coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(consistency): write back State Hub IDs for RPF-WP-0054
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 469992@bnt-lap001
Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
This commit is contained in:
codex 2026-10-09 14:44:56 +02:00
parent 47912db30f
commit 6871bc71fd
2 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
WORK-RECORDS.md
View file

@ -30,6 +30,7 @@
| workplan | RPF-WP-0051 | finished | — | workplans/RPF-WP-0051-informed-decision-requester-workload-delivery.md |
| workplan | RPF-WP-0052 | finished | — | workplans/RPF-WP-0052-authelia-platform-smtp-admission.md |
| workplan | RPF-WP-0053 | proposed | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
| workplan | RPF-WP-0054 | proposed | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| task | RPF-WP-0015-T01 | done | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md |
| task | RPF-WP-0015-T02 | wait | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md |
| task | RPF-WP-0015-T03 | wait | — | workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md |
@ -127,6 +128,13 @@
| task | RPF-WP-0053-T04 | todo | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
| task | RPF-WP-0053-T05 | progress | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
| task | RPF-WP-0053-T06 | done | — | workplans/RPF-WP-0053-coulomb-paired-backup-admission.md |
| task | RPF-WP-0054-T01 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| task | RPF-WP-0054-T02 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| task | RPF-WP-0054-T03 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| task | RPF-WP-0054-T04 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| task | RPF-WP-0054-T05 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| task | RPF-WP-0054-T06 | todo | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| task | RPF-WP-0054-T07 | wait | — | workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md |
| intake | RPF-IN-0001 | closed | — | intakes/intakes.md |
| intake | RPF-IN-0002 | open | — | intakes/intakes.md |
| intake | RPF-IN-0003 | open | — | intakes/intakes.md |

8
workplans/RPF-WP-0054-keycape-client-secret-generate-lane.md
View file

@ -8,6 +8,7 @@ status: proposed
owner: claude-code
created: "2026-10-09"
updated: "2026-10-09"
state_hub_workstream_id: "73694adc-12a0-5226-a814-ee096d158f60"
---
Demand: net-kingdom SecurityCaseType `oidc-browser-relying-party` 1.0
@ -46,6 +47,7 @@ case's `client-secret-path` artifacts and are unchanged here.
id: RPF-WP-0054-T01
status: todo
priority: high
state_hub_task_id: "38f92db0-317e-5b2b-8bbd-b4af3272cc21"
```
Confirm with key-cape: client_id pattern (proposed `^[a-z0-9][a-z0-9-]{2,62}$`),
@ -66,6 +68,7 @@ id: RPF-WP-0054-T02
status: todo
priority: high
needs_human: true
state_hub_task_id: "4183abc4-4acc-5937-9f27-005feb181025"
```
Two options, both create-only (ACL `create` without `update`, so an existing
@ -99,6 +102,7 @@ id: RPF-WP-0054-T03
status: todo
priority: high
depends_on: [RPF-WP-0054-T01, RPF-WP-0054-T02]
state_hub_task_id: "3e159e92-f5ee-5a92-b887-e06daf7dfbdb"
```
Add `credential.py generate --grant keycape/client-secret-generate --client-id
@ -130,6 +134,7 @@ id: RPF-WP-0054-T04
status: todo
priority: high
depends_on: [RPF-WP-0054-T02]
state_hub_task_id: "74eb1309-df16-5163-9840-ffb88072d09e"
```
Add the grant to `credential-grants/catalog.yaml` (class per T02, TTL 5m, exec
@ -148,6 +153,7 @@ status: todo
priority: high
needs_human: true
depends_on: [RPF-WP-0054-T03, RPF-WP-0054-T04]
state_hub_task_id: "a21d1915-fee9-5c31-89e7-a4560c645950"
```
Founder session:
@ -167,6 +173,7 @@ id: RPF-WP-0054-T06
status: todo
priority: medium
depends_on: [RPF-WP-0054-T05]
state_hub_task_id: "d7015584-3429-5f32-b4bc-0a9b64017c15"
```
Reply to ops-warden `d9f889b1` and ops-mason `789feb39` with the command, the
@ -183,6 +190,7 @@ id: RPF-WP-0054-T07
status: wait
priority: low
depends_on: [RPF-WP-0054-T05]
state_hub_task_id: "d5f0beb6-54dc-502b-9c13-0cb6892ab87d"
```
Design `keycape-client-secret-rotate`: `update` with CAS = current version, an