195-8c4b-d53ec58a7f72", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Human acceptance of three apply/verify/exec approvals for the pinned intelligence-radar-key-check recipient; secrets-engine opens them." + }, + { + "task_id": "MARKITECT-WP-0002-T07", + "task_uuid": "8bcde75e-bca2-428e-893f-1d88036f746c", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Registry ownership/access and npm/CDN publication receipts from the standalone maintainer." + }, + { + "task_id": "MASON-WP-0004-T02", + "task_uuid": "a6a944d7-21c5-5043-a78d-b3809de0ee64", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Requires a valid scoped metadata grant (operator) before the described paths can be written and verified." + }, + { + "task_id": "RAPP-OPENBAO-WP-0002-T02", + "task_uuid": "1ada4afb-ba65-5974-b3f1-53404d0636b5", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Await the loopback OIDC callback accepted by the OpenBao platform-admin role and an attended MFA login (see RMASTER-WP-0020-T09)." + }, + { + "task_id": "RPF-WP-0027-T03", + "task_uuid": "714ae011-903d-55e2-ac47-801b8ef879d1", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session." + }, + { + "task_id": "RPF-WP-0027-T06", + "task_uuid": "3b9748c4-2906-5ba7-9d34-0a7067a59283", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred." + }, + { + "task_id": "RPF-WP-0035-T02", + "task_uuid": "e0c82ea9-05a5-537e-8fbf-67534263572e", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "SECRETS-WP-0007-T04 done 2026-09-27, so that gate is open. Real blocker: live KeyCape registration of client secrets-engine-openbao and its protected client-credential custody (contract: separate approved custody action; no owning task id yet, asked key-cape 2026-10-03). The design requires both before any write; then a reviewed child and the attended founder apply." + }, + { + "task_id": "RPF-WP-0035-T03", + "task_uuid": "f47e5bc5-6f3c-54bb-aa35-260ad03892ba", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability schema." + }, + { + "task_id": "RPF-WP-0035-T06", + "task_uuid": "68bff751-e48b-548b-8fb4-dfb3b16210c2", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays non-resolvable." + }, + { + "task_id": "RPF-WP-0038-T04", + "task_uuid": "a4807df0-ec96-58f1-9cbd-42b1dcde0d6f", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval." + }, + { + "task_id": "SECRETS-WP-0006-T05", + "task_uuid": "fb103f1e-2ff7-5de5-9a2c-191a19c43542", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-T03. Other lanes still need exact approvals, scoped attended apply and per-lane positive/negative/health/revocation evidence." + }, + { + "task_id": "USER-WP-0035-T02", + "task_uuid": "fae614ba-ffc0-511d-9d22-2d91fbab057f", + "source_status": "wait", + "hub_status": "wait", + "decision_join_verified": true, + "blocking_reason": "Needs the operator-owned governed transactional mail lane (email-connect plus the OpenBao delivery token)." + } + ], + "all_hub_joins_verified": true, + "checklist_complete": false, + "execution_ready": false, + "execution_authorized": false, + "executed": false, + "scheduled_automation": false, + "priority_tasks": [ + "RPF-WP-0035-T02", + "INFD-WP-0005-T05", + "USER-WP-0035-T02" + ], + "separate_decision_only_task": "RPF-WP-0035-T06", + "note": "Priority scope is narrower than the D1 inventory. INFD-WP-0005-T05 has its own decision and is separately reviewed in README; no D1 join is invented.", + "separate_priority_join": { + "id": "3b0f536c-e8ee-5493-b663-2f60f5f429ad", + "record_id": "INFD-WP-0005-T05", + "decision_id": "0d6792b6-59e4-4fa0-887a-c4e51ea8e131", + "status": "wait", + "verified": true + }, + "priority_contract_files": [ + { + "path": "/home/worsch/railiance-platform/docs/credential-lane-designs/secrets-engine-service-jwt.md", + "sha256": "e6da337632950ddc926fadc9a842cdb85f1d046b725974b552a95b6c11110417" + }, + { + "path": "/home/worsch/railiance-platform/credential-change-requests/CCR-2026-0010-email-connect-transactional.yaml", + "sha256": "96908017b858e2390e876a66a9c6927adb9d81f91f5b3e3de40819bf53030440" + }, + { + "path": "/home/worsch/railiance-platform/credential-change-requests/CCR-2026-0026-informed-decision-sitting-requester-verifier.yaml", + "sha256": "4ca365a99bd31de4b11b39375f4ff1dd5f2b90f3dabee5e6ff397daadaeab3ff" + }, + { + "path": "/home/worsch/railiance-platform/credential-change-requests/CCR-2026-0027-informed-decision-sitting-requester-reader.yaml", + "sha256": "ccc71b2ce845c6a2b552a015e43b16e0ef497aa8d810d19bcbe60a746faeae8a" + }, + { + "path": "/home/worsch/informed-decision/docs/specs/FrictionlessDecisionIntake.md", + "sha256": "b9e01901ac2a2f45013bd13cb4004c5c0a156000db73129098b2b958ed8f6dd0" + }, + { + "path": "/home/worsch/informed-decision/workplans/INFD-WP-0005-frictionless-decision-intake.md", + "sha256": "993dddfa4ba4f9e0131feab681091a6c919cba22901006c17e82d5e02a0d4083" + } + ] +} diff --git a/docs/provisioning-windows/2026-10-04-1000/window.yaml b/docs/provisioning-windows/2026-10-04-1000/window.yaml new file mode 100644 index 0000000..35f0fa4 --- /dev/null +++ b/docs/provisioning-windows/2026-10-04-1000/window.yaml @@ -0,0 +1,3 @@ +decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483 +date: '2026-10-04' +entries: [] diff --git a/workplans/RPF-WP-0050-attended-provisioning-preparation.md b/workplans/RPF-WP-0050-attended-provisioning-preparation.md index 8b3d76f..09f6bb5 100644 --- a/workplans/RPF-WP-0050-attended-provisioning-preparation.md +++ b/workplans/RPF-WP-0050-attended-provisioning-preparation.md @@ -47,12 +47,14 @@ id: RPF-WP-0050-T03 status: wait priority: medium blocked_on: message-from:the-custodian -blocking_reason: "Custodian must return the reviewed cadence/window date and current owner task scope before a real metadata manifest is assembled; exact founder execution authorization remains separate." +blocking_reason: "Founder selected 2026-10-04 10:00 Europe/Berlin and delegated lane relevance selection. Dated packet is prepared; Custodian handoff review and exact owner contracts/commands/receipt mappings for the selected priorities remain before a complete manifest. Exact founder execution authorization remains separate." state_hub_task_id: "1ae5a6b8-9c83-5813-982f-ca8ad24be8b5" ``` Generate a checklist from all named authoritative roots, verified Hub decision joins and owner CCR/lane/receipt mappings; revalidate each exact revision, upstream acceptance, native readiness and rollback. Applied custody such as RPF-WP-0035-T08 is excluded. Each session returns exact receipts for each owner; missing receipts leave waits intact. Do not activate schedules in this workplan. +2026-10-04: Bernd directed "Pick lanes by relevance for today 10am". Prepared the one-time 10:00 Europe/Berlin (08:00 UTC) source packet in `docs/provisioning-windows/2026-10-04-1000/`. Priority scope: secrets-engine service JWT login (RPF-WP-0035-T02), informed-decision requester workload delivery (INFD-WP-0005-T05, separate decision), and user-engine transactional mail (USER-WP-0035-T02). The packet records per-owner required receipts, historical custody replay exclusions and the separate no-session RPF-WP-0035-T06 acceptance. Current D1 roots and exact Hub task joins are reviewed in the evidence inventory. No eligible reviewed new execution candidate is claimed; the generated checklist remains NOT READY. T03 stays wait for Custodian review and concrete owner contracts/commands/mappings, rather than the now-supplied date. No schedule or live command is executed. + ## Accept platform seam for catalog lane scaffold proposal ```task