coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/WORK-RECORDS.md
tegwick ebd8e49aff
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05) 
Reuse the gated-executor approval pattern: ssh-keygen -Y signatures over exact
bytes, verified against a runtime-unwritable allowed_signers anchor with a fixed
namespace per purpose. load_trust now refuses responder trust without a founder
admission; the KeyCape selector preflight gains --admission for one exact,
bounded recovery attempt. WP14 re-pointed to CUST-WP-0082-T06 and split founder
key admission into human-gated T04; WP15 T04 now requires the signed admission.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 809600@bnt-lap001
Assistant-Session: 40ba228f-c8a0-4ec9-bb29-3129951afdc4
2026-10-21 00:30:59 +02:00

9.5 KiB
Raw Blame History

Work Records — secrets-engine

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind ID Status Lane Source
workplan SECRETS-WP-ADHOC-2026-08-21 finished — workplans/ADHOC-2026-08-21.md
workplan SECRETS-WP-ADHOC-2026-08-23 finished — workplans/ADHOC-2026-08-23.md
workplan SECRETS-WP-0001 finished — workplans/SECRETS-WP-0001-statehub-bootstrap.md
workplan SECRETS-WP-0002 finished — workplans/SECRETS-WP-0002-bootstrap.md
workplan SECRETS-WP-0004 finished — workplans/SECRETS-WP-0004-warden-sign-token-lane.md
workplan SECRETS-WP-0005 finished — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
workplan SECRETS-WP-0006 blocked — workplans/SECRETS-WP-0006-catalog-lane-adoption.md
workplan SECRETS-WP-0007 blocked — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
workplan SECRETS-WP-0008 blocked — workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
workplan SECRETS-WP-0009 blocked — workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
workplan SECRETS-WP-0010 finished — workplans/SECRETS-WP-0010-openrouter-native-access.md
workplan SECRETS-WP-0011 finished — workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
workplan SECRETS-WP-0012 finished — workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
workplan SECRETS-WP-0013 proposed — workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md
workplan SECRETS-WP-0014 active — workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md
workplan SECRETS-WP-0015 active — workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md
task SECRETS-WP-ADHOC-2026-08-21-T01 done — workplans/ADHOC-2026-08-21.md
task SECRETS-WP-ADHOC-2026-08-23-T01 done — workplans/ADHOC-2026-08-23.md
task SECRETS-WP-0001-T01 done — workplans/SECRETS-WP-0001-statehub-bootstrap.md
task SECRETS-WP-0001-T02 done — workplans/SECRETS-WP-0001-statehub-bootstrap.md
task SECRETS-WP-0001-T03 done — workplans/SECRETS-WP-0001-statehub-bootstrap.md
task SECRETS-WP-0002-T01 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T02 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T03 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T04 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T05 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T06 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T07 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T08 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T09 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0002-T10 done — workplans/SECRETS-WP-0002-bootstrap.md
task SECRETS-WP-0004-T01 done — workplans/SECRETS-WP-0004-warden-sign-token-lane.md
task SECRETS-WP-0004-T02 done — workplans/SECRETS-WP-0004-warden-sign-token-lane.md
task SECRETS-WP-0004-T03 done — workplans/SECRETS-WP-0004-warden-sign-token-lane.md
task SECRETS-WP-0004-T04 done — workplans/SECRETS-WP-0004-warden-sign-token-lane.md
task SECRETS-WP-0004-T05 done — workplans/SECRETS-WP-0004-warden-sign-token-lane.md
task SECRETS-WP-0005-T01 done — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
task SECRETS-WP-0005-T02 done — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
task SECRETS-WP-0005-T03 done — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
task SECRETS-WP-0005-T04 done — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
task SECRETS-WP-0005-T05 done — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
task SECRETS-WP-0005-T06 done — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
task SECRETS-WP-0005-T07 done — workplans/SECRETS-WP-0005-scope-intent-value-gaps.md
task SECRETS-WP-0006-T01 done — workplans/SECRETS-WP-0006-catalog-lane-adoption.md
task SECRETS-WP-0006-T02 done — workplans/SECRETS-WP-0006-catalog-lane-adoption.md
task SECRETS-WP-0006-T03 done — workplans/SECRETS-WP-0006-catalog-lane-adoption.md
task SECRETS-WP-0006-T04 done — workplans/SECRETS-WP-0006-catalog-lane-adoption.md
task SECRETS-WP-0006-T05 wait — workplans/SECRETS-WP-0006-catalog-lane-adoption.md
task SECRETS-WP-0006-T06 wait — workplans/SECRETS-WP-0006-catalog-lane-adoption.md
task SECRETS-WP-0007-T01 done — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
task SECRETS-WP-0007-T02 done — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
task SECRETS-WP-0007-T03 done — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
task SECRETS-WP-0007-T04 done — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
task SECRETS-WP-0007-T05 done — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
task SECRETS-WP-0007-T06 done — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
task SECRETS-WP-0007-T07 wait — workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
task SECRETS-WP-0008-T01 done — workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
task SECRETS-WP-0008-T02 done — workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
task SECRETS-WP-0008-T03 done — workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
task SECRETS-WP-0008-T04 done — workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
task SECRETS-WP-0008-T05 done — workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
task SECRETS-WP-0008-T06 wait — workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
task SECRETS-WP-0009-T01 done — workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
task SECRETS-WP-0009-T02 done — workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
task SECRETS-WP-0009-T03 wait — workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
task SECRETS-WP-0010-T01 done — workplans/SECRETS-WP-0010-openrouter-native-access.md
task SECRETS-WP-0010-T02 done — workplans/SECRETS-WP-0010-openrouter-native-access.md
task SECRETS-WP-0010-T03 done — workplans/SECRETS-WP-0010-openrouter-native-access.md
task SECRETS-WP-0011-T01 done — workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
task SECRETS-WP-0011-T02 done — workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
task SECRETS-WP-0011-T03 done — workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
task SECRETS-WP-0011-T04 done — workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
task SECRETS-WP-0011-T05 done — workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
task SECRETS-WP-0012-T01 done — workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
task SECRETS-WP-0012-T02 cancel — workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
task SECRETS-WP-0012-T03 done — workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
task SECRETS-WP-0012-T04 done — workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
task SECRETS-WP-0013-T01 wait — workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md
task SECRETS-WP-0013-T02 done — workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md
task SECRETS-WP-0013-T03 wait — workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md
task SECRETS-WP-0014-T01 done — workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md
task SECRETS-WP-0014-T02 done — workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md
task SECRETS-WP-0014-T03 wait — workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md
task SECRETS-WP-0014-T04 wait — workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md
task SECRETS-WP-0015-T01 done — workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md
task SECRETS-WP-0015-T02 done — workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md
task SECRETS-WP-0015-T03 done — workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md
task SECRETS-WP-0015-T04 wait — workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md
task SECRETS-WP-0015-T05 done — workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md
intake SECRETS-IN-0001 closed — intakes/intakes.md
intake SECRETS-IN-0002 closed — intakes/intakes.md
intake SECRETS-IN-0003 closed — intakes/intakes.md