From 715de1197eea7b215d2bdcedea187906a4ced354 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Mon, 29 Jun 2026 12:14:00 +0200
Subject: [PATCH] chore(wp-0001): close State Hub bootstrap workplan;
 de-template repo identity
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- repo-identity.md / repo-boundary.md: replace leftover repo-seed template text
  with secrets-engine identity and boundary (T01)
- mark SECRETS-WP-0001 T01–T03 done (T02 dev-workflow commands and T03 first real
  workplan were completed during the MVP build); workplan status -> finished

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .claude/rules/repo-boundary.md                  | 14 +++++++++-----
 .claude/rules/repo-identity.md                  |  6 ++++--
 workplans/SECRETS-WP-0001-statehub-bootstrap.md |  8 ++++----
 3 files changed, 17 insertions(+), 11 deletions(-)

diff --git a/.claude/rules/repo-boundary.md b/.claude/rules/repo-boundary.md
index eef78f4..9b4eeda 100644
--- a/.claude/rules/repo-boundary.md
+++ b/.claude/rules/repo-boundary.md
@@ -1,8 +1,12 @@
 ## Repo boundary
 
-This repo owns **Repo Seed** only. It does not own:
+This repo owns the **secrets-engine** workflow/interaction layer only. It does
+not own:
 
-<!-- TODO: List what belongs in adjacent repos, e.g.:
-- SSH key management → railiance-infra/
-- State hub code     → state-hub/
--->
+- Secret custody, policy, lease, and audit backend → OpenBao / railiance-platform
+- SSH certificate issuance → ops-warden (`warden sign`)
+- Tunnels and remote transport → ops-bridge
+- Authorization decisions → flex-auth
+- Identity and claim lifecycle → user-engine / key-cape
+- Cross-system security boundary doc → net-kingdom/docs/
+- Request history and progress index → State Hub (read model)
diff --git a/.claude/rules/repo-identity.md b/.claude/rules/repo-identity.md
index 3ccf329..1c9c904 100644
--- a/.claude/rules/repo-identity.md
+++ b/.claude/rules/repo-identity.md
@@ -1,5 +1,7 @@
-**Purpose:** Git repository template to bootstrap coulomb projects.
+**Purpose:** OpenBao-backed secrets workflow and automation layer for approved
+secret custody, delivery, and lifecycle work across build, test, and production.
 
 **Domain:** infotech
-**Repo slug:** repo-seed
+**Repo slug:** secrets-engine
 **Topic ID:** cee7bedf-2b48-46ef-8601-006474f2ad7a
+**Workplan prefix:** SECRETS-WP-
diff --git a/workplans/SECRETS-WP-0001-statehub-bootstrap.md b/workplans/SECRETS-WP-0001-statehub-bootstrap.md
index 14afb2a..12f5365 100644
--- a/workplans/SECRETS-WP-0001-statehub-bootstrap.md
+++ b/workplans/SECRETS-WP-0001-statehub-bootstrap.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Bootstrap State Hub integration"
 domain: infotech
 repo: secrets-engine
-status: ready
+status: finished
 owner: codex
 topic_slug: custodian
 created: "2026-06-28"
@@ -20,7 +20,7 @@ secrets-engine is a headless, multi-application, multi-tenant secrets workflow a
 
 ```task
 id: SECRETS-WP-0001-T01
-status: todo
+status: done
 priority: high
 state_hub_task_id: "e93ea995-8c3b-4892-ab09-70cf7e0a0346"
 ```
@@ -32,7 +32,7 @@ Replace generated placeholders with repo-specific facts where needed.
 
 ```task
 id: SECRETS-WP-0001-T02
-status: todo
+status: done
 priority: high
 state_hub_task_id: "3269b817-6e10-4e9f-804f-73a8b1ded920"
 ```
@@ -45,7 +45,7 @@ changes confidently.
 
 ```task
 id: SECRETS-WP-0001-T03
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "62de7242-1a4c-4ed0-a4e4-ebe17bcc06b6"
 ```