railiance-platform/docs/provisioning-windows/2026-10-04-1000/source-review.json
codex 1da1c7760f
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Prepare October 4 attended window priorities and readiness evidence
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1046b-5629-7f52-badd-f718eadb6042
2026-10-04 03:04:42 +02:00

253 lines
12 KiB
JSON

{
"schema": "railiance-platform.provisioning-window-preparation.v1",
"date": "2026-10-04",
"local_time": "10:00",
"timezone": "Europe/Berlin",
"utc_time": "2026-10-04T08:00:00Z",
"recurrence": "none",
"custody": "batched-attended-existing",
"source": "Founder: Pick lanes by relevance for today 10am",
"decision_id": "62aa95e4-3ccc-4867-8806-5e3db005b483",
"roots": [
"/home/worsch/glas-harness/workplans",
"/home/worsch/hub-core/workplans",
"/home/worsch/intelligence-radar/workplans",
"/home/worsch/markitect-main/workplans",
"/home/worsch/ops-mason/workplans",
"/home/worsch/prj-helixforge-factory/workplans",
"/home/worsch/railiance-platform/workplans",
"/home/worsch/rapp-openbao/workplans",
"/home/worsch/secrets-engine/workplans",
"/home/worsch/user-engine/workplans"
],
"source_files": [
{
"path": "/home/worsch/glas-harness/workplans/GLAS-WP-0015-production-dependency-coordination.md",
"sha256": "9d3342d809721f38b29ce1dd0c67b03b0ba774f3579eb76a0dd3fdd812021056"
},
{
"path": "/home/worsch/hub-core/workplans/HUB-WP-0012-netkingdom-platform-root-access.md",
"sha256": "b65be630ca4b37d07a58494644d30878cceab6d15a246dc963ada94e755b7203"
},
{
"path": "/home/worsch/intelligence-radar/workplans/IR-WP-0005-credential-delivery.md",
"sha256": "40afb58f4485e3c93952f34664fff697766f4e8ce99679281d436058da3a974a"
},
{
"path": "/home/worsch/markitect-main/workplans/MARKITECT-WP-0002-testdrive-jsui-publication.md",
"sha256": "a91c4fd6efb1c0e7d4ac8049abf187357bcd8b1a963c67e31dd449e985b75bf5"
},
{
"path": "/home/worsch/ops-mason/workplans/MASON-WP-0004-credential-inventory-descriptions.md",
"sha256": "6a7d66e7300319fe221bfa1cd077495ac81e223c29bcafb51e83c2f62cf85a7a"
},
{
"path": "/home/worsch/ops-mason/workplans/MASON-WP-0007-tenant-engine-audit-core-sender-projection.md",
"sha256": "fd3049f09dabd52546749910445e317fb649f7ddad1f9b00d48313eda8dd0d24"
},
{
"path": "/home/worsch/prj-helixforge-factory/workplans/HFACT-WP-0001-establish-internal-factory.md",
"sha256": "595a87069e71a1b0fb2b5d8f576898432d0e661dfe2a168f9c7a97ff256f6f52"
},
{
"path": "/home/worsch/railiance-platform/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md",
"sha256": "34cce4706d4a55ad850249ca511187d2d25936b189b484e0085dea3cc22ff1c4"
},
{
"path": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md",
"sha256": "726b02ebe324f1fbd9e8ac21e71c86a29110d68f224aa6daa3699c02e739f671"
},
{
"path": "/home/worsch/railiance-platform/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md",
"sha256": "7aa80be92e2b8681fa30fa999e9696d6a2b1da8b02c40a2c981ef28ff841b8f9"
},
{
"path": "/home/worsch/rapp-openbao/workplans/RAPP-OPENBAO-WP-0002-operator-only-ui-exposure.md",
"sha256": "d71a8ab4e3ddd660bb4e35448c11ebb120e40352ed784c976f7643cad0cdbf41"
},
{
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0006-catalog-lane-adoption.md",
"sha256": "a5d6169fe080f1faac341a43a4c98b4a4dd85e2332740f7c1dd170322a1ddd7a"
},
{
"path": "/home/worsch/user-engine/workplans/USER-WP-0035-onboarding-handoff-findings.md",
"sha256": "1b59a99ef4b9743b02646b6201ade9ed0e4f504f3d3c571890f18d39be6994b2"
}
],
"task_joins": [
{
"task_id": "GLAS-WP-0015-T03",
"task_uuid": "68fcc1b4-537b-5f5e-afb5-063c44e5e4db",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Await owner returns: secrets-engine config, holder admission, lane approvals and scoped delivery; operator input on placement and spend bounds."
},
{
"task_id": "HFACT-WP-0001-T01",
"task_uuid": "5cee3251-faf9-5925-8ffd-7a8bf378b0a4",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Exact one-cycle runtime is installed and synthetically proved on workstation and Railiance; independent pilot oracle is pinned with verified red baseline. Await native holder/delivery, admitted profile/service/recovery, live provider bounds/FX/tariffs and G0 including oracle semantics; dispatch remains disabled."
},
{
"task_id": "HFACT-WP-0001-T03",
"task_uuid": "67c80db1-01ba-54f1-80ff-76398f9e7823",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "September 16 native OpenRouter receipt resolves the generic requester, operator-reader, deployed approval and exact consume prerequisites; September 27 configured Glas owner/companion source and pins are ready. Await fresh Glas-specific human/action approvals, admitted current runtime/spend envelope, native primary/companion delivery, revocation and independent operating/audit acceptance. Historical receipt is not factory activation."
},
{
"task_id": "HUB-WP-0012-T06",
"task_uuid": "97b0b242-e9a7-53cd-941f-a1822fcf93a5",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "T04/T05 live admission and Railiance/platform owners' attended receipts"
},
{
"task_id": "IR-WP-0005-T02",
"task_uuid": "c4b2378a-5241-5195-8c4b-d53ec58a7f72",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Human acceptance of three apply/verify/exec approvals for the pinned intelligence-radar-key-check recipient; secrets-engine opens them."
},
{
"task_id": "MARKITECT-WP-0002-T07",
"task_uuid": "8bcde75e-bca2-428e-893f-1d88036f746c",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Registry ownership/access and npm/CDN publication receipts from the standalone maintainer."
},
{
"task_id": "MASON-WP-0004-T02",
"task_uuid": "a6a944d7-21c5-5043-a78d-b3809de0ee64",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Requires a valid scoped metadata grant (operator) before the described paths can be written and verified."
},
{
"task_id": "RAPP-OPENBAO-WP-0002-T02",
"task_uuid": "1ada4afb-ba65-5974-b3f1-53404d0636b5",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Await the loopback OIDC callback accepted by the OpenBao platform-admin role and an attended MFA login (see RMASTER-WP-0020-T09)."
},
{
"task_id": "RPF-WP-0027-T03",
"task_uuid": "714ae011-903d-55e2-ac47-801b8ef879d1",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receipt-producing command for the next attended session."
},
{
"task_id": "RPF-WP-0027-T06",
"task_uuid": "3b9748c4-2906-5ba7-9d34-0a7067a59283",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff; values are never inferred."
},
{
"task_id": "RPF-WP-0035-T02",
"task_uuid": "e0c82ea9-05a5-537e-8fbf-67534263572e",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "SECRETS-WP-0007-T04 done 2026-09-27, so that gate is open. Real blocker: live KeyCape registration of client secrets-engine-openbao and its protected client-credential custody (contract: separate approved custody action; no owning task id yet, asked key-cape 2026-10-03). The design requires both before any write; then a reviewed child and the attended founder apply."
},
{
"task_id": "RPF-WP-0035-T03",
"task_uuid": "f47e5bc5-6f3c-54bb-aa35-260ad03892ba",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability schema."
},
{
"task_id": "RPF-WP-0035-T06",
"task_uuid": "68bff751-e48b-548b-8fb4-dfb3b16210c2",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays non-resolvable."
},
{
"task_id": "RPF-WP-0038-T04",
"task_uuid": "a4807df0-ec96-58f1-9cbd-42b1dcde0d6f",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker credential delivery before the primary archive retrieval."
},
{
"task_id": "SECRETS-WP-0006-T05",
"task_uuid": "fb103f1e-2ff7-5de5-9a2c-191a19c43542",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-T03. Other lanes still need exact approvals, scoped attended apply and per-lane positive/negative/health/revocation evidence."
},
{
"task_id": "USER-WP-0035-T02",
"task_uuid": "fae614ba-ffc0-511d-9d22-2d91fbab057f",
"source_status": "wait",
"hub_status": "wait",
"decision_join_verified": true,
"blocking_reason": "Needs the operator-owned governed transactional mail lane (email-connect plus the OpenBao delivery token)."
}
],
"all_hub_joins_verified": true,
"checklist_complete": false,
"execution_ready": false,
"execution_authorized": false,
"executed": false,
"scheduled_automation": false,
"priority_tasks": [
"RPF-WP-0035-T02",
"INFD-WP-0005-T05",
"USER-WP-0035-T02"
],
"separate_decision_only_task": "RPF-WP-0035-T06",
"note": "Priority scope is narrower than the D1 inventory. INFD-WP-0005-T05 has its own decision and is separately reviewed in README; no D1 join is invented.",
"separate_priority_join": {
"id": "3b0f536c-e8ee-5493-b663-2f60f5f429ad",
"record_id": "INFD-WP-0005-T05",
"decision_id": "0d6792b6-59e4-4fa0-887a-c4e51ea8e131",
"status": "wait",
"verified": true
},
"priority_contract_files": [
{
"path": "/home/worsch/railiance-platform/docs/credential-lane-designs/secrets-engine-service-jwt.md",
"sha256": "e6da337632950ddc926fadc9a842cdb85f1d046b725974b552a95b6c11110417"
},
{
"path": "/home/worsch/railiance-platform/credential-change-requests/CCR-2026-0010-email-connect-transactional.yaml",
"sha256": "96908017b858e2390e876a66a9c6927adb9d81f91f5b3e3de40819bf53030440"
},
{
"path": "/home/worsch/railiance-platform/credential-change-requests/CCR-2026-0026-informed-decision-sitting-requester-verifier.yaml",
"sha256": "4ca365a99bd31de4b11b39375f4ff1dd5f2b90f3dabee5e6ff397daadaeab3ff"
},
{
"path": "/home/worsch/railiance-platform/credential-change-requests/CCR-2026-0027-informed-decision-sitting-requester-reader.yaml",
"sha256": "ccc71b2ce845c6a2b552a015e43b16e0ef497aa8d810d19bcbe60a746faeae8a"
},
{
"path": "/home/worsch/informed-decision/docs/specs/FrictionlessDecisionIntake.md",
"sha256": "b9e01901ac2a2f45013bd13cb4004c5c0a156000db73129098b2b958ed8f6dd0"
},
{
"path": "/home/worsch/informed-decision/workplans/INFD-WP-0005-frictionless-decision-intake.md",
"sha256": "993dddfa4ba4f9e0131feab681091a6c919cba22901006c17e82d5e02a0d4083"
}
]
}