diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 4bf335c..ef35c85 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -26,6 +26,7 @@ | workplan | RPF-WP-0047 | finished | — | workplans/RPF-WP-0047-bao-coulomb-social-notice-page.md | | workplan | RPF-WP-0048 | blocked | — | workplans/RPF-WP-0048-activity-core-gitops-adoption.md | | workplan | RPF-WP-0049 | finished | — | workplans/RPF-WP-0049-platform-root-custody-record-delivery.md | +| workplan | RPF-WP-0050 | active | — | workplans/RPF-WP-0050-attended-provisioning-preparation.md | | task | RPF-WP-0015-T01 | done | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md | | task | RPF-WP-0015-T02 | wait | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md | | task | RPF-WP-0015-T03 | wait | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md | @@ -106,6 +107,10 @@ | task | RPF-WP-0049-T03 | done | — | workplans/RPF-WP-0049-platform-root-custody-record-delivery.md | | task | RPF-WP-0049-T04 | done | — | workplans/RPF-WP-0049-platform-root-custody-record-delivery.md | | task | RPF-WP-0049-T05 | done | — | workplans/RPF-WP-0049-platform-root-custody-record-delivery.md | +| task | RPF-WP-0050-T01 | done | — | workplans/RPF-WP-0050-attended-provisioning-preparation.md | +| task | RPF-WP-0050-T02 | wait | — | workplans/RPF-WP-0050-attended-provisioning-preparation.md | +| task | RPF-WP-0050-T03 | wait | — | workplans/RPF-WP-0050-attended-provisioning-preparation.md | +| task | RPF-WP-0050-T04 | todo | — | workplans/RPF-WP-0050-attended-provisioning-preparation.md | | intake | RPF-IN-0001 | closed | — | intakes/intakes.md | | intake | RPF-IN-0002 | open | — | intakes/intakes.md | | intake | RPF-IN-0003 | open | — | intakes/intakes.md | diff --git a/workplans/RPF-WP-0050-attended-provisioning-preparation.md b/workplans/RPF-WP-0050-attended-provisioning-preparation.md index bf7c295..02ff80e 100644 --- a/workplans/RPF-WP-0050-attended-provisioning-preparation.md +++ b/workplans/RPF-WP-0050-attended-provisioning-preparation.md @@ -10,6 +10,7 @@ topic_slug: platform-services created: "2026-10-03" updated: "2026-10-03" flavor: implementation +state_hub_workstream_id: "0c7e3b0c-1c36-568c-af51-b06f912a0f1d" --- Origin: Custodian proposal f84637fa-2355-4971-a2dc-7f1fd01710a8, CUST-WP-0075 P2/P3. Platform accepts bounded preparation; Custodian owns cadence, founder owns custody policy and live authorization. No recurring event is enabled. @@ -20,6 +21,7 @@ Origin: Custodian proposal f84637fa-2355-4971-a2dc-7f1fd01710a8, CUST-WP-0075 P2 id: RPF-WP-0050-T01 status: done priority: high +state_hub_task_id: "43fac4d5-98de-5469-ac86-c8925ea3a31b" ``` Implemented `credential-change.py window-checklist` and `scripts/provisioning_window.py`. Reads authoritative open non-residual task blocks and explicit CCR/lane/receipt contracts. Missing/stale joins and non-approved/applied CCRs prevent a complete checklist. No execution, scheduling, credential reads or printing arbitrary CCR contents. Contract: `docs/attended-provisioning-window.md`. Synthetic regression suite verifies actual decision joins and replay refusal. This completes the bounded source renderer, not a real attended session. @@ -33,6 +35,7 @@ priority: high needs_human: true decision_id: "1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa" blocking_reason: "Founder must explicitly choose batched attended custody, response-wrapped issuer delivery, or scoped MFA silent writer, and approve its exact boundary. Generic D3 resolution without this disposition is insufficient." +state_hub_task_id: "99b73b3f-66b1-57a9-9f68-43e3fe12bf26" ``` P3 options and required review boundaries are drafted in the contract. Existing attended custody remains in force. No delivery helper, delegated value role or policy change is admitted by preparation. @@ -45,6 +48,7 @@ status: wait priority: medium blocked_on: message-from:the-custodian blocking_reason: "Custodian must return the reviewed cadence/window date and current owner task scope before a real metadata manifest is assembled; exact founder execution authorization remains separate." +state_hub_task_id: "1ae5a6b8-9c83-5813-982f-ca8ad24be8b5" ``` Generate a checklist from all named authoritative roots, verified Hub decision joins and owner CCR/lane/receipt mappings; revalidate each exact revision, upstream acceptance, native readiness and rollback. Applied custody such as RPF-WP-0035-T08 is excluded. Each session returns exact receipts for each owner; missing receipts leave waits intact. Do not activate schedules in this workplan. @@ -55,6 +59,7 @@ Generate a checklist from all named authoritative roots, verified Hub decision j id: RPF-WP-0050-T04 status: todo priority: medium +state_hub_task_id: "6475d924-92c6-504a-b9a1-4f035273f0e1" ``` P4 accepted for platform-side source review and bounded scaffolding after Warden returns its contract. Catalog entry/scaffold never supplies credentials, reviews, admission or live authority. Keep owner acceptance explicit before implementation.