From be8f18c464c88323c7d54b680b995e1e944cae8c Mon Sep 17 00:00:00 2001
From: codex <codex@local>
Date: Tue, 15 Sep 2026 20:57:50 +0200
Subject: [PATCH] Close RPF-WP-0042 after sitting-requester exchange proof.

Verified create-only token, sibling deny, and no sitting POST.
Sittings remain INFD-WP-0002.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
---
 .../2026-09-15-sitting-requester-exchange.json       | 12 ++++++++++++
 workplans/README.md                                  |  2 +-
 ...PF-WP-0042-informed-decision-sitting-requester.md | 10 ++++++++--
 3 files changed, 21 insertions(+), 3 deletions(-)
 create mode 100644 docs/evidence/2026-09-15-sitting-requester-exchange.json

diff --git a/docs/evidence/2026-09-15-sitting-requester-exchange.json b/docs/evidence/2026-09-15-sitting-requester-exchange.json
new file mode 100644
index 0000000..cabe9e9
--- /dev/null
+++ b/docs/evidence/2026-09-15-sitting-requester-exchange.json
@@ -0,0 +1,12 @@
+{
+  "observed_at": "2026-09-15T18:56:32.167229+00:00",
+  "status": "verified",
+  "phase": "requester_verified",
+  "credential_values_emitted": false,
+  "sitting_post": false,
+  "secret_present": true,
+  "signature_verified": true,
+  "excess_scopes_refused": true,
+  "wrong_secret_refused": true,
+  "reader_scope_verified": true
+}
diff --git a/workplans/README.md b/workplans/README.md
index f9df42e..e043d74 100644
--- a/workplans/README.md
+++ b/workplans/README.md
@@ -14,7 +14,7 @@ implementations or independent incidents.
 | [RPF-WP-0035](RPF-WP-0035-credential-lane-implementation.md) | Three remaining lanes: secrets-engine JWT, Fluid operator KV, KeyCape approval clients | Signing T04 is complete; T05 admission answered and awaiting owner approval plus a founder-attended window. |
 | [RPF-WP-0036](RPF-WP-0036-platform-service-assurance.md) | Implemented local assurance/admission; waits for recurring restore evidence, Q2 reception and owner handoff | Run the assurance commands; live acceptance and external ownership remain gated. |
 | [RPF-WP-0038](RPF-WP-0038-forgejo-scaleway-primary-coverage.md) | Native backup, full Scaleway archive recovery and 273 MiB Nextcloud essentials recovery verified; scheduled tier cutover remains | Bind recurring caller/dependencies, verified inventory, quota checks and separate owner retention. |
-| [RPF-WP-0042](RPF-WP-0042-informed-decision-sitting-requester.md) | Sitting-requester custody applied; exchange proof remains | No sitting POST until create-only token proof. |
+
 
 RPF-WP-0036-T02/T05/T07 are complete; T03/T04/T06 retain the remaining
 acceptance gates. Treat credential exposure closure as the highest-priority attended
diff --git a/workplans/RPF-WP-0042-informed-decision-sitting-requester.md b/workplans/RPF-WP-0042-informed-decision-sitting-requester.md
index 4ed10b7..d6f76f1 100644
--- a/workplans/RPF-WP-0042-informed-decision-sitting-requester.md
+++ b/workplans/RPF-WP-0042-informed-decision-sitting-requester.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Allocate Informed Decision sitting-requester custody"
 domain: financials
 repo: railiance-platform
-status: active
+status: finished
 flavor: implementation
 owner: grok
 topic_slug: railiance
@@ -38,7 +38,7 @@ non-resolvable. ESO projection is unapplied source.
 
 ```task
 id: RPF-WP-0042-T02
-status: progress
+status: done
 priority: high
 state_hub_task_id: "c6fbf99c-de2b-55be-9f0c-58be9fe7c518"
 ```
@@ -66,3 +66,9 @@ and `scripts/prove-sitting-requester-exchange.sh`. It does not POST sittings.
 failed at `preflight` with no failure class. A first browser sign-in did not
 complete. Retry records a named failure class, reads KV through `bao`, and
 overwrites a failed receipt only.
+
+Retry 2026-09-15T18:56:32Z: receipt `verified`. Exact KV read, sibling and
+parent deny, create-only RS256 token, excess scopes refused, wrong secret
+refused. No sitting POST. Evidence:
+`docs/evidence/2026-09-15-sitting-requester-exchange.json`. Platform custody
+for this client is complete; sittings are INFD-WP-0002.