a61a07cf15
12 native tests against the pinned-tag OpenBao image with --network none and generated material only: restored end to end plus wrong identity, ciphertext, plaintext, share, missing objects (refused), source drift, timeout, operator abort, parent loss and reaper deadline. Only the network-interface abort is mocked (inspect wrapper). Make targets for offline tests, image pull, rehearsal and receipt verification. T05/T06 blocking text names the exact admission fields and the PINNED_IMAGE_DIGEST step. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 4384@bnt-lap001 Assistant-Session: 80d1f3da-7a91-4519-9737-9ba128b4da64 |
||
|---|---|---|
| .. | ||
| archived | ||
| .gitkeep | ||
| ADHOC-2026-10-10.md | ||
| ADHOC-2026-10-11.md | ||
| ADHOC-2026-10-19.md | ||
| README.md | ||
| RPF-WP-0015-audit-core-custody-and-recovery-coordination.md | ||
| RPF-WP-0025-openbao-operator-only-access.md | ||
| RPF-WP-0027-keycape-live-secret-exposure-recovery.md | ||
| RPF-WP-0029-backup-credential-default-removal.md | ||
| RPF-WP-0035-credential-lane-implementation.md | ||
| RPF-WP-0036-platform-service-assurance.md | ||
| RPF-WP-0038-forgejo-scaleway-primary-coverage.md | ||
| RPF-WP-0039-vergabe-demo-company-database.md | ||
| RPF-WP-0040-keycape-factor-credential-custody.md | ||
| RPF-WP-0041-state-hub-105m-not-provisioning.md | ||
| RPF-WP-0042-informed-decision-sitting-requester.md | ||
| RPF-WP-0043-policy-nexus-argocd-onboarding.md | ||
| RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md | ||
| RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md | ||
| RPF-WP-0046-eso-database-token-renewal.md | ||
| RPF-WP-0047-bao-coulomb-social-notice-page.md | ||
| RPF-WP-0048-activity-core-gitops-adoption.md | ||
| RPF-WP-0049-platform-root-custody-record-delivery.md | ||
| RPF-WP-0050-attended-provisioning-preparation.md | ||
| RPF-WP-0051-informed-decision-requester-workload-delivery.md | ||
| RPF-WP-0052-authelia-platform-smtp-admission.md | ||
| RPF-WP-0053-coulomb-paired-backup-admission.md | ||
| RPF-WP-0054-keycape-client-secret-generate-lane.md | ||
| RPF-WP-0055-keycape-client-secret-rotation-residual.md | ||
| RPF-WP-0056-playwright-consumer-admission.md | ||
| RPF-WP-0057-sign-in-diagnosis-caller-proof.md | ||
| RPF-WP-0058-reuse-private-source-reader.md | ||
| RPF-WP-0059-hourly-cadence-receiver-custody.md | ||
| RPF-WP-0060-browser-case-platform-bindings.md | ||
| RPF-WP-0061-self-service-ccr-intake.md | ||
| RPF-WP-0062-custodian-agent-observer-identity.md | ||
| RPF-WP-0063-wave2-resource-right-sizing.md | ||
| RPF-WP-0064-isolated-original-openbao-restore.md | ||
Current platform work
Reviewed October 13, 2026 against source workplans and the live inbox. Source files remain authoritative; the generated brief contains historical aliases. Completed plans retain their IDs and managed UUIDs, including archived plans.
| Workplan | Open tasks | Next work or dependency |
|---|---|---|
| RPF-WP-0015 (active) | T02, T03 | Recovery windows, sender/abort owner and snapshot/quorum/access evidence |
| RPF-WP-0027 (blocked) | T03, T06 | Resolver and custody owner contracts |
| RPF-WP-0035 (blocked) | T02, T03, T07, T08, T10, T12 | Execution integration and owner acceptance; verified-source compiler correction tested October 13 |
| RPF-WP-0036 (blocked) | T03, T04, T06 | Bounded scheduler, telemetry receiving contract and ownership returns |
| RPF-WP-0038 (blocked) | T04 | Durable caller, verified inventory and quota/retention; expiration/cutover hold persists |
| RPF-WP-0043 (blocked) | T03, T04 | Owner values/render diff, then root automation before adoption |
| RPF-WP-0044 (blocked) | T04, T06, T07 | Attended issue-core issuer login, ordered ESO adoption and root automation |
| RPF-WP-0048 (blocked) | T02 | Activity-core promotion evidence |
| RPF-WP-0053 (proposed) | T01, T02, T03, T04, T05 | Paired archive execution/custody, retrieval/recovery and monitoring admission |
| RPF-WP-0055 (backlog) | T01 | Unpromoted rotation residual; do not implement without demand/risk promotion |
| RPF-WP-0056 (blocked) | T03, T06 | Pilot/setup implemented; Custodian coordination requested for identity, transport and real human/agent proof |
October 13 review corrected WP-0038-T04's stale todo state to the documented
wait. RPF-IN-0012 remains an open independent execution/wrapped-delivery review;
the compiler fix does not close it. Playwright publication is resolved; its new
Platform workplan records the user-requested group and actual activation evidence.
Routine synchronization uses the exact-commit Repo Manager receipt described in AGENTS.md. Legacy alias repair remains the scoped WP-0036-T06 dependency.