state-hub/workplans
tegwick 470ece82ed
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Multi-Context Image / build-and-push (push) Successful in 27s
feat(forge): resolve an optional forge read credential (STATE-WP-0084-T02/T03)
Nine repositories are invisible to derivation because central may not read
them. This adds the consuming half of the credential lane MASON-WP-0003 built.

The cluster has no agent injector and no secrets-store CSI driver, so the pod
authenticates to OpenBao with a projected ServiceAccount token (audience
`openbao`, not the API server) and reads the KV path itself. `forgeRead.*`
carries coordinates only; no credential is a chart value, an image layer, or a
Kubernetes Secret.

The credential reaches git through GIT_CONFIG_* setting http.extraHeader, not
through `-c` and not through userinfo in the clone URL — both of those put the
token in the process listing. It is redacted from ForgeDeriveError, which is
logged, stored in reset outcomes, and returned over the API.

Absent stays a supported state: with no credential, or with OpenBao
unreachable, resolution returns None and public derivation runs unchanged.
Raising would turn "nine repositories are unreadable" into "the pass failed",
which is what T01 exists to prevent.

Chart default is disabled. 717 pass.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
2026-08-27 23:12:57 +02:00
..
archived chore: archive finished STATE-WP-0070 (workplan terminology phase-2 retirement) 2026-07-14 00:27:57 +02:00
ADHOC-2026-06-04.md feat: add workplan aliases and legacy meter 2026-06-04 08:25:31 +02:00
ADHOC-2026-07-01.md chore: add local consistency sync cli 2026-07-02 00:15:16 +02:00
ADHOC-2026-08-08.md Prepare State Hub retirement baseline 2026-08-09 16:19:53 +02:00
ADHOC-2026-08-23.md chore(registrar): assign State Hub identifiers 2026-08-23 14:49:49 +02:00
CUST-WP-0003-whi-kpi-card.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
CUST-WP-0012-multi-user-onboarding.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
CUST-WP-0038-state-hub-threephoenix-ha.md Align State Hub migration with ThreePhoenix 2026-08-08 22:44:10 +02:00
CUST-WP-0042-workplan-state-model-cleanup.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0043-dashboard-ui-experience.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0044-recently-on-scope-digest.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0045-token-measurement-accuracy.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0046-workplan-id-normalization.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0047-lifecycle-assertions-and-renormalization.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0048-ui-state-change-reconciliation.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0049-workplan-execution-queue.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0050-railiance-fabric-graph-read-model-ingest.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0051-financial-fabric-read-model-adaptation.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0052-task-state-canon-adaptation.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0053-wsjf-triage-review-page.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0054-workplan-terminology-transition-legacy-meter.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0055-statehub-register-cli.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0056-dashboard-loading-robustness.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0057-overview-workstream-stage-counts.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0058-agent-skill-hub-interaction.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0059-mcp-write-layer-reliability.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0060-fix-consistency-cross-flavor.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0062-service-catalog-two-dimensions.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0063-weekend-automation-repair.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0064-statehub-consistency-sync-railiance01.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0065-repo-anchored-classification-spine.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0066-state-summary-revision-cache.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:28 +02:00
STATE-WP-0067-attached-repo-agent-normalization.md Close STATE-WP-0067 attached-repo agent normalization workplan 2026-06-22 23:26:48 +02:00
STATE-WP-0068-offline-write-buffer-and-edge-relay.md feat(statehub): add offline write buffer relay 2026-06-25 13:44:27 +02:00
STATE-WP-0071-railiance01-workstream-caller-deploy.md fix(workplan): point workplan at its authoritative projection id 2026-08-25 17:37:52 +02:00
STATE-WP-0072-workstream-caller-remediation.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0073-legacy-meter-decline-and-remote-audit.md feat(api): retire phase-1/2 /workstreams REST aliases with 410 stranglers 2026-07-10 13:31:57 +02:00
STATE-WP-0074-hub-ecosystem-boundary-alignment.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0075-workstream-route-410-stranglers.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0076-definition-of-ready-and-comprehension.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0077-dox-assessment-recording-and-soft-visibility.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0078-ops-run-read-projection.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0079-retirement-strangler.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0080-register-project-flavor-awareness.md docs(workplan): record STATE-WP-0080's projection state after closing on central 2026-08-25 16:25:34 +02:00
STATE-WP-0081-cluster-self-sufficiency-and-registrar.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:22:27 +02:00
STATE-WP-0082-multi-owner-review-contracts-and-receipts.md docs(review): record final full-suite pass 2026-08-22 21:08:20 +02:00
STATE-WP-0083-forge-derived-projection-reset.md chore(registrar): assign State Hub identifiers 2026-08-26 21:30:30 +02:00
STATE-WP-0084-forge-read-for-private-repositories.md feat(forge): resolve an optional forge read credential (STATE-WP-0084-T02/T03) 2026-08-27 23:12:57 +02:00