---
id: REUSE-WP-0022
type: workplan
title: "Use current hosted capability discovery in factory planning"
domain: infotech
repo: reuse-surface
status: active
owner: the-custodian
topic_slug: helix-forge
created: "2026-09-08"
updated: "2026-09-08"
related: [HFACT-WP-0001, VERGABE-WP-0018]
---

# Hosted query-before-build

## Core Idea

The hosted index contains capabilities absent from the checked-in federation.
Provide an explicit hosted plan-check that fetches current discovery, preserves
its provenance and refuses incomplete or stale source evidence before producing
a recommendation. Vergabe-teilnahme is the first delivery-workflow consumer.

## Implement and verify hosted planning

```task
id: REUSE-WP-0022-T01
status: done
priority: high
assignee: the-custodian
```

Use the existing public GET /v1/federated. Preserve local mode compatibility.
Accept only bounded, structurally usable, recently composed, unwarned responses;
report endpoint, counts, composition/retrieval times and response digest. Never
convert source failure into a NEW verdict, gap request or local fallback. Test
hosted-only matches, malformed/stale/partial sources and transport failures.
No additional service, model call or mutation credential is necessary.

## Publish and return the consumer receipt

```task
id: REUSE-WP-0022-T02
status: progress
priority: high
assignee: the-custodian
depends_on: [REUSE-WP-0022-T01]
```

Publish the tested implementation through the existing Forgejo review path.
Capture a real hosted check invoked from vergabe-teilnahme with pinned source
revision. Return source and consumer evidence to HFACT-WP-0001-T06; it is source
preparation, not proof that the governed Railiance worker performed the change.

## Verification — 2026-09-08

Implementation at `2621cf2`: full suite **208 passed** (one upstream Starlette
warning). Vergabe-teilnahme invoked the CLI against the real hosted federation:
65 capabilities, no warning, `stale: false`, snapshot digest
`bfb6b79970867ac981fc48286dea24b2ff766cf732d3675f73ccbddb8971e498`.
Consumer receipt: `vergabe-teilnahme/docs/evidence/2026-09-08-hosted-plan-check.json`.
This attended implementation does not count as a governed factory run.