From 221668a4876b4eeb0a1bcd4e97aff7788bf6eb9c Mon Sep 17 00:00:00 2001 From: repo-manager Date: Tue, 25 Aug 2026 17:47:00 +0200 Subject: [PATCH] chore(registrar): assign State Hub identifiers Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006 --- WORK-RECORDS.md | 1 + workplans/ADHOC-2026-08-23.md | 3 +++ ...LIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md | 1 + ...IANCE-WP-0028-flex-auth-credential-grant-integration.md | 4 ++++ ...LIANCE-WP-0029-keycape-live-secret-exposure-recovery.md | 7 +++++++ 5 files changed, 16 insertions(+) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index cf0c039..fbab396 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -127,6 +127,7 @@ | task | RAILIANCE-WP-0029-T03 | progress | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md | | task | RAILIANCE-WP-0029-T04 | wait | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md | | task | RAILIANCE-WP-0029-T05 | wait | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md | +| task | RAILIANCE-WP-0029-T06 | progress | — | workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md | | task | RPF-WP-0018-T01 | done | — | workplans/RPF-WP-0018-policy-surface-alignment.md | | task | RPF-WP-0018-T02 | done | — | workplans/RPF-WP-0018-policy-surface-alignment.md | | task | RPF-WP-0018-T03 | done | — | workplans/RPF-WP-0018-policy-surface-alignment.md | diff --git a/workplans/ADHOC-2026-08-23.md b/workplans/ADHOC-2026-08-23.md index 993b273..0adc331 100644 --- a/workplans/ADHOC-2026-08-23.md +++ b/workplans/ADHOC-2026-08-23.md @@ -9,6 +9,7 @@ owner: codex topic_slug: railiance created: "2026-08-23" updated: "2026-08-23" +state_hub_workstream_id: "e25ba5fa-eaae-5039-8d93-a69c6d837fc4" --- # ADHOC-2026-08-23 — apps-pg tenancy evidence declaration @@ -19,6 +20,7 @@ updated: "2026-08-23" id: ADHOC-2026-08-23-T01 status: done priority: high +state_hub_task_id: "c837fccb-54f9-5cf4-b177-153f118147e4" ``` Added the existing authoritative backup/restore artifact to the top-level @@ -35,6 +37,7 @@ this repository's declaration and checks the repository diff. id: ADHOC-2026-08-23-T02 status: done priority: medium +state_hub_task_id: "9aeaeb60-9a0c-512a-a791-4bbddca29482" ``` Full test discovery exposed two WP0025 broker-readiness tests that built a diff --git a/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md b/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md index a2115fd..3d2705a 100644 --- a/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md +++ b/workplans/RAILIANCE-WP-0025-versioned-ephemeral-custody-lifecycle.md @@ -169,6 +169,7 @@ was deployed; those remain a separate owner decision. id: RAILIANCE-WP-0025-T06 status: done priority: high +state_hub_task_id: "e3a3ee1d-3b6e-5217-bf65-d2a449c45719" ``` The first fresh-run setup review found that `approve` posted the canonical diff --git a/workplans/RAILIANCE-WP-0028-flex-auth-credential-grant-integration.md b/workplans/RAILIANCE-WP-0028-flex-auth-credential-grant-integration.md index 02cb039..43a74bb 100644 --- a/workplans/RAILIANCE-WP-0028-flex-auth-credential-grant-integration.md +++ b/workplans/RAILIANCE-WP-0028-flex-auth-credential-grant-integration.md @@ -13,6 +13,7 @@ related: - FLEX-WP-0012 origin: routed origin_ref: "State Hub decision 1f9f257d-c9f2-4a5e-a018-8058a3f2a51a" +state_hub_workstream_id: "022dda1f-8772-57ad-862e-672924455f11" --- # RAILIANCE-WP-0028 — canonical flex-auth credential-grant checks @@ -29,6 +30,7 @@ consumer-specific flex-auth endpoint. id: RAILIANCE-WP-0028-T01 status: done priority: high +state_hub_task_id: "cfec3a0a-a198-580a-988b-4b2d7bac206c" ``` The operator explicitly approved Option A in State Hub decision @@ -42,6 +44,7 @@ normalization belong here, before the flex-auth policy boundary. id: RAILIANCE-WP-0028-T02 status: done priority: high +state_hub_task_id: "971f243a-a6cd-5a3a-965a-8191c51c7577" ``` Change the helper default to `/v1/check`, emit the coordinated @@ -60,6 +63,7 @@ evaluator provenance, and subject/resource binding back to the request. id: RAILIANCE-WP-0028-T03 status: done priority: medium +state_hub_task_id: "60725d60-ae38-5fe8-971f-8c714261fd1d" ``` Exercise focused allow and deny tests, validate the complete repository suite, diff --git a/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md b/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md index f03c1e6..9f23845 100644 --- a/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md +++ b/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md @@ -13,6 +13,7 @@ related: - KEY-WP-0011 origin: routed origin_ref: "State Hub messages e88abb61-e393-4a82-817c-5ac378a2ee3d, acf98be3-ff6b-4270-bd21-0193bebd806b, aeb216b5-9f1b-404b-a483-fb08a00a49b1, and 71b1008a-7fd7-4500-85c6-e8893a6d80d4" +state_hub_workstream_id: "038bc3c0-4492-5b91-95eb-ae515ca205df" --- # RAILIANCE-WP-0029 — KeyCape live Secret exposure recovery @@ -29,6 +30,7 @@ payload and never treat repository access as live mutation authority. id: RAILIANCE-WP-0029-T01 status: done priority: high +state_hub_task_id: "62976143-33f1-5544-b7bb-174aed47e09b" ``` Accepted the KeyCape/NetKingdom incident reports, stopped payload inspection, @@ -42,6 +44,7 @@ the public JWKS digest/kid. The legacy value-printing rotation helper is banned. id: RAILIANCE-WP-0029-T02 status: done priority: high +state_hub_task_id: "87bedc80-0060-518c-a5f4-3112d3d8d867" ``` `docs/keycape-live-secret-exposure-recovery.md` defines owners, required @@ -55,6 +58,7 @@ predecessor revocation, and sanitized evidence. id: RAILIANCE-WP-0029-T03 status: progress priority: high +state_hub_task_id: "e019c166-3abb-5edf-81a7-d65f0ea91c93" ``` KeyCape supplied source revision `93704fd2424503007c20b458b62a7f7d994bb288`, @@ -94,6 +98,7 @@ lane remains unresolved and no credential fetch or retry is authorized. id: RAILIANCE-WP-0029-T04 status: wait priority: high +state_hub_task_id: "dbf31617-ff0b-5995-b273-cc0a854221a8" ``` Requires a fresh exact human GO, an at-most-30-minute window, named driver and @@ -106,6 +111,7 @@ and all T03 acknowledgements. No value may enter captured output. id: RAILIANCE-WP-0029-T05 status: wait priority: high +state_hub_task_id: "c4c23dfb-8762-5017-8d50-5d9c35086736" ``` Verify replacement operation and predecessor rejection for the signing key, @@ -119,6 +125,7 @@ status, timestamps, and cleanup receipts. id: RAILIANCE-WP-0029-T06 status: progress priority: high +state_hub_task_id: "69326850-cd3a-556e-a9cc-9d463802545b" ``` The platform/OpenBao owner must publish a non-secret receipt for both routing