Activate Playwright pilot with scoped consumer group and native evidence

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13690-09e0-7cd1-964b-ec83cdbcd348

intakes/RPF-IN-0012-task-execution-and-wrapped-delivery-review.md

@@ -0,0 +1,38 @@
+---
+id: RPF-IN-0012
+kind: intake
+type: intake
+title: "Return independent task-execution contract and wrapped-delivery owner review"
+repo: railiance-platform
+status: open
+owner: railiance-platform
+requested_by: secrets-engine
+origin: handoff
+origin_ref: SECRETS-WP-0013-T01
+priority: high
+created: "2026-10-11"
+updated: "2026-10-11"
+---
+
+Review the proposed SECRETS-EXEC-20261011-v1 metadata-only mediated execution
+contract and return the exact Platform owner workplan/task binding and reviewed
+revision. Identity/approval/PDP owners still owe independent returns. This intake
+records no foreign owner assent and requests no credential value or native action.
+
+D3 P3=b separately selects response-wrapped issuer delivery. The existing issuer
+primitive is hardened in Secrets Engine: native KV-v2/AppRole creation path and
+TTL/accessor are verified, a fresh private recipient file is exclusively reserved
+and fsynced before mint, and uncertain attempts cannot silently overwrite/remint.
+Disposable local OpenBao proves a first unwrap and specific consumed-token denial;
+it does not prove estate custody or delivery. Review the exact actor/path/audience,
+deadline, authorization/consume, destination, audit, replay/crash reconciliation and
+rollback requirements for a separate delivery operation. Metadata execute-ccr
+explicitly excludes wrap/KV-value delivery and cannot lend its grant to this lane.
+
+Source: secrets-engine/docs/task-scoped-openbao-execution-contract.md and
+src/secrets_engine/{openbao,wrap}.py; tests/test_wrapped_issuer_native.py is an
+isolated test, not a production proof. The already D2-approved repository issuer
+has its own prepared bounded command and attended Platform login requirement;
+no second repository scope approval is requested and its waiting task is not
+reopened by this source review. Owner-prepared execution must precede any new
+attended item. Genuinely expanded scope belongs in the single daily red batch.