Separate Core Hub onboarding from archived apps-pg identities

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883

workplans/RPF-WP-0030-core-hub-platform-onboarding.md

@@ -1,5 +1,5 @@
 ---
-id: RPF-WP-0021
+id: RPF-WP-0030
 type: workplan
 title: "Unblock rapp-core-hub publication and platform onboarding"
 domain: financials
@@ -8,17 +8,17 @@ status: finished
 owner: codex
 topic_slug: railiance
 created: "2026-08-20"
-updated: "2026-08-21"
+updated: "2026-09-05"
 related:
   - CORE-WP-0011
   - RAPPCOREHUB-WP-0001
   - RAPP-POSTGRES-WP-0003
 origin: request
 origin_ref: CORE-WP-0011
-state_hub_workstream_id: "aa7fe3ff-a76c-5f26-a1e0-a35e48b28d60"
+state_hub_workstream_id: "f7a13cc2-7b1f-5644-89a8-b4e9a934b018"
 ---
 
-# RPF-WP-0021 — Core Hub platform onboarding
+# RPF-WP-0030 — Core Hub platform onboarding
 
 ## Goal
 
@@ -67,10 +67,10 @@ retirement of the old runtime. Those remain explicit operator gates in
 ## T01 — Publish and register `rapp-core-hub`
 
 ```task
-id: RPF-WP-0021-T01
+id: RPF-WP-0030-T01
 status: done
 priority: high
-state_hub_task_id: "a7cd3fc0-4469-55a6-aed0-a8cacb34c033"
+state_hub_task_id: "b561e71e-213e-506f-8eaf-578eef54977f"
 ```
 
 Under an attended `net-kingdom-admins` OIDC login to
@@ -109,10 +109,10 @@ State Hub; workplan UUID assignment remains with the production registrar.
 ## T02 — Accept the Core Hub PostgreSQL consumer
 
 ```task
-id: RPF-WP-0021-T02
+id: RPF-WP-0030-T02
 status: done
 priority: high
-state_hub_task_id: "7cac453b-2e85-56d9-abae-d983e382246b"
+state_hub_task_id: "5ed30960-336c-5650-96c6-9395ea7f2584"
 ```
 
 Review `/home/worsch/rapp-core-hub/handoffs/postgres-consumer.yaml` in
@@ -156,10 +156,10 @@ deletion, and names `core_hub_owner` as owner.
 ## T03 — Correct the runtime credential delivery contract
 
 ```task
-id: RPF-WP-0021-T03
+id: RPF-WP-0030-T03
 status: done
 priority: high
-state_hub_task_id: "223d5a77-b7c3-5d1a-a93c-4cb9628b457a"
+state_hub_task_id: "ad022406-0ae5-58db-9b9d-2e958ab73237"
 ```
 
 Separate the two credential sources before shadow deployment:
@@ -200,10 +200,10 @@ refresh interval restored.
 ## T04 — Declare and apply the OpenBao/ESO lanes
 
 ```task
-id: RPF-WP-0021-T04
+id: RPF-WP-0030-T04
 status: done
 priority: high
-state_hub_task_id: "50713b54-38a8-543d-8c74-0e3fa186fbb8"
+state_hub_task_id: "d4c2d69d-186a-5d0d-9ab7-5a4a48cb1e8d"
 ```
 
 After T03 fixes the consuming contract:
@@ -258,10 +258,10 @@ all passed. `CCR-2026-0013` is verified.
 ## T05 — Support the private shadow restore and verification
 
 ```task
-id: RPF-WP-0021-T05
+id: RPF-WP-0030-T05
 status: done
 priority: high
-state_hub_task_id: "ba4984f9-c6c5-5eb2-b4c4-83cbec59298c"
+state_hub_task_id: "1b608d2e-d660-50dd-8765-c429afbcb14c"
 ```
 
 After T01-T04, support `CORE-WP-0011-T03`: label the namespace for

workplans/RPF-WP-0031-workplan-identity-collision.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Separate duplicated apps-pg and Core Hub workplan identities"
 domain: financials
 repo: railiance-platform
-status: blocked
+status: active
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-05"
@@ -37,7 +37,7 @@ updates. Existing source UUIDs have not been changed.
 
 ```task
 id: RPF-WP-0031-T02
-status: wait
+status: progress
 priority: high
 state_hub_task_id: "2990a940-634c-5d76-b74c-740de8c36b16"
 ```
@@ -49,3 +49,8 @@ After approval, apply the exact proposal, preserve the archived identity and
 all completion evidence, check uniqueness across root and archived workplans,
 commit/push, and run `rmgr sync`. Inspect any retirement refusal before proceeding;
 never blanket-acknowledge unrelated retirements.
+
+
+User approved the exact exception on 2026-09-05. Applied the six proposed UUIDs
+and four evidence-reference updates; the archived file is byte-for-byte unchanged.
+Source uniqueness and authoritative reconciliation are being verified.