coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Close stale custody approval task from resolved founder evidence
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
codex 2026-10-11 20:05:16 +02:00
parent 390894f4da
commit fac2f28bcd
1 changed files with 14 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

17
workplans/RPF-WP-0035-credential-lane-implementation.md
View file

@ -829,12 +829,11 @@ T08 now explicitly waits for formerly-valid audit-bearer revocation acceptance f
```task
id: RPF-WP-0035-T09
status: wait
needs_human: true
status: done
needs_human: false
priority: high
decision_id: 2ab717e1-7881-491e-aed4-28946550c289
depends_on: []
blocking_reason: "Waits for founder approvals: A1 ops-mason design (keycape-secrets-engine-openbao-client-custody, MASON-WP-0009); A2 revised CCR-2026-0033 plus sibling operator reader CCR-2026-0034 (platform-owner, key-cape-owner, net-kingdom-owner reviews; bound claims confirmed for both readers incl. groups=net-kingdom-admins and /assurance/level=aal2); A3 the exact custody-child decision id recorded in the CCR-2026-0033 review (not boundary decision 632a8893). secrets-engine D1-D4 are superseded (no consumer copy)."
state_hub_task_id: "7c753be6-42f1-58a6-a4a4-a7ed686f461f"
```
@ -850,6 +849,18 @@ immediately → live issuance check (KEY-WP-0037-T04) → OpenBao JWT role/login
proof (RPF-WP-0035-T02). Each live step after the custody run needs its own go.
2026-10-11 evidence reconciliation: T09's approval obligation is complete.
Authoritative founder decision 2ab717e1-7881-491e-aed4-28946550c289 is resolved,
decided by Bernd Worsch at2026-10-06T13:07:18.627943Z, and explicitly covers
A1 design, A2 CCR33/CCR34 plus owner reviews/bound claims, and A3 one custody run.
The approval comments in both CCRs record those exact grants; both source records
are applied. MASON-WP-0009-T02/T03 additionally record the October8 approval/owner-delivery
reconciliation and reference KeyCape
`docs/evidence/2026-10-07-secrets-engine-openbao-issuance.json`. Closing this approval task clears
its obsolete human gate. It grants no new run, credential access, rotation or
service execution: RPF35T02/T12, MASON9T05 and SECRETS8T06 retain their actual
native/adoption obligations. Historical per-step exclusions remain above.
## Retire the approval-engine-operator client delivery and custody (CCR-2026-0018)
```task