9d958f8e09
source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
1.5 KiB
| id | type | title | domain | repo | status | owner | created | updated | state_hub_workstream_id |
|---|---|---|---|---|---|---|---|---|---|
| RPF-WP-0034 | workplan | Design State Hub preflight signing custody | financials | railiance-platform | blocked | codex | 2026-09-05 | 2026-09-05 | 5233ef7d-200e-5ca7-8b8c-897b12de4377 |
Design State Hub preflight signing custody
Prepare the platform design
id: RPF-WP-0034-T01
status: done
priority: high
state_hub_task_id: "bb9e53a9-63b1-5500-8b30-96c5252b8d61"
Reviewed owner source and the current platform CCR contract. Delivered
docs/credential-lane-designs/state-hub-preflight-signing.md with proposed exact scope, custody, lifecycle, implementation gaps,
approval requirements and positive/negative acceptance evidence. This is a
completed design deliverable, not a live lane or approval. No secrets accessed,
production objects changed or owner messages sent.
Obtain owner inputs and implement the approved lane
id: RPF-WP-0034-T02
status: wait
priority: high
state_hub_task_id: "96e4864a-fd17-529b-a72f-69ffd885a962"
Confirm exact primary deployment and delivery identity; approve the writer and read CCR; implement dedicated ESO/API-only delivery and a concrete rotation fence. Provision only in an approved window, prove preflight signing without executing a rename, and record API/ESO health and negative access evidence.
Review the linked design and pin current source revisions before implementation. Do not interpret this workplan or a proposed coordinate as live authorization.