coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/workplans
History
tegwick fd369d4e21
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
docs: record claim-envelope divergence and the authority defect 
approval-engine (APPROVAL-IN-0002) established that ActionAuthorization is a
proposed, unratified object and that the claim body is an approval-claim
envelope instead. The join in 627810b therefore validates a shape that may
never be served. Holding all rework until gate-house rules on option A.

Also records a confirmed defect they caught independently: authorization.py
pins AUTHORITY = "state-hub" and enforces it unconditionally, contradicting
flex-auth's position that State Hub is not the runtime approval authority.
Left unpatched deliberately - under option A that check moves to the claim
issuer, so patching now would be a second guess.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01M65ovP3eiiPHubibvWs9mD

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 393550@bnt-lap001
Assistant-Session: 4bb359f9-1f12-4410-9e76-079cf23c82e4
2026-09-06 01:29:13 +02:00
..
archived CUST-WP-0055 T07: add archive workplan terminology grandfather note 2026-07-08 20:26:38 +02:00
ADHOC-2026-08-21.md repo.work.assign_missing_identifiers 2026-09-04 00:03:13 +02:00
ADHOC-2026-08-23.md repo.work.assign_missing_identifiers 2026-09-04 00:03:13 +02:00
SECRETS-WP-0001-statehub-bootstrap.md chore(wp-0001): close State Hub bootstrap workplan; de-template repo identity 2026-06-29 12:14:00 +02:00
SECRETS-WP-0002-bootstrap.md feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
SECRETS-WP-0004-warden-sign-token-lane.md Close warden-sign token lane 2026-06-30 01:01:55 +02:00
SECRETS-WP-0005-scope-intent-value-gaps.md Document scope alignment and warden-sign readiness 2026-06-30 00:52:05 +02:00
SECRETS-WP-0006-catalog-lane-adoption.md docs: record whynot-design lane pointer discrepancy from ops-warden 2026-09-06 00:46:02 +02:00
SECRETS-WP-0007-production-lifecycle-hardening.md docs: record claim-envelope divergence and the authority defect 2026-09-06 01:29:13 +02:00
SECRETS-WP-0008-layer-model-lifecycle-conformance.md feat: implement the PIP claim + validate authorization join 2026-09-06 01:01:55 +02:00
SECRETS-WP-0009-glas-claude-native-delivery.md repo.work.assign_missing_identifiers 2026-09-06 00:25:38 +02:00