From 9093b9ebbaf276a8cd343ce08d12bdc606828e24 Mon Sep 17 00:00:00 2001 From: codex Date: Tue, 25 Aug 2026 17:51:13 +0200 Subject: [PATCH] chore: commit work in progress before registrar reconciliation Refs CUST-WP-0068 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006 --- workplans/ADHOC-2026-08-21.md | 2 ++ workplans/SECRETS-WP-0006-catalog-lane-adoption.md | 7 +++++++ .../SECRETS-WP-0007-production-lifecycle-hardening.md | 8 ++++++++ 3 files changed, 17 insertions(+) diff --git a/workplans/ADHOC-2026-08-21.md b/workplans/ADHOC-2026-08-21.md index 1391a67..3188539 100644 --- a/workplans/ADHOC-2026-08-21.md +++ b/workplans/ADHOC-2026-08-21.md @@ -9,6 +9,7 @@ owner: codex topic_slug: custodian created: "2026-08-21" updated: "2026-08-21" +state_hub_workstream_id: "643a3710-9778-54d2-8bd5-cdc23a4139a6" --- # ADHOC-2026-08-21 - OpenBao dev-test and safe-path robustness @@ -19,6 +20,7 @@ updated: "2026-08-21" id: ADHOC-2026-08-21-T01 status: done priority: low +state_hub_task_id: "2d309354-7a5f-59f2-9817-15545f0fda5e" ``` While verifying SECRETS-WP-0006, the suite exposed two environment-sensitive diff --git a/workplans/SECRETS-WP-0006-catalog-lane-adoption.md b/workplans/SECRETS-WP-0006-catalog-lane-adoption.md index bf111d4..7f2aa8c 100644 --- a/workplans/SECRETS-WP-0006-catalog-lane-adoption.md +++ b/workplans/SECRETS-WP-0006-catalog-lane-adoption.md @@ -9,6 +9,7 @@ owner: codex topic_slug: custodian created: "2026-08-21" updated: "2026-08-21" +state_hub_workstream_id: "31f7f8ea-7f73-516c-8877-f03a13f1db82" --- # SECRETS-WP-0006 - Adopt concrete OpenBao credential lanes from ops-warden @@ -73,6 +74,7 @@ handoff, and `exec-file`/`wrapped` are not yet implemented by `exec`. id: SECRETS-WP-0006-T01 status: done priority: high +state_hub_task_id: "94d54df8-4088-5475-992b-7fe838c7c7d7" ``` Completed 2026-08-21. Replied in the existing thread with State Hub message @@ -96,6 +98,7 @@ decision is recorded as non-secret State Hub evidence. id: SECRETS-WP-0006-T02 status: done priority: high +state_hub_task_id: "1a04ee82-ff61-55bc-bae8-62e1229d9dcc" ``` Completed 2026-08-21. Added explicit `mount_management`, `delivery_auth`, and @@ -127,6 +130,7 @@ Acceptance: id: SECRETS-WP-0006-T03 status: done priority: high +state_hub_task_id: "b595f38e-bb31-513b-bc73-796cec76a2aa" ``` Completed 2026-08-21. The offered contribution did not arrive, so drafted all @@ -159,6 +163,7 @@ Acceptance: id: SECRETS-WP-0006-T04 status: done priority: high +state_hub_task_id: "b2ca67ec-48e0-5f85-b4d8-94eb601206c5" ``` Completed 2026-08-21: implemented non-mutating existing-mount/auth planning and @@ -189,6 +194,7 @@ Acceptance: id: SECRETS-WP-0006-T05 status: wait priority: high +state_hub_task_id: "fb103f1e-2ff7-5de5-9a2c-191a19c43542" ``` Readiness update 2026-08-21: rendered non-mutating production dry-runs for all @@ -229,6 +235,7 @@ Acceptance per lane: id: SECRETS-WP-0006-T06 status: wait priority: medium +state_hub_task_id: "1431edae-5791-5892-8c4b-829419b537d2" ``` After a lane is natively ready, update the ops-warden delegation register and diff --git a/workplans/SECRETS-WP-0007-production-lifecycle-hardening.md b/workplans/SECRETS-WP-0007-production-lifecycle-hardening.md index 8837662..4cd4b09 100644 --- a/workplans/SECRETS-WP-0007-production-lifecycle-hardening.md +++ b/workplans/SECRETS-WP-0007-production-lifecycle-hardening.md @@ -9,6 +9,7 @@ owner: codex topic_slug: custodian created: "2026-08-23" updated: "2026-08-23" +state_hub_workstream_id: "68a39be1-bd9c-5133-ad64-e7bca892aaf3" --- # SECRETS-WP-0007 - Production-safe provisioning, authorization, and lifecycle hardening @@ -81,6 +82,7 @@ must not expose the current bootstrap and lifecycle shortcuts as an API. id: SECRETS-WP-0007-T01 status: done priority: high +state_hub_task_id: "5ddba36d-bc86-5670-baf1-50c872e6577e" ``` Completed 2026-08-23. During containment, existing multi-field provisioning @@ -119,6 +121,7 @@ Acceptance: id: SECRETS-WP-0007-T02 status: done priority: high +state_hub_task_id: "ddf3ed54-9cbc-5e18-b15a-5da14cda5d9b" ``` Completed 2026-08-23. Replaced raw `field=value` argv writes with a CAS-aware @@ -155,6 +158,7 @@ Acceptance: id: SECRETS-WP-0007-T03 status: progress priority: high +state_hub_task_id: "bb6073e1-c952-5357-b707-5574cef50f2f" ``` Progress 2026-08-23. Added one lifecycle plan model shared by dry-run and live @@ -200,6 +204,7 @@ Acceptance: id: SECRETS-WP-0007-T04 status: progress priority: high +state_hub_task_id: "4b58edec-c705-55e5-9ece-362e1ff13079" ``` Progress 2026-08-23. flex-auth revision `c473f19` now supplies execute-time @@ -251,6 +256,7 @@ Acceptance: id: SECRETS-WP-0007-T05 status: progress priority: high +state_hub_task_id: "36bcd64d-8b27-542d-b8da-ede1a4d3c22f" ``` Progress 2026-08-23. AppRole login material now travels through strict temporary @@ -299,6 +305,7 @@ Acceptance: id: SECRETS-WP-0007-T06 status: progress priority: high +state_hub_task_id: "431bc91b-439e-595a-8a8a-7d4c82e68322" ``` Progress 2026-08-23. KV verification now checks every declared field by default, @@ -356,6 +363,7 @@ Acceptance: id: SECRETS-WP-0007-T07 status: wait priority: high +state_hub_task_id: "a0a1dd92-d703-5a95-b488-d895f34d5cf7" ``` Dependency: T01-T06 complete, then explicit per-lane approvals and scoped