Bootstrap repo: State Hub registration, agent docs, TEN-WP-0001/0002

statehub register + repo-seed template scaffold (CLAUDE.md, .claude/rules/,
registry/). INTENT.md and SCOPE.md rewritten from the generated stub to
match net-kingdom's ratified tenant-engine-boundary-contract_v0.1.md
(Purpose, Responsibility Boundary, Non-Goals). topic_slug corrected from
the auto-assigned custodian default to netkingdom, matching key-cape and
user-engine.

TEN-WP-0001 (bootstrap) complete: files reviewed/refined, stack decided
(Python 3.12 + FastAPI, matching qonto-assistant's convention), first real
workplan seeded.

TEN-WP-0002 drafted: service skeleton, domain model (tenant/grouping/
capability-role/plan-grant), storage layer, and the three boundary-contract
API surfaces (cache-read for key-cape, live-lookup for flex-auth with an
explicit fail-closed requirement, write API behind a WriteAuthorizer seam
since real flex-auth integration is a declared non-goal for this pass).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

workplans/TEN-WP-0001-statehub-bootstrap.md

@@ -0,0 +1,79 @@
+---
+id: TEN-WP-0001
+type: workplan
+title: "Bootstrap State Hub integration"
+domain: infotech
+repo: tenant-engine
+status: finished
+owner: codex
+topic_slug: netkingdom
+created: "2026-07-23"
+updated: "2026-07-23"
+---
+
+# Bootstrap State Hub integration
+
+Canonical owner of tenant-as-an-entity facts for NetKingdom: existence, onboarding grouping, capability roles, and plan/subscription assignment.
+
+## Review Generated Integration Files
+
+```task
+id: TEN-WP-0001-T01
+status: done
+priority: high
+```
+
+Review `INTENT.md`, `SCOPE.md`, `AGENTS.md`, and `.custodian-brief.md`.
+Replace generated placeholders with repo-specific facts where needed.
+
+**Done 2026-07-23:** `INTENT.md` and `SCOPE.md` rewritten from the generated
+stub into the full Purpose/Responsibility-Boundary/Non-Goals shape matching
+the ratified `net-kingdom/canon/standards/tenant-engine-boundary-contract_v0.1.md`
+(Ownership Model + Source-of-Truth Matrix condensed into this repo's own
+docs, not duplicated wholesale). `topic_slug` corrected from the
+auto-assigned `custodian` default to `netkingdom`, matching `key-cape` and
+`user-engine`'s convention. `.claude/rules/{repo-identity,architecture,repo-boundary,stack-and-commands}.md`
+placeholders filled in (copied from `repo-seed`, the fleet's bootstrap
+template). `AGENTS.md`/`.custodian-brief.md` left as generated — both carry
+an explicit "state-hub template sync" marker meaning they're managed by
+`fix-consistency`, not hand-edited.
+
+## Verify Local Developer Workflow
+
+```task
+id: TEN-WP-0001-T02
+status: done
+priority: high
+```
+
+Identify the repo's install, test, lint, build, and run commands. Add or refine
+those commands in the agent instructions so future coding sessions can verify
+changes confidently.
+
+**Done 2026-07-23:** Stack decided — Python 3.12 + FastAPI, matching
+`qonto-assistant`'s fleet convention for small headless services (this repo
+plays a structurally similar role: a narrow, security-adjacent API a couple
+of other services call synchronously). `make install-dev`/`test`/`lint`/`run`
+commands documented in `.claude/rules/stack-and-commands.md` ahead of the
+actual `Makefile`/`pyproject.toml`, which land in `TEN-WP-0002`.
+
+## Seed First Real Workplan
+
+```task
+id: TEN-WP-0001-T03
+status: done
+priority: medium
+```
+
+Create the first implementation workplan for the repository's most important
+next change. After workplan file updates, run the sync locally from this repo
+checkout:
+
+```bash
+statehub fix-consistency
+```
+
+**Done 2026-07-23:** `TEN-WP-0002-domain-model-and-scaffold.md` created —
+service skeleton, domain model (tenant/grouping/role/plan-grant), and the
+cache-read + live-lookup APIs per the boundary contract. Registered via
+`statehub fix-consistency`.