From 8c3c3b8856d1f35f9557881d1d915f09590d1786 Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 21 Sep 2026 18:24:08 +0200 Subject: [PATCH] Record operator inputs for SECRETS-WP-0009-T03 activation Co-Authored-By: Claude Opus 5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 272244@bnt-lap001 Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9 --- ...ETS-WP-0009-glas-claude-native-delivery.md | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md index de45c15..7d03d09 100644 --- a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md +++ b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md @@ -295,3 +295,24 @@ Lane-specific residue, in order: Circular wait noted: HFACT-WP-0001-T04 waits on this task's admission while this task waits on the owner config; the operator inputs in step 1 break it. No credential read, no approval created, no policy or role changed. + +### 2026-09-21 operator inputs + +Received from the operator (Bernd), recorded here as inputs, not authorization: + +- Placement: railiance01 runtime copy (`5371156d…`). +- Spend envelope: per_run_eur 5, daily_eur 20, total_eur 500; per-run + max_liability_usd 5.75 and max_budget_usd 5.00 (derived from EUR 5 at the stated + FX); eur_per_usd from 1 EUR = 1.15 USD; expires 2027-01-31. The operator's + USD 600/800 figures are overall caps and are dominated by total_eur 500 (= USD 575). +- EUR 100/month: recorded as an operator-reviewed limit, not enforced; SpendPolicy + has no monthly ceiling. Follow-up for rein-aharness to add `monthly_eur`. +- authority_ref: no CCR exists; the operator wants a budget decision in the + Informed Decision framework. That record becomes `authority_ref`. +- Model: keep this Anthropic lane with a Claude default for MessagesOwner. + Separately, the llm-connect default moves to DeepSeek V4.1 Flash (llm-connect + change, not this task). +- Negative identity: the operator delegated this. Plan: use the existing + CCR-2026-0019 approval-client reader token from the attended Warden session + (real, reviewed, scoped only to its own KV path) written to a 0600 tmpfs file. + No new identity or authority is minted.