diff --git a/workplans/RPF-WP-0050-attended-provisioning-preparation.md b/workplans/RPF-WP-0050-attended-provisioning-preparation.md index 930c6fb..1f5f345 100644 --- a/workplans/RPF-WP-0050-attended-provisioning-preparation.md +++ b/workplans/RPF-WP-0050-attended-provisioning-preparation.md @@ -4,11 +4,11 @@ type: workplan title: "Prepare generated attended windows and explicit value-custody choice" domain: financials repo: railiance-platform -status: blocked +status: finished owner: codex topic_slug: platform-services created: "2026-10-03" -updated: "2026-10-04" +updated: "2026-10-10" flavor: implementation state_hub_workstream_id: "0c7e3b0c-1c36-568c-af51-b06f912a0f1d" --- @@ -44,10 +44,8 @@ P3 options and required review boundaries are drafted in the contract. Existing ```task id: RPF-WP-0050-T03 -status: wait +status: cancel priority: medium -depends_on: [RPF-WP-0051-T02, RPF-WP-0035-T02, USER-WP-0035-T02] -blocking_reason: "Platform preparation and founder design choice are complete. Independent informed-decision runtime source/publication, KeyCape custody/registration/issuance, secrets-engine consumer custody coordinates and provider setup-link handoff remain; dependency-requirements.md names the exact owner deliveries." state_hub_task_id: "1ae5a6b8-9c83-5813-982f-ca8ad24be8b5" ``` @@ -91,3 +89,35 @@ P4 accepted for platform-side source review and bounded scaffolding after Warden 2026-10-04 T04 implementation: closed platform metadata schema and `credential-change.py scaffold-lane` authored with deterministic proposed CCR, existing exact-path policy/auth rendering, namespace-restricted draft ESO with annotation containment, and non-executed owner evidence checklist. Shared synthetic platform/Warden pointer fixtures retain unknown workload identity and unconfirmed auth claims. Fourteen focused offline tests pass in isolated prepared source; cross-owner staging fixture acceptance remains before marking T04 done. No admission, credentials, human answer or production execution. 2026-10-04 T04 acceptance: actual applied-source scaffold tests 14/14 and existing window tests 7/7 pass, with CLI help and diff checks. Both actual owner CLIs produced matching cross-owner synthetic fixture drafts; platform independently verified Warden catalog/model loading, exact lane/owner/consumer/risk/CCR pointers and fixture digest, preserved unknown workload, unconfirmed prospective auth, proposed/unresolvable frontdoor, explicit ESO target annotations and non-executed evidence. Six platform artifacts match the independently generated second platform stage byte-for-byte. Receipt: `docs/evidence/2026-10-04-catalog-lane-scaffold-offline.json`. T04 is done for offline source/scaffold/fixture acceptance only. T02 remains the founder custody-choice wait; T03 remains the Custodian dated-window handoff. No admission, actual credentials, schedule or production execution was performed. + + +## Closure and consolidation — 2026-10-10 + +The bounded preparation is complete: checklist renderer (T01), founder choice +of batched attended custody (T02), and platform/Warden offline scaffold +acceptance (T04). The founder supplied the one-time 2026-10-04 10:00 Berlin +window and selected scope directly; CUST-WP-0076 records that cadence closure. +No recurring event or standing execution grant follows from it. + +T03 is cancelled as retired orchestration for that historical window, rather +than marked done: its packet was NOT READY and no eligible completed window +checklist is claimed. Under the founder's request to consolidate the open +security work, its actual owner acceptance obligations stay in their existing +live records: + +- RPF-WP-0051-T02/T03 now record source and native informed-decision requester + delivery acceptance; RPF-WP-0051 is finished, with issuer rotation handed to + RPF-IN-0004 and complete decision-product acceptance in INFD-WP-0007-T07 / + STATE-WP-0096-T03. +- RPF-WP-0035-T02 retains the service-JWT negative claims, unrelated-path + capability denies, bounded lifetime/revocation and consumer opt-in acceptance. + The positive login and custody proofs do not close those checks. +- USER-WP-0035-T02 retains the provider-supported setup-link delivery contract + and intended-recipient evidence. It is not a new platform credential lane. + +The dated packet and owner-return documents are historical preparation +evidence. They must not be used as current approval or replay authority. +No remaining acceptance requirement is removed, no residual demand is created +merely to duplicate those existing owners, and no native acceptance is inferred +from this preparation closure. A future attended run must regenerate and +revalidate its exact reviewed packet against the remaining owner records.