diff --git a/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md b/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md index 9c35ce9..a1c97d9 100644 --- a/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md +++ b/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md @@ -121,6 +121,8 @@ copied for another engagement. ```task id: RPF-WP-0015-T02 status: wait +blocked_on: message-from:audit-core +blocking_reason: "Value-safe lease revoke/expire exercise must be coordinated with rapp-postgres and audit-core." priority: high state_hub_task_id: "fda4262a-56f6-5f06-a070-8fe7e1297209" ``` @@ -177,6 +179,9 @@ live window after the Whitehat engagement cleanup. ```task id: RPF-WP-0015-T03 status: wait +needs_human: true +blocked_on: message-from:railiance-infra +blocking_reason: "Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infra, railiance-cluster, audit-core and the OpenBao package owner." priority: high state_hub_task_id: "ba729d18-f053-539f-86ef-5cb8ad4cce45" ``` diff --git a/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md b/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md index 0858b75..fadcee6 100644 --- a/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md +++ b/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md @@ -58,6 +58,9 @@ predecessor revocation, and sanitized evidence. ```task id: RPF-WP-0027-T03 status: wait +needs_human: true +blocked_on: message-from:net-kingdom +blocking_reason: "Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session." priority: high state_hub_task_id: "714ae011-903d-55e2-ac47-801b8ef879d1" ``` @@ -125,6 +128,8 @@ status, timestamps, and cleanup receipts. ```task id: RPF-WP-0027-T06 status: wait +needs_human: true +blocking_reason: "Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred." priority: high state_hub_task_id: "3b9748c4-2906-5ba7-9d34-0a7067a59283" ``` diff --git a/workplans/RPF-WP-0035-credential-lane-implementation.md b/workplans/RPF-WP-0035-credential-lane-implementation.md index c1cfb8c..4187a4c 100644 --- a/workplans/RPF-WP-0035-credential-lane-implementation.md +++ b/workplans/RPF-WP-0035-credential-lane-implementation.md @@ -44,6 +44,9 @@ the signing dependency belongs to the proposed FLEX-WP-0020-T05 cutover. ```task id: RPF-WP-0035-T02 status: wait +needs_human: true +depends_on: [KEY-WP-0009] +blocking_reason: "Attended platform provisioning of the exact JWT mount/role/policy; KeyCape issuer/JWKS and service registration under KEY-WP-0009." priority: high state_hub_task_id: "e0c82ea9-05a5-537e-8fbf-67534263572e" ``` @@ -72,6 +75,9 @@ contract, and rollback/cleanup receipts contain no secret material. ```task id: RPF-WP-0035-T03 status: wait +needs_human: true +depends_on: [MASON-WP-0005-T02] +blocking_reason: "Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability schema." priority: high state_hub_task_id: "f47e5bc5-6f3c-54bb-aa35-260ad03892ba" ``` @@ -249,6 +255,8 @@ Rotation is a distinct, version-guarded operation. ```task id: RPF-WP-0035-T07 status: wait +needs_human: true +blocking_reason: "Founder HOLD (2026-09-21) on the legacy whynot-design npm pointer; custody disposition is an attended decision." priority: high state_hub_task_id: "0dd7c9a5-65a0-53fc-b6c3-5ad96ee56f7b" ``` @@ -295,6 +303,8 @@ never record the value, fingerprint, length or shape. ```task id: RPF-WP-0035-T06 status: wait +depends_on: [INFD-WP-0001-T07, INFD-WP-0001-T08] +blocking_reason: "Scoped delivery proof pending; human approval follows INFD-WP-0001-T07/T08; front door stays non-resolvable." priority: high needs_human: false intervention_note: "" @@ -416,6 +426,8 @@ into this client-identity grant. ```task id: RPF-WP-0035-T08 status: wait +depends_on: [AUDIT-WP-0009-T09, AUDIT-WP-0009-T11] +blocking_reason: "Attended first-provision via factory_audit_custody.py after consuming AUDIT-WP-0009-T09/T11 declarations." priority: high assignee: railiance-platform needs_human: false diff --git a/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md b/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md index 5c88dba..0f82fda 100644 --- a/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md +++ b/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md @@ -73,6 +73,8 @@ removed. Evidence: `docs/evidence/forgejo-scaleway-restore-2026-09-06.json`. ```task id: RPF-WP-0038-T04 status: wait +needs_human: true +blocking_reason: "Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval." priority: high state_hub_task_id: "a4807df0-ec96-58f1-9cbd-42b1dcde0d6f" ```