diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 035f3ae..d8c0dc3 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -16,6 +16,7 @@ | workplan | SECRETS-WP-0005 | finished | — | workplans/SECRETS-WP-0005-scope-intent-value-gaps.md | | workplan | SECRETS-WP-0006 | active | — | workplans/SECRETS-WP-0006-catalog-lane-adoption.md | | workplan | SECRETS-WP-0007 | active | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md | +| workplan | SECRETS-WP-0008 | ready | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md | | task | SECRETS-WP-ADHOC-2026-08-21-T01 | done | — | workplans/ADHOC-2026-08-21.md | | task | SECRETS-WP-ADHOC-2026-08-23-T01 | done | — | workplans/ADHOC-2026-08-23.md | | task | SECRETS-WP-0001-T01 | done | — | workplans/SECRETS-WP-0001-statehub-bootstrap.md | @@ -56,4 +57,10 @@ | task | SECRETS-WP-0007-T05 | progress | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md | | task | SECRETS-WP-0007-T06 | progress | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md | | task | SECRETS-WP-0007-T07 | wait | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md | -| intake | SECRETS-IN-0001 | open | — | intakes/intakes.md | +| task | SECRETS-WP-0008-T01 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md | +| task | SECRETS-WP-0008-T02 | wait | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md | +| task | SECRETS-WP-0008-T03 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md | +| task | SECRETS-WP-0008-T04 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md | +| task | SECRETS-WP-0008-T05 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md | +| task | SECRETS-WP-0008-T06 | wait | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md | +| intake | SECRETS-IN-0001 | closed | — | intakes/intakes.md | diff --git a/intakes/intakes.md b/intakes/intakes.md index bd5a3af..23af1f5 100644 --- a/intakes/intakes.md +++ b/intakes/intakes.md @@ -43,4 +43,5 @@ description: 'A conformance sweep on 2026-08-28 found this repository has no lay that is more useful to us than a label added to close a checkbox. Standard: net-kingdom/canon/standards/security-layer-model_v0.4.md.' created: '2026-08-28T21:02:14.320087Z' updated: '2026-08-28T21:02:14.320087Z' +state_hub_intake_id: "01a04cf6-dcd7-7bd4-82e4-ef434b15fe46" ``` diff --git a/workplans/ADHOC-2026-08-21.md b/workplans/ADHOC-2026-08-21.md index 1dcb987..9837c74 100644 --- a/workplans/ADHOC-2026-08-21.md +++ b/workplans/ADHOC-2026-08-21.md @@ -9,6 +9,7 @@ owner: codex topic_slug: custodian created: "2026-08-21" updated: "2026-08-21" +state_hub_workstream_id: "5580d785-c80f-5dbd-9ef8-22a630fa607b" --- # SECRETS-WP-ADHOC-2026-08-21 - OpenBao dev-test and safe-path robustness diff --git a/workplans/ADHOC-2026-08-23.md b/workplans/ADHOC-2026-08-23.md index 710fb01..04d52dd 100644 --- a/workplans/ADHOC-2026-08-23.md +++ b/workplans/ADHOC-2026-08-23.md @@ -9,6 +9,7 @@ owner: codex topic_slug: custodian created: "2026-08-23" updated: "2026-08-23" +state_hub_workstream_id: "e84012a7-4e29-5f77-8254-6c04025c4db1" --- # SECRETS-WP-ADHOC-2026-08-23 - Implemented scope and intent-gap reconciliation diff --git a/workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md b/workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md index 3bd6978..db8649d 100644 --- a/workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md +++ b/workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md @@ -9,6 +9,7 @@ owner: grok topic_slug: custodian created: "2026-08-29" updated: "2026-08-29" +state_hub_workstream_id: "9c9e5164-b2f5-5ea2-a557-5368d65e9fe0" --- # SECRETS-WP-0008 - Evolve the Lifecycle engine to the accepted security layer model @@ -57,6 +58,7 @@ It adds the layer-model remainder: stance binding, decision-record consumption, id: SECRETS-WP-0008-T01 status: todo priority: high +state_hub_task_id: "945735c6-2d3d-5f72-baf0-692e6b210889" ``` `pep-stance.yaml` is published and tests pin `prod: fail_closed` to @@ -84,6 +86,7 @@ Acceptance: id: SECRETS-WP-0008-T02 status: wait priority: high +state_hub_task_id: "3eb9cff8-1441-5437-9e92-a2b655c82d04" ``` Blocked on the durable ActionAuthorization serving path owned with @@ -110,6 +113,7 @@ Acceptance: id: SECRETS-WP-0008-T03 status: todo priority: high +state_hub_task_id: "0b54cedf-9335-5fa0-bdcb-1efa9a9cd98d" ``` Classify each privileged action as load-bearing or attributive. Today's trail @@ -140,6 +144,7 @@ Acceptance: id: SECRETS-WP-0008-T04 status: todo priority: medium +state_hub_task_id: "581aeee3-3d99-5034-992b-7d42e6542a19" ``` ops-warden's `ssh-ca-signing-write` gap names this engine as intended owner. @@ -165,6 +170,7 @@ Acceptance: id: SECRETS-WP-0008-T05 status: todo priority: medium +state_hub_task_id: "3100d28c-9494-5b21-9d5a-af583cd8aa55" ``` kings-guard's secret-abuse posture is fixture-driven because no engine exposes @@ -188,6 +194,7 @@ Acceptance: id: SECRETS-WP-0008-T06 status: wait priority: medium +state_hub_task_id: "d7bc8bdc-a0f8-5058-a640-374ef9859148" ``` Blocked on the platform-owned OpenBao JWT mount/role (railiance-platform) and