coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(registrar): assign State Hub identifiers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
repo-manager 2026-08-25 17:47:00 +02:00
parent 89ad78601a
commit 221668a487
5 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
WORK-RECORDS.md
View file

@ -127,6 +127,7 @@
| task | RAILIANCE-WP-0029-T03 | progress | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md |
| task | RAILIANCE-WP-0029-T04 | wait | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md |
| task | RAILIANCE-WP-0029-T05 | wait | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md |
| task | RAILIANCE-WP-0029-T06 | progress | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md |
| task | RPF-WP-0018-T01 | done | — | workplans/RPF-WP-0018-policy-surface-alignment.md |
| task | RPF-WP-0018-T02 | done | — | workplans/RPF-WP-0018-policy-surface-alignment.md |
| task | RPF-WP-0018-T03 | done | — | workplans/RPF-WP-0018-policy-surface-alignment.md |

3
workplans/ADHOC-2026-08-23.md
View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-08-23"
updated: "2026-08-23"
state_hub_workstream_id: "e25ba5fa-eaae-5039-8d93-a69c6d837fc4"
---
# ADHOC-2026-08-23 — apps-pg tenancy evidence declaration
@ -19,6 +20,7 @@ updated: "2026-08-23"
id: ADHOC-2026-08-23-T01
status: done
priority: high
state_hub_task_id: "c837fccb-54f9-5cf4-b177-153f118147e4"
```
Added the existing authoritative backup/restore artifact to the top-level
@ -35,6 +37,7 @@ this repository's declaration and checks the repository diff.
id: ADHOC-2026-08-23-T02
status: done
priority: medium
state_hub_task_id: "9aeaeb60-9a0c-512a-a791-4bbddca29482"
```
Full test discovery exposed two WP0025 broker-readiness tests that built a

1
workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md
View file

@ -169,6 +169,7 @@ was deployed; those remain a separate owner decision.
id: RAILIANCE-WP-0025-T06
status: done
priority: high
state_hub_task_id: "e3a3ee1d-3b6e-5217-bf65-d2a449c45719"
```
The first fresh-run setup review found that `approve` posted the canonical

4
workplans/RAILIANCE-WP-0028-flex-auth-credential-grant-integration.md
View file

@ -13,6 +13,7 @@ related:
- FLEX-WP-0012
origin: routed
origin_ref: "State Hub decision 1f9f257d-c9f2-4a5e-a018-8058a3f2a51a"
state_hub_workstream_id: "022dda1f-8772-57ad-862e-672924455f11"
---
# RAILIANCE-WP-0028 — canonical flex-auth credential-grant checks
@ -29,6 +30,7 @@ consumer-specific flex-auth endpoint.
id: RAILIANCE-WP-0028-T01
status: done
priority: high
state_hub_task_id: "cfec3a0a-a198-580a-988b-4b2d7bac206c"
```
The operator explicitly approved Option A in State Hub decision
@ -42,6 +44,7 @@ normalization belong here, before the flex-auth policy boundary.
id: RAILIANCE-WP-0028-T02
status: done
priority: high
state_hub_task_id: "971f243a-a6cd-5a3a-965a-8191c51c7577"
```
Change the helper default to `/v1/check`, emit the coordinated
@ -60,6 +63,7 @@ evaluator provenance, and subject/resource binding back to the request.
id: RAILIANCE-WP-0028-T03
status: done
priority: medium
state_hub_task_id: "60725d60-ae38-5fe8-971f-8c714261fd1d"
```
Exercise focused allow and deny tests, validate the complete repository suite,

7
workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md
View file

@ -13,6 +13,7 @@ related:
- KEY-WP-0011
origin: routed
origin_ref: "State Hub messages e88abb61-e393-4a82-817c-5ac378a2ee3d, acf98be3-ff6b-4270-bd21-0193bebd806b, aeb216b5-9f1b-404b-a483-fb08a00a49b1, and 71b1008a-7fd7-4500-85c6-e8893a6d80d4"
state_hub_workstream_id: "038bc3c0-4492-5b91-95eb-ae515ca205df"
---
# RAILIANCE-WP-0029 — KeyCape live Secret exposure recovery
@ -29,6 +30,7 @@ payload and never treat repository access as live mutation authority.
id: RAILIANCE-WP-0029-T01
status: done
priority: high
state_hub_task_id: "62976143-33f1-5544-b7bb-174aed47e09b"
```
Accepted the KeyCape/NetKingdom incident reports, stopped payload inspection,
@ -42,6 +44,7 @@ the public JWKS digest/kid. The legacy value-printing rotation helper is banned.
id: RAILIANCE-WP-0029-T02
status: done
priority: high
state_hub_task_id: "87bedc80-0060-518c-a5f4-3112d3d8d867"
```
`docs/keycape-live-secret-exposure-recovery.md` defines owners, required
@ -55,6 +58,7 @@ predecessor revocation, and sanitized evidence.
id: RAILIANCE-WP-0029-T03
status: progress
priority: high
state_hub_task_id: "e019c166-3abb-5edf-81a7-d65f0ea91c93"
```
KeyCape supplied source revision `93704fd2424503007c20b458b62a7f7d994bb288`,
@ -94,6 +98,7 @@ lane remains unresolved and no credential fetch or retry is authorized.
id: RAILIANCE-WP-0029-T04
status: wait
priority: high
state_hub_task_id: "dbf31617-ff0b-5995-b273-cc0a854221a8"
```
Requires a fresh exact human GO, an at-most-30-minute window, named driver and
@ -106,6 +111,7 @@ and all T03 acknowledgements. No value may enter captured output.
id: RAILIANCE-WP-0029-T05
status: wait
priority: high
state_hub_task_id: "c4c23dfb-8762-5017-8d50-5d9c35086736"
```
Verify replacement operation and predecessor rejection for the signing key,
@ -119,6 +125,7 @@ status, timestamps, and cleanup receipts.
id: RAILIANCE-WP-0029-T06
status: progress
priority: high
state_hub_task_id: "69326850-cd3a-556e-a9cc-9d463802545b"
```
The platform/OpenBao owner must publish a non-secret receipt for both routing