{ "review_date": "2026-09-05", "basis": "source and dated evidence; no fresh live health audit", "source_revisions": { "railiance-platform": { "head": "9d958f8e09a057d6ad688dc77001368b5feea029", "working_tree_dirty": true }, "railiance-telemetry": { "head": "aa59e805ba218323eb19395484cd1c876684abfc", "working_tree_dirty": false }, "railiance-master": { "head": "5ffd7d1b40d56249f490a318e728047fd3517c4c", "working_tree_dirty": false }, "railiance-infra": { "head": "f3e8bf3ab4b1dafa4d0b251b88ab2ef23a30c37b", "working_tree_dirty": false }, "railiance-cluster": { "head": "db7860ec2e2bda803d5bc6f0a467935e0d98697f", "working_tree_dirty": false }, "railiance-enablement": { "head": "f91a5298cb9ad07b7bc9c488a7429f89c55f651d", "working_tree_dirty": false }, "railiance-forge": { "head": "e395e5e9c196fe7cea9cd2be513554e493e675ee", "working_tree_dirty": false }, "rapp-openbao": { "head": "89bc86b8aff549953ec744395ca47578aaac7591", "working_tree_dirty": false }, "rapp-postgres": { "head": "2b7fe861f984f8539ca63ede662fe5719ace895a", "working_tree_dirty": false }, "net-kingdom": { "head": "4e07d60ff17a0fe74c23d352aafaae08a809e413", "working_tree_dirty": false }, "key-cape": { "head": "30fa8570aaff6e03c35617b265201b2ebf2c0094", "working_tree_dirty": false }, "secrets-engine": { "head": "ebdff586fe60d165bc717f3fa1de8e037fd5502a", "working_tree_dirty": false }, "ops-mason": { "head": "f920bcad1af688197c15417257b392aec42db9e7", "working_tree_dirty": true }, "state-hub": { "head": "2c60e5bcf76c31a2d2336f104ac9d5f01fc22e90", "working_tree_dirty": true }, "fluid-telegram": { "head": "f7af151f37a7d652fe389daf43efc9be0d3e2bc0", "working_tree_dirty": false }, "audit-core": { "head": "95dcb78e17d46889c17b55e3ba1aadbcceec6a99", "working_tree_dirty": false }, "flex-auth": { "head": "56940727bfb36aec705318b0128599f367256c23", "working_tree_dirty": false }, "repo-manager": { "head": "55002b6fc954bf6f61eeac20fb7d50d52aee7b75", "working_tree_dirty": false } }, "before": [ { "id": "RPF-WP-ADHOC-2026-08-23", "path": "workplans/ADHOC-2026-08-23.md", "status": "finished", "tasks": [ { "id": "RPF-WP-ADHOC-2026-08-23-T01", "status": "done" }, { "id": "RPF-WP-ADHOC-2026-08-23-T02", "status": "done" } ] }, { "id": "RPF-WP-0001", "path": "workplans/RPF-WP-0001-credential-request-and-lease-broker.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0001-T01", "status": "done" }, { "id": "RPF-WP-0001-T02", "status": "done" }, { "id": "RPF-WP-0001-T03", "status": "done" }, { "id": "RPF-WP-0001-T04", "status": "done" }, { "id": "RPF-WP-0001-T05", "status": "done" }, { "id": "RPF-WP-0001-T06", "status": "done" }, { "id": "RPF-WP-0001-T07", "status": "done" }, { "id": "RPF-WP-0001-T08", "status": "done" }, { "id": "RPF-WP-0001-T09", "status": "done" }, { "id": "RPF-WP-0001-T10", "status": "done" } ] }, { "id": "RPF-WP-0002", "path": "workplans/RPF-WP-0002-openbao-approved-automation-delegation.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0002-T01", "status": "done" }, { "id": "RPF-WP-0002-T02", "status": "done" }, { "id": "RPF-WP-0002-T03", "status": "done" }, { "id": "RPF-WP-0002-T04", "status": "done" }, { "id": "RPF-WP-0002-T05", "status": "done" } ] }, { "id": "RPF-WP-0003", "path": "workplans/RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0003-T01", "status": "done" }, { "id": "RPF-WP-0003-T02", "status": "done" }, { "id": "RPF-WP-0003-T03", "status": "done" }, { "id": "RPF-WP-0003-T04", "status": "done" }, { "id": "RPF-WP-0003-T05", "status": "done" }, { "id": "RPF-WP-0003-T06", "status": "done" }, { "id": "RPF-WP-0003-T07", "status": "done" } ] }, { "id": "RPF-WP-0004", "path": "workplans/RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0004-T01", "status": "done" }, { "id": "RPF-WP-0004-T02", "status": "done" }, { "id": "RPF-WP-0004-T03", "status": "done" }, { "id": "RPF-WP-0004-T04", "status": "done" }, { "id": "RPF-WP-0004-T05", "status": "done" }, { "id": "RPF-WP-0004-T06", "status": "done" }, { "id": "RPF-WP-0004-T07", "status": "done" }, { "id": "RPF-WP-0004-T08", "status": "cancel" } ] }, { "id": "RPF-WP-0005", "path": "workplans/RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0005-T01", "status": "done" }, { "id": "RPF-WP-0005-T02", "status": "done" }, { "id": "RPF-WP-0005-T03", "status": "done" }, { "id": "RPF-WP-0005-T04", "status": "done" } ] }, { "id": "RPF-WP-0006", "path": "workplans/RPF-WP-0006-rapp-openbao-extraction-boundary.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0006-T01", "status": "done" }, { "id": "RPF-WP-0006-T02", "status": "done" }, { "id": "RPF-WP-0006-T03", "status": "done" }, { "id": "RPF-WP-0006-T04", "status": "done" } ] }, { "id": "RPF-WP-0007", "path": "workplans/RPF-WP-0007-forgejo-admin-pat-openbao-cutover.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0007-T01", "status": "done" }, { "id": "RPF-WP-0007-T02", "status": "done" }, { "id": "RPF-WP-0007-T03", "status": "done" }, { "id": "RPF-WP-0007-T04", "status": "done" } ] }, { "id": "RPF-WP-0008", "path": "workplans/RPF-WP-0008-credential-change-suite-stabilization.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0008-T01", "status": "done" }, { "id": "RPF-WP-0008-T02", "status": "done" }, { "id": "RPF-WP-0008-T03", "status": "done" }, { "id": "RPF-WP-0008-T04", "status": "done" } ] }, { "id": "RPF-WP-0009", "path": "workplans/RPF-WP-0009-platform-rapp-consistency.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0009-T01", "status": "done" }, { "id": "RPF-WP-0009-T02", "status": "done" }, { "id": "RPF-WP-0009-T03", "status": "done" }, { "id": "RPF-WP-0009-T04", "status": "done" }, { "id": "RPF-WP-0009-T05", "status": "done" }, { "id": "RPF-WP-0009-T06", "status": "done" } ] }, { "id": "RPF-WP-0010", "path": "workplans/RPF-WP-0010-apps-pg-resource-evidence.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0010-T01", "status": "done" }, { "id": "RPF-WP-0010-T02", "status": "done" }, { "id": "RPF-WP-0010-T03", "status": "done" } ] }, { "id": "RPF-WP-0011", "path": "workplans/RPF-WP-0011-architecture-cleanup-backlog.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0011-T01", "status": "done" }, { "id": "RPF-WP-0011-T02", "status": "done" }, { "id": "RPF-WP-0011-T03", "status": "done" }, { "id": "RPF-WP-0011-T04", "status": "done" }, { "id": "RPF-WP-0011-T05", "status": "done" } ] }, { "id": "RPF-WP-0012", "path": "workplans/RPF-WP-0012-consumption-mode-enforcement.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0012-T01", "status": "done" } ] }, { "id": "RPF-WP-0013", "path": "workplans/RPF-WP-0013-agent-high-risk-boundary-coverage.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0013-T01", "status": "done" }, { "id": "RPF-WP-0013-T02", "status": "done" }, { "id": "RPF-WP-0013-T03", "status": "done" }, { "id": "RPF-WP-0013-T04", "status": "done" }, { "id": "RPF-WP-0013-T05", "status": "done" }, { "id": "RPF-WP-0013-T06", "status": "done" } ] }, { "id": "RPF-WP-0014", "path": "workplans/RPF-WP-0014-hub-core-candidate-credential-lanes.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0014-T01", "status": "done" }, { "id": "RPF-WP-0014-T02", "status": "done" }, { "id": "RPF-WP-0014-T03", "status": "done" } ] }, { "id": "RPF-WP-0015", "path": "workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md", "status": "active", "tasks": [ { "id": "RPF-WP-0015-T01", "status": "done" }, { "id": "RPF-WP-0015-T02", "status": "progress" }, { "id": "RPF-WP-0015-T03", "status": "progress" }, { "id": "RPF-WP-0015-T04", "status": "done" } ] }, { "id": "RPF-WP-0016", "path": "workplans/RPF-WP-0016-versioned-ephemeral-custody-lifecycle.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0016-T01", "status": "done" }, { "id": "RPF-WP-0016-T02", "status": "done" }, { "id": "RPF-WP-0016-T03", "status": "done" }, { "id": "RPF-WP-0016-T04", "status": "done" }, { "id": "RPF-WP-0016-T05", "status": "done" }, { "id": "RPF-WP-0016-T06", "status": "done" } ] }, { "id": "RPF-WP-0017", "path": "workplans/RPF-WP-0017-attended-login-output-containment.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0017-T01", "status": "done" } ] }, { "id": "RPF-WP-0018", "path": "workplans/RPF-WP-0018-policy-surface-alignment.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0018-T01", "status": "done" }, { "id": "RPF-WP-0018-T02", "status": "done" }, { "id": "RPF-WP-0018-T03", "status": "done" }, { "id": "RPF-WP-0018-T04", "status": "done" }, { "id": "RPF-WP-0018-T05", "status": "done" }, { "id": "RPF-WP-0018-T06", "status": "done" }, { "id": "RPF-WP-0018-T07", "status": "done" } ] }, { "id": "RPF-WP-0019", "path": "workplans/RPF-WP-0019-apps-pg-recoverability-and-controls.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0019-T01", "status": "done" }, { "id": "RPF-WP-0019-T02", "status": "done" }, { "id": "RPF-WP-0019-T03", "status": "done" }, { "id": "RPF-WP-0019-T04", "status": "done" } ] }, { "id": "RPF-WP-0020", "path": "workplans/RPF-WP-0020-ccr-schema-drift.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0020-T01", "status": "done" }, { "id": "RPF-WP-0020-T02", "status": "done" }, { "id": "RPF-WP-0020-T03", "status": "done" }, { "id": "RPF-WP-0020-T04", "status": "done" } ] }, { "id": "RPF-WP-0025", "path": "workplans/RPF-WP-0025-openbao-operator-only-access.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0025-T01", "status": "done" }, { "id": "RPF-WP-0025-T02", "status": "done" }, { "id": "RPF-WP-0025-T03", "status": "wait" } ] }, { "id": "RPF-WP-0026", "path": "workplans/RPF-WP-0026-flex-auth-credential-grant-integration.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0026-T01", "status": "done" }, { "id": "RPF-WP-0026-T02", "status": "done" }, { "id": "RPF-WP-0026-T03", "status": "done" } ] }, { "id": "RPF-WP-0027", "path": "workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md", "status": "active", "tasks": [ { "id": "RPF-WP-0027-T01", "status": "done" }, { "id": "RPF-WP-0027-T02", "status": "done" }, { "id": "RPF-WP-0027-T03", "status": "progress" }, { "id": "RPF-WP-0027-T04", "status": "wait" }, { "id": "RPF-WP-0027-T05", "status": "wait" }, { "id": "RPF-WP-0027-T06", "status": "progress" } ] }, { "id": "RPF-WP-0028", "path": "workplans/RPF-WP-0028-durable-live-image-inventory.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0028-T01", "status": "done" }, { "id": "RPF-WP-0028-T02", "status": "done" } ] }, { "id": "RPF-WP-0029", "path": "workplans/RPF-WP-0029-backup-credential-default-removal.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0029-T01", "status": "done" }, { "id": "RPF-WP-0029-T02", "status": "wait" } ] }, { "id": "RPF-WP-0030", "path": "workplans/RPF-WP-0030-core-hub-platform-onboarding.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0030-T01", "status": "done" }, { "id": "RPF-WP-0030-T02", "status": "done" }, { "id": "RPF-WP-0030-T03", "status": "done" }, { "id": "RPF-WP-0030-T04", "status": "done" }, { "id": "RPF-WP-0030-T05", "status": "done" } ] }, { "id": "RPF-WP-0031", "path": "workplans/RPF-WP-0031-workplan-identity-collision.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0031-T01", "status": "done" }, { "id": "RPF-WP-0031-T02", "status": "done" } ] }, { "id": "RPF-WP-0032", "path": "workplans/RPF-WP-0032-secrets-engine-service-jwt-design.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0032-T01", "status": "done" }, { "id": "RPF-WP-0032-T02", "status": "wait" } ] }, { "id": "RPF-WP-0033", "path": "workplans/RPF-WP-0033-fluid-telegram-operator-kv-design.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0033-T01", "status": "done" }, { "id": "RPF-WP-0033-T02", "status": "wait" } ] }, { "id": "RPF-WP-0034", "path": "workplans/RPF-WP-0034-state-hub-preflight-signing-design.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0034-T01", "status": "done" }, { "id": "RPF-WP-0034-T02", "status": "wait" } ] }, { "id": "RAIL-PL-WP-0002", "path": "workplans/archived/260702-RAIL-PL-WP-0002-openbao-platform-secrets-service.md", "status": "finished", "tasks": [ { "id": "RAIL-PL-WP-0002-T01", "status": "done" }, { "id": "RAIL-PL-WP-0002-T02", "status": "done" }, { "id": "RAIL-PL-WP-0002-T03", "status": "done" }, { "id": "RAIL-PL-WP-0002-T04", "status": "done" }, { "id": "RAIL-PL-WP-0002-T05", "status": "done" }, { "id": "RAIL-PL-WP-0002-T06", "status": "done" }, { "id": "RAIL-PL-WP-0002-T07", "status": "done" } ] }, { "id": "RPF-WP-0021", "path": "workplans/archived/260702-RPF-WP-0021-apps-pg-shared-cluster.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0021-T01", "status": "done" }, { "id": "RPF-WP-0021-T02", "status": "done" }, { "id": "RPF-WP-0021-T03", "status": "done" }, { "id": "RPF-WP-0021-T04", "status": "done" }, { "id": "RPF-WP-0021-T05", "status": "done" }, { "id": "RPF-WP-0021-T06", "status": "done" } ] }, { "id": "RPF-WP-0022", "path": "workplans/archived/260702-RPF-WP-0022-argocd-gitops-bootstrap.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0022-T01", "status": "done" }, { "id": "RPF-WP-0022-T02", "status": "done" }, { "id": "RPF-WP-0022-T03", "status": "done" }, { "id": "RPF-WP-0022-T04", "status": "done" }, { "id": "RPF-WP-0022-T05", "status": "done" }, { "id": "RPF-WP-0022-T06", "status": "done" } ] }, { "id": "RPF-WP-0023", "path": "workplans/archived/260702-RPF-WP-0023-workload-kv-access-lanes.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0023-T01", "status": "done" }, { "id": "RPF-WP-0023-T02", "status": "done" }, { "id": "RPF-WP-0023-T03", "status": "done" }, { "id": "RPF-WP-0023-T04", "status": "done" }, { "id": "RPF-WP-0023-T05", "status": "done" }, { "id": "RPF-WP-0023-T06", "status": "done" }, { "id": "RPF-WP-0023-T07", "status": "done" } ] }, { "id": "RPF-WP-0024", "path": "workplans/archived/260702-RPF-WP-0024-credential-change-approval-workflow.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0024-T01", "status": "done" }, { "id": "RPF-WP-0024-T02", "status": "done" }, { "id": "RPF-WP-0024-T03", "status": "done" }, { "id": "RPF-WP-0024-T04", "status": "done" }, { "id": "RPF-WP-0024-T05", "status": "done" }, { "id": "RPF-WP-0024-T06", "status": "done" }, { "id": "RPF-WP-0024-T07", "status": "done" }, { "id": "RPF-WP-0024-T08", "status": "done" }, { "id": "RPF-WP-0024-T09", "status": "done" } ] }, { "id": "RAIL-PL-WP-0001", "path": "workplans/archived/RAIL-PL-WP-0001-platform-baseline.md", "status": "archived", "tasks": [ { "id": "RAIL-PL-WP-0001-T01", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T02", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T03", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T04", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T05", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T06", "status": "cancelled" } ] } ], "after": [ { "id": "RPF-WP-0015", "path": "workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0015-T01", "status": "done" }, { "id": "RPF-WP-0015-T02", "status": "wait" }, { "id": "RPF-WP-0015-T03", "status": "wait" }, { "id": "RPF-WP-0015-T04", "status": "done" } ] }, { "id": "RPF-WP-0025", "path": "workplans/RPF-WP-0025-openbao-operator-only-access.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0025-T01", "status": "done" }, { "id": "RPF-WP-0025-T02", "status": "done" }, { "id": "RPF-WP-0025-T03", "status": "wait" } ] }, { "id": "RPF-WP-0027", "path": "workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0027-T01", "status": "done" }, { "id": "RPF-WP-0027-T02", "status": "done" }, { "id": "RPF-WP-0027-T03", "status": "wait" }, { "id": "RPF-WP-0027-T04", "status": "done" }, { "id": "RPF-WP-0027-T05", "status": "wait" }, { "id": "RPF-WP-0027-T06", "status": "wait" } ] }, { "id": "RPF-WP-0029", "path": "workplans/RPF-WP-0029-backup-credential-default-removal.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0029-T01", "status": "done" }, { "id": "RPF-WP-0029-T02", "status": "wait" } ] }, { "id": "RPF-WP-0035", "path": "workplans/RPF-WP-0035-credential-lane-implementation.md", "status": "blocked", "tasks": [ { "id": "RPF-WP-0035-T01", "status": "done" }, { "id": "RPF-WP-0035-T02", "status": "wait" }, { "id": "RPF-WP-0035-T03", "status": "wait" }, { "id": "RPF-WP-0035-T04", "status": "wait" } ] }, { "id": "RPF-WP-0036", "path": "workplans/RPF-WP-0036-platform-service-assurance.md", "status": "ready", "tasks": [ { "id": "RPF-WP-0036-T01", "status": "done" }, { "id": "RPF-WP-0036-T02", "status": "todo" }, { "id": "RPF-WP-0036-T03", "status": "todo" }, { "id": "RPF-WP-0036-T04", "status": "todo" }, { "id": "RPF-WP-0036-T05", "status": "todo" }, { "id": "RPF-WP-0036-T06", "status": "todo" }, { "id": "RPF-WP-0036-T07", "status": "todo" } ] }, { "id": "RAIL-PL-WP-0002", "path": "workplans/archived/260702-RAIL-PL-WP-0002-openbao-platform-secrets-service.md", "status": "finished", "tasks": [ { "id": "RAIL-PL-WP-0002-T01", "status": "done" }, { "id": "RAIL-PL-WP-0002-T02", "status": "done" }, { "id": "RAIL-PL-WP-0002-T03", "status": "done" }, { "id": "RAIL-PL-WP-0002-T04", "status": "done" }, { "id": "RAIL-PL-WP-0002-T05", "status": "done" }, { "id": "RAIL-PL-WP-0002-T06", "status": "done" }, { "id": "RAIL-PL-WP-0002-T07", "status": "done" } ] }, { "id": "RPF-WP-0021", "path": "workplans/archived/260702-RPF-WP-0021-apps-pg-shared-cluster.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0021-T01", "status": "done" }, { "id": "RPF-WP-0021-T02", "status": "done" }, { "id": "RPF-WP-0021-T03", "status": "done" }, { "id": "RPF-WP-0021-T04", "status": "done" }, { "id": "RPF-WP-0021-T05", "status": "done" }, { "id": "RPF-WP-0021-T06", "status": "done" } ] }, { "id": "RPF-WP-0022", "path": "workplans/archived/260702-RPF-WP-0022-argocd-gitops-bootstrap.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0022-T01", "status": "done" }, { "id": "RPF-WP-0022-T02", "status": "done" }, { "id": "RPF-WP-0022-T03", "status": "done" }, { "id": "RPF-WP-0022-T04", "status": "done" }, { "id": "RPF-WP-0022-T05", "status": "done" }, { "id": "RPF-WP-0022-T06", "status": "done" } ] }, { "id": "RPF-WP-0023", "path": "workplans/archived/260702-RPF-WP-0023-workload-kv-access-lanes.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0023-T01", "status": "done" }, { "id": "RPF-WP-0023-T02", "status": "done" }, { "id": "RPF-WP-0023-T03", "status": "done" }, { "id": "RPF-WP-0023-T04", "status": "done" }, { "id": "RPF-WP-0023-T05", "status": "done" }, { "id": "RPF-WP-0023-T06", "status": "done" }, { "id": "RPF-WP-0023-T07", "status": "done" } ] }, { "id": "RPF-WP-0024", "path": "workplans/archived/260702-RPF-WP-0024-credential-change-approval-workflow.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0024-T01", "status": "done" }, { "id": "RPF-WP-0024-T02", "status": "done" }, { "id": "RPF-WP-0024-T03", "status": "done" }, { "id": "RPF-WP-0024-T04", "status": "done" }, { "id": "RPF-WP-0024-T05", "status": "done" }, { "id": "RPF-WP-0024-T06", "status": "done" }, { "id": "RPF-WP-0024-T07", "status": "done" }, { "id": "RPF-WP-0024-T08", "status": "done" }, { "id": "RPF-WP-0024-T09", "status": "done" } ] }, { "id": "RPF-WP-ADHOC-2026-08-23", "path": "workplans/archived/260905-ADHOC-2026-08-23.md", "status": "finished", "tasks": [ { "id": "RPF-WP-ADHOC-2026-08-23-T01", "status": "done" }, { "id": "RPF-WP-ADHOC-2026-08-23-T02", "status": "done" } ] }, { "id": "RPF-WP-0001", "path": "workplans/archived/260905-RPF-WP-0001-credential-request-and-lease-broker.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0001-T01", "status": "done" }, { "id": "RPF-WP-0001-T02", "status": "done" }, { "id": "RPF-WP-0001-T03", "status": "done" }, { "id": "RPF-WP-0001-T04", "status": "done" }, { "id": "RPF-WP-0001-T05", "status": "done" }, { "id": "RPF-WP-0001-T06", "status": "done" }, { "id": "RPF-WP-0001-T07", "status": "done" }, { "id": "RPF-WP-0001-T08", "status": "done" }, { "id": "RPF-WP-0001-T09", "status": "done" }, { "id": "RPF-WP-0001-T10", "status": "done" } ] }, { "id": "RPF-WP-0002", "path": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0002-T01", "status": "done" }, { "id": "RPF-WP-0002-T02", "status": "done" }, { "id": "RPF-WP-0002-T03", "status": "done" }, { "id": "RPF-WP-0002-T04", "status": "done" }, { "id": "RPF-WP-0002-T05", "status": "done" } ] }, { "id": "RPF-WP-0003", "path": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0003-T01", "status": "done" }, { "id": "RPF-WP-0003-T02", "status": "done" }, { "id": "RPF-WP-0003-T03", "status": "done" }, { "id": "RPF-WP-0003-T04", "status": "done" }, { "id": "RPF-WP-0003-T05", "status": "done" }, { "id": "RPF-WP-0003-T06", "status": "done" }, { "id": "RPF-WP-0003-T07", "status": "done" } ] }, { "id": "RPF-WP-0004", "path": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0004-T01", "status": "done" }, { "id": "RPF-WP-0004-T02", "status": "done" }, { "id": "RPF-WP-0004-T03", "status": "done" }, { "id": "RPF-WP-0004-T04", "status": "done" }, { "id": "RPF-WP-0004-T05", "status": "done" }, { "id": "RPF-WP-0004-T06", "status": "done" }, { "id": "RPF-WP-0004-T07", "status": "done" }, { "id": "RPF-WP-0004-T08", "status": "cancel" } ] }, { "id": "RPF-WP-0005", "path": "workplans/archived/260905-RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0005-T01", "status": "done" }, { "id": "RPF-WP-0005-T02", "status": "done" }, { "id": "RPF-WP-0005-T03", "status": "done" }, { "id": "RPF-WP-0005-T04", "status": "done" } ] }, { "id": "RPF-WP-0006", "path": "workplans/archived/260905-RPF-WP-0006-rapp-openbao-extraction-boundary.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0006-T01", "status": "done" }, { "id": "RPF-WP-0006-T02", "status": "done" }, { "id": "RPF-WP-0006-T03", "status": "done" }, { "id": "RPF-WP-0006-T04", "status": "done" } ] }, { "id": "RPF-WP-0007", "path": "workplans/archived/260905-RPF-WP-0007-forgejo-admin-pat-openbao-cutover.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0007-T01", "status": "done" }, { "id": "RPF-WP-0007-T02", "status": "done" }, { "id": "RPF-WP-0007-T03", "status": "done" }, { "id": "RPF-WP-0007-T04", "status": "done" } ] }, { "id": "RPF-WP-0008", "path": "workplans/archived/260905-RPF-WP-0008-credential-change-suite-stabilization.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0008-T01", "status": "done" }, { "id": "RPF-WP-0008-T02", "status": "done" }, { "id": "RPF-WP-0008-T03", "status": "done" }, { "id": "RPF-WP-0008-T04", "status": "done" } ] }, { "id": "RPF-WP-0009", "path": "workplans/archived/260905-RPF-WP-0009-platform-rapp-consistency.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0009-T01", "status": "done" }, { "id": "RPF-WP-0009-T02", "status": "done" }, { "id": "RPF-WP-0009-T03", "status": "done" }, { "id": "RPF-WP-0009-T04", "status": "done" }, { "id": "RPF-WP-0009-T05", "status": "done" }, { "id": "RPF-WP-0009-T06", "status": "done" } ] }, { "id": "RPF-WP-0010", "path": "workplans/archived/260905-RPF-WP-0010-apps-pg-resource-evidence.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0010-T01", "status": "done" }, { "id": "RPF-WP-0010-T02", "status": "done" }, { "id": "RPF-WP-0010-T03", "status": "done" } ] }, { "id": "RPF-WP-0011", "path": "workplans/archived/260905-RPF-WP-0011-architecture-cleanup-backlog.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0011-T01", "status": "done" }, { "id": "RPF-WP-0011-T02", "status": "done" }, { "id": "RPF-WP-0011-T03", "status": "done" }, { "id": "RPF-WP-0011-T04", "status": "done" }, { "id": "RPF-WP-0011-T05", "status": "done" } ] }, { "id": "RPF-WP-0012", "path": "workplans/archived/260905-RPF-WP-0012-consumption-mode-enforcement.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0012-T01", "status": "done" } ] }, { "id": "RPF-WP-0013", "path": "workplans/archived/260905-RPF-WP-0013-agent-high-risk-boundary-coverage.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0013-T01", "status": "done" }, { "id": "RPF-WP-0013-T02", "status": "done" }, { "id": "RPF-WP-0013-T03", "status": "done" }, { "id": "RPF-WP-0013-T04", "status": "done" }, { "id": "RPF-WP-0013-T05", "status": "done" }, { "id": "RPF-WP-0013-T06", "status": "done" } ] }, { "id": "RPF-WP-0014", "path": "workplans/archived/260905-RPF-WP-0014-hub-core-candidate-credential-lanes.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0014-T01", "status": "done" }, { "id": "RPF-WP-0014-T02", "status": "done" }, { "id": "RPF-WP-0014-T03", "status": "done" } ] }, { "id": "RPF-WP-0016", "path": "workplans/archived/260905-RPF-WP-0016-versioned-ephemeral-custody-lifecycle.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0016-T01", "status": "done" }, { "id": "RPF-WP-0016-T02", "status": "done" }, { "id": "RPF-WP-0016-T03", "status": "done" }, { "id": "RPF-WP-0016-T04", "status": "done" }, { "id": "RPF-WP-0016-T05", "status": "done" }, { "id": "RPF-WP-0016-T06", "status": "done" } ] }, { "id": "RPF-WP-0017", "path": "workplans/archived/260905-RPF-WP-0017-attended-login-output-containment.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0017-T01", "status": "done" } ] }, { "id": "RPF-WP-0018", "path": "workplans/archived/260905-RPF-WP-0018-policy-surface-alignment.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0018-T01", "status": "done" }, { "id": "RPF-WP-0018-T02", "status": "done" }, { "id": "RPF-WP-0018-T03", "status": "done" }, { "id": "RPF-WP-0018-T04", "status": "done" }, { "id": "RPF-WP-0018-T05", "status": "done" }, { "id": "RPF-WP-0018-T06", "status": "done" }, { "id": "RPF-WP-0018-T07", "status": "done" } ] }, { "id": "RPF-WP-0019", "path": "workplans/archived/260905-RPF-WP-0019-apps-pg-recoverability-and-controls.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0019-T01", "status": "done" }, { "id": "RPF-WP-0019-T02", "status": "done" }, { "id": "RPF-WP-0019-T03", "status": "done" }, { "id": "RPF-WP-0019-T04", "status": "done" } ] }, { "id": "RPF-WP-0020", "path": "workplans/archived/260905-RPF-WP-0020-ccr-schema-drift.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0020-T01", "status": "done" }, { "id": "RPF-WP-0020-T02", "status": "done" }, { "id": "RPF-WP-0020-T03", "status": "done" }, { "id": "RPF-WP-0020-T04", "status": "done" } ] }, { "id": "RPF-WP-0026", "path": "workplans/archived/260905-RPF-WP-0026-flex-auth-credential-grant-integration.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0026-T01", "status": "done" }, { "id": "RPF-WP-0026-T02", "status": "done" }, { "id": "RPF-WP-0026-T03", "status": "done" } ] }, { "id": "RPF-WP-0028", "path": "workplans/archived/260905-RPF-WP-0028-durable-live-image-inventory.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0028-T01", "status": "done" }, { "id": "RPF-WP-0028-T02", "status": "done" } ] }, { "id": "RPF-WP-0030", "path": "workplans/archived/260905-RPF-WP-0030-core-hub-platform-onboarding.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0030-T01", "status": "done" }, { "id": "RPF-WP-0030-T02", "status": "done" }, { "id": "RPF-WP-0030-T03", "status": "done" }, { "id": "RPF-WP-0030-T04", "status": "done" }, { "id": "RPF-WP-0030-T05", "status": "done" } ] }, { "id": "RPF-WP-0031", "path": "workplans/archived/260905-RPF-WP-0031-workplan-identity-collision.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0031-T01", "status": "done" }, { "id": "RPF-WP-0031-T02", "status": "done" } ] }, { "id": "RPF-WP-0032", "path": "workplans/archived/260905-RPF-WP-0032-secrets-engine-service-jwt-design.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0032-T01", "status": "done" }, { "id": "RPF-WP-0032-T02", "status": "cancel" } ] }, { "id": "RPF-WP-0033", "path": "workplans/archived/260905-RPF-WP-0033-fluid-telegram-operator-kv-design.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0033-T01", "status": "done" }, { "id": "RPF-WP-0033-T02", "status": "cancel" } ] }, { "id": "RPF-WP-0034", "path": "workplans/archived/260905-RPF-WP-0034-state-hub-preflight-signing-design.md", "status": "finished", "tasks": [ { "id": "RPF-WP-0034-T01", "status": "done" }, { "id": "RPF-WP-0034-T02", "status": "cancel" } ] }, { "id": "RAIL-PL-WP-0001", "path": "workplans/archived/RAIL-PL-WP-0001-platform-baseline.md", "status": "archived", "tasks": [ { "id": "RAIL-PL-WP-0001-T01", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T02", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T03", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T04", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T05", "status": "cancelled" }, { "id": "RAIL-PL-WP-0001-T06", "status": "cancelled" } ] } ], "dispositions": { "RPF-WP-0001": "Delivered custody/grant broker; retain S3 policy, route future engine lifecycle to secrets-engine.", "RPF-WP-0002": "Delivered bounded delegated apply; S3 enforcement and approval boundary fit intent.", "RPF-WP-0003": "Delivered Issue Core runtime custody; app ingestion remains consumer-owned.", "RPF-WP-0004": "Delivered provider-key custody; provider/application lifecycle stays with its owner.", "RPF-WP-0005": "Delivered reuse-surface runtime custody; webhook application logic is consumer-owned.", "RPF-WP-0006": "Delivered OpenBao package boundary; compatibility handoff reviewed under 0036-T06.", "RPF-WP-0007": "Delivered PAT custody cutover; future pruning ownership belongs to railiance-forge.", "RPF-WP-0008": "Delivered CCR validation/test repair; keeps platform policy fail-closed.", "RPF-WP-0009": "Delivered S3 rapp/interface conventions; fleet family taxonomy stays with master.", "RPF-WP-0010": "Delivered apps-pg resource evidence; recurring freshness is 0036-T03/T04.", "RPF-WP-0011": "Delivered S3 architecture cleanup; unrelated fleet rows remain outside S3.", "RPF-WP-0012": "Delivered consumption-mode enforcement; consume policy, do not own commercial decisions.", "RPF-WP-0013": "Delivered agent high-risk deny coverage; retained S3 custody boundary.", "RPF-WP-0014": "Delivered hub-core candidate lanes; application migration stays with consumer/package.", "RPF-WP-0015": "Keep scoped recovery contribution; prepared procedures wait on fresh live gates.", "RPF-WP-0016": "Delivered ephemeral custody lifecycle; no unattended reaper authority implied.", "RPF-WP-0017": "Delivered output-containment repair; future drill still needs fresh acceptance.", "RPF-WP-0018": "Delivered tenancy/placement policy and ADR surface; ongoing drift is 0036-T05.", "RPF-WP-0019": "Delivered backup/controls/ceiling/isolation; correct stale SCOPE, do not reopen.", "RPF-WP-0020": "Delivered CCR migration/draft model; schema extension for new write lane is 0035-T03.", "RPF-WP-0021": "Historical apps-pg bootstrap; stable identity preserved after previous collision repair.", "RPF-WP-0022": "Historical GitOps bootstrap; retained mixed ownership inventory goes to 0036-T06.", "RPF-WP-0023": "Delivered workload KV lane foundation; new demands use consolidated 0035.", "RPF-WP-0024": "Delivered CCR approval workflow; retain S3 policy and consume approval authority.", "RPF-WP-0025": "Keep private access cutover; exact attended login, package and network gates.", "RPF-WP-0026": "Delivered canonical authorization consumption; PDP remains outside S3.", "RPF-WP-0027": "Narrow to custody/residual evidence; owner rotation already delivered; no repeat rotation.", "RPF-WP-0028": "Delivered durable inventory; future forge/automation handoff is 0036-T06.", "RPF-WP-0029": "Keep provider invalidation/recovery evidence; source fallback removal alone is insufficient.", "RPF-WP-0030": "Delivered Core Hub onboarding; preserve distinct identity, reconcile disclosures in 0036-T05.", "RPF-WP-0031": "Delivered scoped identity repair; do not repeat or broaden UUID edits.", "RPF-WP-0032": "Design delivered; implementation T02 superseded by 0035-T02.", "RPF-WP-0033": "Design delivered; implementation T02 superseded by 0035-T03.", "RPF-WP-0034": "Design delivered; implementation T02 superseded by 0035-T04; reconfirm transitional demand.", "RPF-WP-ADHOC-2026-08-23": "Delivered tenancy evidence and broker test fixes; no residual project.", "RAIL-PL-WP-0002": "Historical secrets-service bootstrap; continuing assurance belongs to 0036, not reopened bootstrap.", "RAIL-PL-WP-0001": "Retired baseline; six legacy cancelled tasks remain historical, not six open gaps." }, "archive_moves": [ { "id": "RPF-WP-ADHOC-2026-08-23", "from": "workplans/ADHOC-2026-08-23.md", "to": "workplans/archived/260905-ADHOC-2026-08-23.md" }, { "id": "RPF-WP-0001", "from": "workplans/RPF-WP-0001-credential-request-and-lease-broker.md", "to": "workplans/archived/260905-RPF-WP-0001-credential-request-and-lease-broker.md" }, { "id": "RPF-WP-0002", "from": "workplans/RPF-WP-0002-openbao-approved-automation-delegation.md", "to": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md" }, { "id": "RPF-WP-0003", "from": "workplans/RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md", "to": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md" }, { "id": "RPF-WP-0004", "from": "workplans/RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md", "to": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md" }, { "id": "RPF-WP-0005", "from": "workplans/RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md", "to": "workplans/archived/260905-RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md" }, { "id": "RPF-WP-0006", "from": "workplans/RPF-WP-0006-rapp-openbao-extraction-boundary.md", "to": "workplans/archived/260905-RPF-WP-0006-rapp-openbao-extraction-boundary.md" }, { "id": "RPF-WP-0007", "from": "workplans/RPF-WP-0007-forgejo-admin-pat-openbao-cutover.md", "to": "workplans/archived/260905-RPF-WP-0007-forgejo-admin-pat-openbao-cutover.md" }, { "id": "RPF-WP-0008", "from": "workplans/RPF-WP-0008-credential-change-suite-stabilization.md", "to": "workplans/archived/260905-RPF-WP-0008-credential-change-suite-stabilization.md" }, { "id": "RPF-WP-0009", "from": "workplans/RPF-WP-0009-platform-rapp-consistency.md", "to": "workplans/archived/260905-RPF-WP-0009-platform-rapp-consistency.md" }, { "id": "RPF-WP-0010", "from": "workplans/RPF-WP-0010-apps-pg-resource-evidence.md", "to": "workplans/archived/260905-RPF-WP-0010-apps-pg-resource-evidence.md" }, { "id": "RPF-WP-0011", "from": "workplans/RPF-WP-0011-architecture-cleanup-backlog.md", "to": "workplans/archived/260905-RPF-WP-0011-architecture-cleanup-backlog.md" }, { "id": "RPF-WP-0012", "from": "workplans/RPF-WP-0012-consumption-mode-enforcement.md", "to": "workplans/archived/260905-RPF-WP-0012-consumption-mode-enforcement.md" }, { "id": "RPF-WP-0013", "from": "workplans/RPF-WP-0013-agent-high-risk-boundary-coverage.md", "to": "workplans/archived/260905-RPF-WP-0013-agent-high-risk-boundary-coverage.md" }, { "id": "RPF-WP-0014", "from": "workplans/RPF-WP-0014-hub-core-candidate-credential-lanes.md", "to": "workplans/archived/260905-RPF-WP-0014-hub-core-candidate-credential-lanes.md" }, { "id": "RPF-WP-0016", "from": "workplans/RPF-WP-0016-versioned-ephemeral-custody-lifecycle.md", "to": "workplans/archived/260905-RPF-WP-0016-versioned-ephemeral-custody-lifecycle.md" }, { "id": "RPF-WP-0017", "from": "workplans/RPF-WP-0017-attended-login-output-containment.md", "to": "workplans/archived/260905-RPF-WP-0017-attended-login-output-containment.md" }, { "id": "RPF-WP-0018", "from": "workplans/RPF-WP-0018-policy-surface-alignment.md", "to": "workplans/archived/260905-RPF-WP-0018-policy-surface-alignment.md" }, { "id": "RPF-WP-0019", "from": "workplans/RPF-WP-0019-apps-pg-recoverability-and-controls.md", "to": "workplans/archived/260905-RPF-WP-0019-apps-pg-recoverability-and-controls.md" }, { "id": "RPF-WP-0020", "from": "workplans/RPF-WP-0020-ccr-schema-drift.md", "to": "workplans/archived/260905-RPF-WP-0020-ccr-schema-drift.md" }, { "id": "RPF-WP-0026", "from": "workplans/RPF-WP-0026-flex-auth-credential-grant-integration.md", "to": "workplans/archived/260905-RPF-WP-0026-flex-auth-credential-grant-integration.md" }, { "id": "RPF-WP-0028", "from": "workplans/RPF-WP-0028-durable-live-image-inventory.md", "to": "workplans/archived/260905-RPF-WP-0028-durable-live-image-inventory.md" }, { "id": "RPF-WP-0030", "from": "workplans/RPF-WP-0030-core-hub-platform-onboarding.md", "to": "workplans/archived/260905-RPF-WP-0030-core-hub-platform-onboarding.md" }, { "id": "RPF-WP-0031", "from": "workplans/RPF-WP-0031-workplan-identity-collision.md", "to": "workplans/archived/260905-RPF-WP-0031-workplan-identity-collision.md" }, { "id": "RPF-WP-0032", "from": "workplans/RPF-WP-0032-secrets-engine-service-jwt-design.md", "to": "workplans/archived/260905-RPF-WP-0032-secrets-engine-service-jwt-design.md" }, { "id": "RPF-WP-0033", "from": "workplans/RPF-WP-0033-fluid-telegram-operator-kv-design.md", "to": "workplans/archived/260905-RPF-WP-0033-fluid-telegram-operator-kv-design.md" }, { "id": "RPF-WP-0034", "from": "workplans/RPF-WP-0034-state-hub-preflight-signing-design.md", "to": "workplans/archived/260905-RPF-WP-0034-state-hub-preflight-signing-design.md" } ], "superseded_tasks": { "RPF-WP-0032-T02": "RPF-WP-0035-T02", "RPF-WP-0033-T02": "RPF-WP-0035-T03", "RPF-WP-0034-T02": "RPF-WP-0035-T04" } }