fix(workplans): adopt ADR-007 derived identifiers for unregistered records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 20:22:27 +02:00
parent 2b2016f1df
commit 3cb256ef5c
8 changed files with 48 additions and 48 deletions

View file

@ -17,7 +17,7 @@ related:
- RMGR-WP-0008
- ADR-007
- ADR-010
state_hub_workstream_id: "f36ee3e0-6d25-4f08-b41f-0cea79d50949"
state_hub_workstream_id: "bb2798fd-0680-5027-8479-3af3a5b048de"
---
# Cluster self-sufficiency: remove workstation coupling and fix the registrar
@ -70,7 +70,7 @@ sync requests and why the newest `custodian-sync` commits are from July.
id: STATE-WP-0081-T01
status: todo
priority: high
state_hub_task_id: "35e81d95-be10-4f1c-bb5d-3cb122b554a7"
state_hub_task_id: "7dca680b-d34d-5bfe-838e-b463a4487a9c"
```
Find why the hostPath mounts read-only against the chart's own spec, and restore
@ -91,7 +91,7 @@ Verification is end-to-end, not a green pod: run the sweep and confirm
id: STATE-WP-0081-T02
status: todo
priority: high
state_hub_task_id: "25f04375-b523-4e30-baaf-cc63efdacb0a"
state_hub_task_id: "3fd4d23c-6b67-5b92-b312-25a7295773fd"
```
Replace the `sweep-repos` hostPath with storage the pod owns — a PVC the sweep
@ -113,7 +113,7 @@ happens to be on a disk.
id: STATE-WP-0081-T03
status: todo
priority: high
state_hub_task_id: "557908e1-b51c-477d-8db3-44fef660482b"
state_hub_task_id: "8e5a5eb8-f29c-5cab-a19d-3447b6e0c26a"
```
Issue a dedicated forgejo deploy key or service account for the sweep and mount
@ -133,7 +133,7 @@ Credential custody routes through OpenBao, not this repo — see
id: STATE-WP-0081-T04
status: todo
priority: medium
state_hub_task_id: "3db96de9-006d-401b-b772-a05fbe7a7c62"
state_hub_task_id: "57ab0ced-ef3f-5260-b7d6-e2a78ff4e023"
```
Set `runAsUser`/`runAsGroup` and a `fsGroup` matching the PVC. Depends on T02:
@ -148,7 +148,7 @@ while the pod still runs as root.
id: STATE-WP-0081-T05
status: todo
priority: high
state_hub_task_id: "7f5a26d5-5043-41a3-865a-cf4e536d25da"
state_hub_task_id: "530fbd27-e463-51d2-b09c-ba9827d057de"
```
72 of 75 repo records carry `local_path: /home/worsch/...` and stale
@ -170,7 +170,7 @@ that will move.
id: STATE-WP-0081-T06
status: todo
priority: medium
state_hub_task_id: "6cd1316d-7a5d-4706-8b81-d46136c9196f"
state_hub_task_id: "1d74e5e2-fb0f-5342-afbb-6ce2986823f4"
```
The dashboard runs as an Observable dev server on the workstation at
@ -189,7 +189,7 @@ redirect, not a build. Confirm with `HUB-WP-0004` before writing any chart.
id: STATE-WP-0081-T07
status: todo
priority: medium
state_hub_task_id: "16ba9741-b908-4236-9a8b-4c74274072bd"
state_hub_task_id: "12a2ce9f-7cdf-501b-9018-4c960d45e855"
```
Write the rule down so it stops being re-derived: **workstation coding agents
@ -211,7 +211,7 @@ like a queue.
id: STATE-WP-0081-T08
status: todo
priority: high
state_hub_task_id: "eaa37816-2d0d-48da-82f9-a4734d0a1b80"
state_hub_task_id: "782c502a-5ce2-5ec3-8f07-b550c9705013"
```
With the write path restored, confirm the registrar end-to-end and drain the