chore: commit work in progress before registrar reconciliation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Refs CUST-WP-0068

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 17:51:13 +02:00
parent f61719ddda
commit 9093b9ebba
3 changed files with 17 additions and 0 deletions

View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: custodian
created: "2026-08-21"
updated: "2026-08-21"
state_hub_workstream_id: "31f7f8ea-7f73-516c-8877-f03a13f1db82"
---
# SECRETS-WP-0006 - Adopt concrete OpenBao credential lanes from ops-warden
@ -73,6 +74,7 @@ handoff, and `exec-file`/`wrapped` are not yet implemented by `exec`.
id: SECRETS-WP-0006-T01
status: done
priority: high
state_hub_task_id: "94d54df8-4088-5475-992b-7fe838c7c7d7"
```
Completed 2026-08-21. Replied in the existing thread with State Hub message
@ -96,6 +98,7 @@ decision is recorded as non-secret State Hub evidence.
id: SECRETS-WP-0006-T02
status: done
priority: high
state_hub_task_id: "1a04ee82-ff61-55bc-bae8-62e1229d9dcc"
```
Completed 2026-08-21. Added explicit `mount_management`, `delivery_auth`, and
@ -127,6 +130,7 @@ Acceptance:
id: SECRETS-WP-0006-T03
status: done
priority: high
state_hub_task_id: "b595f38e-bb31-513b-bc73-796cec76a2aa"
```
Completed 2026-08-21. The offered contribution did not arrive, so drafted all
@ -159,6 +163,7 @@ Acceptance:
id: SECRETS-WP-0006-T04
status: done
priority: high
state_hub_task_id: "b2ca67ec-48e0-5f85-b4d8-94eb601206c5"
```
Completed 2026-08-21: implemented non-mutating existing-mount/auth planning and
@ -189,6 +194,7 @@ Acceptance:
id: SECRETS-WP-0006-T05
status: wait
priority: high
state_hub_task_id: "fb103f1e-2ff7-5de5-9a2c-191a19c43542"
```
Readiness update 2026-08-21: rendered non-mutating production dry-runs for all
@ -229,6 +235,7 @@ Acceptance per lane:
id: SECRETS-WP-0006-T06
status: wait
priority: medium
state_hub_task_id: "1431edae-5791-5892-8c4b-829419b537d2"
```
After a lane is natively ready, update the ops-warden delegation register and