diff --git a/workplans/RPF-WP-0069-bounded-executor-lanes.md b/workplans/RPF-WP-0069-bounded-executor-lanes.md index f441fa6..1f57505 100644 --- a/workplans/RPF-WP-0069-bounded-executor-lanes.md +++ b/workplans/RPF-WP-0069-bounded-executor-lanes.md @@ -48,6 +48,7 @@ priority: high needs_human: true decision_id: c29c6eda-fa13-4d53-8293-17261eb437c1 blocked_on: human +blocking_reason: "Founder approval of CCR-2026-0058 and choice of standing or window-scoped write role (hub decision c29c6eda)" ``` platform-owner and net-kingdom-owner approve or change CCR-2026-0058. The founder chooses @@ -60,6 +61,7 @@ confirmed only after `sso/nk-bind-executor` exists from the reviewed rapp-* pack id: RPF-WP-0069-T03 status: wait priority: high +depends_on: [RPF-WP-0069-T02] state_hub_task_id: "6b456804-c408-53bf-8e1d-49723108fca6" ``` @@ -74,6 +76,8 @@ setup/verify; write it once approval exists. The founder runs it. id: RPF-WP-0069-T04 status: wait priority: medium +blocked_on: human +blocking_reason: "Founder accepts widening CCR-2026-0057 runtime_access; scheduled with NK-WP-0056-T10 once sso/nk-bind-executor exists" state_hub_task_id: "5615be47-2b25-5f7d-a1c2-d4391b1377d0" ``` @@ -87,6 +91,8 @@ CCR-2026-0057's `runtime_access: false`. Waits for T10 scheduling and the Servic id: RPF-WP-0069-T05 status: wait priority: medium +blocked_on: dependency +blocking_reason: "audit-core admits and names the sender (AUDIT-WP-0018-T02)" state_hub_task_id: "5c582aef-ee9d-56ab-a4eb-2019933f00ac" ``` @@ -100,6 +106,10 @@ ESO into `sso/nk-bind-executor-audit`, ClusterSecretStore restricted to `sso`. id: RPF-WP-0069-T06 status: wait priority: medium +needs_human: true +decision_id: 3d0c8f86-7b9c-456b-8951-5ae889829118 +blocked_on: human +blocking_reason: "Founder chooses bind self-rotation (no account needed) or a lldap_password_manager account" state_hub_task_id: "1456b467-f7c9-529d-9f3e-39404aaa36c6" ```