=== A. wait tasks whose every dependency target is terminal (clearable now) ===
MARKITECT-WP-0002-T07        wp=TESTDRIVE-JSUI-PUBLICATION repo=markitect-main human=True | deps terminal: MARKITECT-WP-0002-T06
TD-WP-0003-T07               wp=TD-WP-0003 repo=test-driver human=False | deps terminal: TD-WP-0003-T02
ACTIVITY-WP-0032-T05         wp=ACTIVITY-WP-0032 repo=activity-core human=False | deps terminal: ACTIVITY-WP-0031-T01, ACTIVITY-WP-0032-T03, ACTIVITY-WP-0032-T04
FLEX-WP-0020-T11             wp=FLEX-WP-0020 repo=access-engine human=True | deps terminal: FLEX-WP-0020-T10
RPF-WP-0035-T02              wp=RPF-WP-0035 repo=railiance-platform human=True | deps terminal: KEY-WP-0009
RPF-WP-0036-T03              wp=RPF-WP-0036 repo=railiance-platform human=True | deps terminal: RPF-WP-0036-T02
COORDINATION-WP-0004-T02     wp=COORDINATION-WP-0004 repo=coordination-engine human=False | deps terminal: COORDINATION-WP-0004-T01
RPF-WP-0035-T06              wp=RPF-WP-0035 repo=railiance-platform human=True | deps terminal: INFD-WP-0001-T07, INFD-WP-0001-T08
RPF-WP-0035-T08              wp=RPF-WP-0035 repo=railiance-platform human=True | deps terminal: AUDIT-WP-0009-T09, AUDIT-WP-0009-T11
USER-WP-0027-T04             wp=USER-WP-0027 repo=user-engine human=False | deps terminal: NK-WP-0033, KEY-WP-0035-T02, KEY-WP-0035-T03
USER-WP-0028-T03             wp=USER-WP-0028 repo=user-engine human=False | deps terminal: KEY-WP-0035, NK-WP-0033
RCLK-WP-0005-T04             wp=RCLK-WP-0005 repo=railiance-clock human=False | deps terminal: RCLK-WP-0005-T01
12

=== B. blocked workplans with no open wait task ===
RAIL-FAB-WP-0031               repo=railiance-fabric flavor=residual open=[]
UPC-WP-0002                    repo=prj-unattended-progress-company flavor=None open=[('UPC-WP-0002-T01', 'progress'), ('UPC-WP-0002-T02', 'progress'), ('UPC-WP-0002-T03', 'progress'), ('UPC-WP-0002-T04', 'progress')]
UPC-WP-0003                    repo=prj-unattended-progress-company flavor=None open=[('UPC-WP-0003-T03', 'todo')]
UPC-WP-0004                    repo=prj-unattended-progress-company flavor=None open=[('UPC-WP-0004-T02', 'todo'), ('UPC-WP-0004-T03', 'todo')]

=== C. unqualified waits (no deps, no human, no blocked_on, no wait_until) in open workplans ===
SAND-WP-0003-T09             wp=SAND-WP-0003 flavor=None repo=sand-boxer reason=None
SAND-WP-0005-T06             wp=SAND-WP-0005 flavor=None repo=sand-boxer reason=None
FIN-WP-0004-T05              wp=FIN-WP-0004 flavor=implementation repo=fin-hub reason=Reconciliation across both repositories for the RESOURCE-WP-0002 backup case needs resourc
RMASTER-WP-0020-T09          wp=RMASTER-WP-0020 flavor=implementation repo=railiance-master reason=Await ops-warden review of the failed role-update attempt, the OpenBao platform-admin role
RAIL-HO-WP-0012-T05          wp=RAIL-HO-WP-0012 flavor=implementation repo=railiance-infra reason=Offsite upload goes through railiance-platform's railiance-backup-offsite-lane (CCR-2026-0
T02 — Define the runtime dat wp=RAILIANCE-WP-0024@RETIRED-20260826 flavor=None repo=railiance-platform reason=Canonical RPF-WP-0015-T02: approved sender identity, fresh bounded attended window, named 
T03 — Define the coordinated wp=RAILIANCE-WP-0024@RETIRED-20260826 flavor=None repo=railiance-platform reason=Canonical RPF-WP-0015-T03: fresh outage approval, off-host snapshot, quorum/access evidenc
T03 — Complete the attended  wp=RAILIANCE-WP-0027@RETIRED-20260826 flavor=None repo=railiance-platform reason=None
T03 — Collect exact owner ac wp=RAILIANCE-WP-0029@RETIRED-20260826 flavor=None repo=railiance-platform reason=Canonical RPF-WP-0027-T03: complete platform custody acknowledgements remain missing.
T06 — Publish the Railiance/ wp=RAILIANCE-WP-0029@RETIRED-20260826 flavor=None repo=railiance-platform reason=Canonical RPF-WP-0027-T06: complete field/auth/expiry/handoff contract absent; September 1
NK-WP-0031-T04               wp=NK-WP-0031 flavor=implementation repo=net-kingdom reason=audit-core must add authoritative owner and E2 freshness metadata for WH-ENG-20260822-AUDI
ADAPTIVE-WP-0010-T01         wp=ADAPTIVE-WP-0010 flavor=planning repo=adaptive-pricing reason=Feed shape agreed jointly with tenant-engine.
NK-WP-0027-T02               wp=NK-WP-0027 flavor=planning repo=net-kingdom reason=Proposal to repo-manager: extend Decision 5.5 provider declaration to substrate providers.
NK-WP-0027-T06               wp=NK-WP-0027 flavor=planning repo=net-kingdom reason=DataClassification vocabulary mismatch between rapp-policy-nexus (public) and ops-warden d
STATE-WP-0079-T05            wp=STATE-WP-0079 flavor=refactoring repo=state-hub reason=Legacy-meter evidence must cover a full week (capture fixed 2026-08-20); earliest review 2
REINAH-WP-0003-T04           wp=REINAH-WP-0003 flavor=implementation repo=rein-aharness reason=Migration of profile-absent FI/Binky definitions with Activity Core, kaizen-agentic and te
RAPP-QONTO-WP-0002-T01       wp=RAPP-QONTO-WP-0002 flavor=implementation repo=rapp-qonto reason=Monthly observation window defined 2026-09-28; forecast from stable monthly proxies after 
RAIL-FAB-WP-0028-T01         wp=RAIL-FAB-WP-0028 flavor=residual repo=railiance-fabric reason=None
RAIL-FAB-WP-0028-T04         wp=RAIL-FAB-WP-0028 flavor=residual repo=railiance-fabric reason=None
RAIL-FAB-WP-0028-T02         wp=RAIL-FAB-WP-0028 flavor=residual repo=railiance-fabric reason=None
RAIL-FAB-WP-0028-T03         wp=RAIL-FAB-WP-0028 flavor=residual repo=railiance-fabric reason=None
WHITEHAT-WP-0006-T01         wp=WHITEHAT-WP-0006 flavor=None repo=whitehat-security reason=None
WHITEHAT-WP-0006-T02         wp=WHITEHAT-WP-0006 flavor=None repo=whitehat-security reason=None
WHITEHAT-WP-0006-T03         wp=WHITEHAT-WP-0006 flavor=None repo=whitehat-security reason=None
APPROVAL-WP-0002-T01         wp=APPROVAL-WP-0002 flavor=residual repo=approval-engine reason=Await key-cape's exact requester/human client registrations and native issuer proof with a
APPROVAL-WP-0002-T04         wp=APPROVAL-WP-0002 flavor=residual repo=approval-engine reason=None
APPROVAL-WP-0002-T05         wp=APPROVAL-WP-0002 flavor=residual repo=approval-engine reason=None
WHITEHAT-WP-0008-T01         wp=WHITEHAT-WP-0008 flavor=None repo=whitehat-security reason=None
Confirm the path and OIDC id wp=MASON-WP-0005 flavor=planning repo=ops-mason reason=railiance-platform must confirm the tenant/path segment and the KeyCape group claim.
HUB-WP-0011-T03              wp=HUB-WP-0011 flavor=residual repo=hub-core reason=None
HUB-WP-0011-T02              wp=HUB-WP-0011 flavor=residual repo=hub-core reason=None
SAND-WP-0015-T04             wp=SAND-WP-0015 flavor=implementation repo=sand-boxer reason=Credential owner railiance-platform/OpenBao with rein-aharness must establish a Claude-com
SECRETS-WP-0009-T03          wp=SECRETS-WP-0009 flavor=implementation repo=secrets-engine reason=Native apply/verify and credential delivery/revocation completed; owner attempt failed on 
RAPP-TELEMETRY-WP-0001-T04   wp=RAPP-TELEMETRY-WP-0001 flavor=implementation repo=rapp-telemetry reason=Q2 exporter/rules and transport acceptance; KeyCape/platform supply OIDC and custody lanes
NK-WP-0035-T04               wp=NET-KINGDOM-NK-WP-0035 flavor=implementation repo=net-kingdom reason=Needs info-tech-canon's versioned contract and schema; cannot be completed by copying the 
T01 — audit-core sender regi wp=TEN-WP-0012 flavor=residual repo=tenant-engine reason=None
T02 — boundary-contract amen wp=TEN-WP-0012 flavor=residual repo=tenant-engine reason=None
WARDEN-WP-0039-T03           wp=WARDEN-WP-0039 flavor=residual repo=ops-warden reason=The configured ops-warden caller represents ops-warden; credential requests name their own
RCLK-WP-0002-T01             wp=RCLK-WP-0002 flavor=planning repo=railiance-clock reason=Gate-house review, registry/custodian prefix confirmation and architecture disposition of 
RCLK-WP-0004-T03             wp=RCLK-WP-0004 flavor=implementation repo=railiance-clock reason=Consumer owner's admission (IR-WP-0004 / SECRETS-WP-0010 consumers) with native identity, 
RCLK-WP-0002-T03             wp=RCLK-WP-0002 flavor=planning repo=railiance-clock reason=Infrastructure and supported-platform owners accept measured timer/error/suspend assumptio
RCLK-WP-0002-T04             wp=RCLK-WP-0002 flavor=planning repo=railiance-clock reason=access-engine (runtime flex-auth), approval-engine, secrets-engine and audit-core return a
Observer result              wp=INFO-WP-0029 flavor=None repo=info-tech-canon reason=Needs one independent evaluation result of a declared cadence against observed events; aud
Validate the deployed stream wp=KG-WP-0005 flavor=None repo=kings-guard reason=Operational evidence from an authorized deployed qonto-assistant process; local source-pat
RAPP-POLICY-NEXUS-WP-0002-T0 wp=RAPP-POLICY-NEXUS-WP-0002 flavor=planning repo=rapp-policy-nexus reason=Waiting on railiance-platform (lane) and railiance-apps (production binding) to answer the
FI-WP-0005-T04               wp=FI-WP-0005 flavor=implementation repo=freedom-intelligence reason=Repository grant v2 requested from activity-core by hub message; needs an ADR amendment ag
NK-WP-0040-T02               wp=NK-WP-0040 flavor=planning repo=net-kingdom reason=Agree with audit-core who emits, who holds and how the execution-attribution receipt is va
Adopt the declared resource  wp=ACTIVITY-WP-0041 flavor=None repo=activity-core reason=railiance-platform owns the AppProject/root Application; per-app adoption record follows R
HUB-WP-0012-T01              wp=HUB-WP-0012 flavor=implementation repo=hub-core reason=Contract reviewers' (NetKingdom, user-engine, tenant-engine, flex-auth) sign-off on the in
Terminal walk-through        wp=RBT-WP-0006 flavor=implementation repo=runbook-tutorials reason=None
v0.3: close the console gaps wp=RBT-WP-0006 flavor=implementation repo=runbook-tutorials reason=None
Security and code review     wp=RBT-WP-0006 flavor=implementation repo=runbook-tutorials reason=None
Accept ADR-0017              wp=NK-WP-0045 flavor=None repo=net-kingdom reason=None
Decide the read surface      wp=NK-WP-0045 flavor=None repo=net-kingdom reason=None
Deliver the read path with t wp=NK-WP-0045 flavor=None repo=net-kingdom reason=None
Close the loop with user-eng wp=NK-WP-0045 flavor=None repo=net-kingdom reason=None
Policy and Kubernetes-auth r wp=MASON-WP-0007 flavor=None repo=ops-mason reason=None
Manifests in the tenant-engi wp=MASON-WP-0007 flavor=None repo=ops-mason reason=None
Attended seed of the dedicat wp=MASON-WP-0007 flavor=None repo=ops-mason reason=None
Verify and hand off          wp=MASON-WP-0007 flavor=None repo=ops-mason reason=None

=== D. owner-return waits (blocked_on) ===
RPF-WP-0015-T02              wp=RPF-WP-0015 repo=railiance-platform on=message-from:audit-core human=False upd=2026-09-30
RPF-WP-0015-T03              wp=RPF-WP-0015 repo=railiance-platform on=message-from:railiance-infra human=True upd=2026-09-30
RPF-WP-0027-T03              wp=RPF-WP-0027 repo=railiance-platform on=message-from:net-kingdom human=True upd=2026-09-30
WARDEN-WP-0034-T05           wp=WARDEN-WP-0034 repo=ops-warden on=message-from:ops-mason human=False upd=2026-09-30
RPF-WP-0036-T04              wp=RPF-WP-0036 repo=railiance-platform on=message-from:railiance-telemetry human=False upd=2026-09-30
RPF-WP-0036-T06              wp=RPF-WP-0036 repo=railiance-platform on=message-from:railiance-forge human=False upd=2026-09-30
RTEL-WP-0002-T04             wp=RTEL-WP-0002 repo=railiance-telemetry on=message-from:activity-core human=False upd=2026-09-30
WARDEN-WP-0040-T01           wp=WARDEN-WP-0040 repo=ops-warden on=message-from:ops-bridge human=False upd=2026-09-30
WARDEN-WP-0040-T02           wp=WARDEN-WP-0040 repo=ops-warden on=message-from:ops-bridge human=False upd=2026-09-30
USER-WP-0026-T03             wp=USER-WP-0026 repo=user-engine on=message-from:net-kingdom human=False upd=2026-09-30
GH-WP-0004-T06               wp=GH-WP-0004 repo=gate-house on=message-from:informed-decision human=False upd=2026-09-30
GH-WP-0004-T07               wp=GH-WP-0004 repo=gate-house on=message-from:audit-core human=False upd=2026-09-30
GH-WP-0004-T08               wp=GH-WP-0004 repo=gate-house on=message-from:net-kingdom human=False upd=2026-09-30
GH-WP-0004-T09               wp=GH-WP-0004 repo=gate-house on=message-from:audit-core human=False upd=2026-09-30
GH-WP-0004-T10               wp=GH-WP-0004 repo=gate-house on=message-from:net-kingdom human=False upd=2026-09-30
FLEX-WP-0031-T02             wp=FLEX-WP-0031 repo=access-engine on=message-from:audit-core human=False upd=2026-09-30
RPF-WP-0043-T02              wp=RPF-WP-0043 repo=railiance-platform on=message-from:rapp-policy-nexus human=False upd=2026-09-30
RPF-WP-0044-T04              wp=RPF-WP-0044 repo=railiance-platform on=message-from:rapp-issue-core human=True upd=2026-09-30
USER-WP-0037-T02             wp=USER-WP-0037 repo=user-engine on=message-from:net-kingdom human=False upd=2026-09-30
USER-WP-0037-T03             wp=USER-WP-0037 repo=user-engine on=message-from:net-kingdom human=False upd=2026-09-30

=== E. gate roots: open, non-terminal nodes with no open blockers, ranked by transitive open-workplan fan-in ===
  7 SAND-WP-0015-T04               status=wait human=False on=None dec=None | Credential owner railiance-platform/OpenBao with rein-aharness must establish a 
  5 SECRETS-WP-0009-T03            status=wait human=False on=None dec=None | Native apply/verify and credential delivery/revocation completed; owner attempt 
  4 NK-WP-0040                     status=blocked repo=net-kingdom
  4 GLAS-WP-0012                   status=blocked repo=glas-harness
  4 FEP-WP-0002-T03                status=todo human=False on=None dec=None | Validate a connected seed corpus
  3 RCLK-WP-0002                   status=blocked repo=railiance-clock
  3 RAPPS-WP-0014-T03              status=wait human=True on=None dec=None | Await populated two-user/document workflow, coherent PostgreSQL/media/issue-stat
  2 RAIL-HO-WP-0013                status=blocked repo=railiance-infra
  2 RAIL-FAB-WP-0028               status=blocked repo=railiance-fabric
  2 ACTIVITY-WP-0041               status=blocked repo=activity-core
  2 IR-WP-0005-T02                 status=wait human=True on=None dec=None | Human acceptance of three apply/verify/exec approvals for the pinned intelligenc
  2 FT-WP-0001-T12                 status=todo human=False on=None dec=None | T12 — Close the loop
  2 USER-WP-0026-T03               status=wait human=False on=message-from:net-kingdom dec=None | Needs a provider-owned workload catalogue and application access decisions for t
  2 HFACT-WP-0001-T01              status=wait human=True on=None dec=None | Exact one-cycle runtime is installed and synthetically proved on workstation and
  2 RAPPCOREHUB-WP-0002-T05        status=wait human=True on=None dec=None | Operator approval after final backup/delta verification; seven-day stabilization
  1 STATE-WP-0079                  status=blocked repo=state-hub
  1 WARDEN-WP-0034                 status=blocked repo=ops-warden
  1 FT-WP-0001                     status=blocked repo=fluid-telegram
  1 VERGABE-WP-0019                status=blocked repo=vergabe-teilnahme
  1 RCLK-WP-0005                   status=blocked repo=railiance-clock
  1 FLUID-WP-0008                  status=blocked repo=fluid-core
  1 RAPP-POLICY-NEXUS-WP-0002      status=blocked repo=rapp-policy-nexus
  1 RTEL-WP-0002                   status=blocked repo=railiance-telemetry
  1 SECRETS-WP-0006-T05            status=wait human=True on=None dec=None | OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-T03. Other
  1 STATE-WP-0079-T05              status=wait human=False on=None dec=None | Legacy-meter evidence must cover a full week (capture fixed 2026-08-20); earlies
  1 REINAH-WP-0003-T04             status=wait human=False on=None dec=None | Migration of profile-absent FI/Binky definitions with Activity Core, kaizen-agen
  1 RPF-WP-0035-T02                status=wait human=True on=None dec=None | KEY-WP-0009 finished; remaining gate is human: attended platform provisioning of
  1 RPF-WP-0044-T05                status=wait human=True on=None dec=None | Adopted 2026-09-21; remaining preconditions and the next step wait on the founde
  1 REINAH-WP-0003-T05             status=todo human=False on=None dec=None | Align deployment, recovery, and conformance with the supported runtime
  1 FLUID-WP-0008-T03              status=wait human=True on=None dec=None | Human step: operator creates the private test channel, then the public channel.
  1 FLUID-WP-0008-T02              status=wait human=True on=None dec=None | Human step: operator registers the bot via BotFather and stores the token in Ope
  1 RPF-WP-0044-T03                status=wait human=True on=None dec=None | Adopted 2026-09-21; the follow-on step (issue-core adoption, then automation) wa
  1 RCLK-WP-0005-T04               status=wait human=False on=None dec=None | Bootstrap owner fresh-estate and upgrade rehearsal, failed-time gate and steady-
  1 RPF-WP-0044-T06                status=wait human=True on=None dec=None | Founder go-ahead for the ESO adoption after adding CRD Prune=false,Delete=false 
  1 STATE-WP-0079-T04              status=todo human=False on=None dec=None | Execute move/replace slices
  1 Confirm the path and OIDC iden status=wait human=False on=None dec=None | railiance-platform must confirm the tenant/path segment and the KeyCape group cl
  1 RAPP-POLICY-NEXUS-WP-0002-T02  status=wait human=False on=None dec=None | Waiting on railiance-platform (lane) and railiance-apps (production binding) to 
  1 RPF-WP-0044-T04                status=wait human=True on=message-from:rapp-issue-core dec=None | Founder go-ahead plus rapp-issue-core's agreement (hub message) that ArgoCD owns

=== F. cycles ===

=== G. human gates ranked by fan-in ===
  3 RAPPS-WP-0014-T03            repo=railiance-apps         dec=None | Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery 
  2 RAPPCOREHUB-WP-0002-T05      repo=rapp-core-hub          dec=None | Operator approval after final backup/delta verification; seven-day stabilization window from 2026-08
  2 HFACT-WP-0001-T01            repo=prj-helixforge-factory dec=None | Exact one-cycle runtime is installed and synthetically proved on workstation and Railiance; independ
  2 RAIL-HO-WP-0013-T04          repo=railiance-infra        dec=None | Depends on T03 and reviewed live-host authorization.
  2 IR-WP-0005-T02               repo=intelligence-radar     dec=None | Human acceptance of three apply/verify/exec approvals for the pinned intelligence-radar-key-check re
  2 Establish standing authority repo=activity-core          dec=None | Founder approves the exact autonomous scope: merge paths, tests, images, ceilings, stop conditions, 
  1 SECRETS-WP-0006-T05          repo=secrets-engine         dec=None | OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-T03. Other lanes still need ex
  1 STATE-WP-0079-T06            repo=state-hub              dec=None | Stopping the primary is a founder decision; needs T04 handoffs and T05 retirement first; legacy mete
  1 FLUID-WP-0008-T02            repo=fluid-core             dec=None | Human step: operator registers the bot via BotFather and stores the token in OpenBao.
  1 FLUID-WP-0008-T03            repo=fluid-core             dec=None | Human step: operator creates the private test channel, then the public channel.
  1 FT-WP-0001-T01               repo=fluid-telegram         dec=None | Human step: operator registers the HelixForge bot via BotFather.
  1 FT-WP-0001-T02               repo=fluid-telegram         dec=None | Human step: operator creates the private test and public channels.
  1 RPF-WP-0035-T02              repo=railiance-platform     dec=None | KEY-WP-0009 finished; remaining gate is human: attended platform provisioning of the exact JWT mount
  1 HFACT-WP-0001-T03            repo=prj-helixforge-factory dec=None | September 16 native OpenRouter receipt resolves the generic requester, operator-reader, deployed app
  1 VERGABE-WP-0019-T06          repo=vergabe-teilnahme      dec=None | Source and live SSO/recovery are delivered, and one founder sign-in passed September 24. Await invit
  1 RCLK-WP-0005-T05             repo=railiance-clock        dec=None | Disposable VM proof after T02/T03, then specifically authorized native verification through the S1 o
  1 RAPP-POLICY-NEXUS-WP-0002-T0 repo=rapp-policy-nexus      dec=None | Live change; runs only after the founder approves the plan with T02-T04 done.
  1 RPF-WP-0044-T03              repo=railiance-platform     dec=None | Adopted 2026-09-21; the follow-on step (issue-core adoption, then automation) waits on the founder's
  1 RPF-WP-0044-T04              repo=railiance-platform     dec=None | Founder go-ahead plus rapp-issue-core's agreement (hub message) that ArgoCD owns production and make
  1 RPF-WP-0044-T05              repo=railiance-platform     dec=None | Adopted 2026-09-21; remaining preconditions and the next step wait on the founder's go-ahead.
  1 RPF-WP-0044-T06              repo=railiance-platform     dec=None | Founder go-ahead for the ESO adoption after adding CRD Prune=false,Delete=false and re-running the d
  1 RPF-WP-0044-T07              repo=railiance-platform     dec=None | Founder go-ahead to restore automated prune/selfHeal on railiance-apps-root once T03-T06 are proven.
  0 MARKITECT-WP-0002-T07        repo=markitect-main         dec=None | Registry ownership/access and npm/CDN publication receipts from the standalone maintainer.
  0 FIN-WP-0005-T01              repo=fin-hub                dec=None | Operator and Steuerbuero confirm the Qonto plan, DATEV tenant, master-data owner, workflow and reten
  0 REEF-RAILIANCE-WP-0003-T04   repo=reef-railiance         dec=None | Production approval requires mitigation or explicit acceptance of the single-node/shared-control-pla
  0 RMASTER-WP-0020-T08          repo=railiance-master       dec=None | Retention expiry, a successful railiance01 DR drill and new explicit approval for destructive deleti
  0 TD-WP-0003-T01               repo=test-driver            dec=None | Bounded live-model experiment: run count and cost ceiling agreed with the operator before the first 
  0 TD-WP-0003-T06               repo=test-driver            dec=None | Operator establishes Playwright and clears its licence.
  0 RAIL-HO-WP-0011-T08          repo=railiance-infra        dec=None | Live recipient removal or credential replacement requires explicit operator approval after the dry r
  0 RAPP-OPENBAO-WP-0002-T02     repo=rapp-openbao           dec=None | Await the loopback OIDC callback accepted by the OpenBao platform-admin role and an attended MFA log
  0 NK-WP-0022-T08               repo=net-kingdom            dec=None | Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart d
  0 WARDEN-WP-0027-T02           repo=ops-warden             dec=None | Trust-root design is a founder decision: who holds unseal shares and recovery keys, quorum, break-gl
  0 RPF-WP-0015-T03              repo=railiance-platform     dec=None | Single-node outage exercise needs operator access and a declared restart order coordinated with rail
  0 RPF-WP-0027-T03              repo=railiance-platform     dec=None | Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as 
  0 RPF-WP-0027-T06              repo=railiance-platform     dec=None | Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attend
  0 MASON-WP-0004-T01            repo=ops-mason              dec=None | Founder ruling on the genuinely unclear paths; no scoped metadata grant or complete inventory yet.
  0 MASON-WP-0004-T02            repo=ops-mason              dec=None | Requires a valid scoped metadata grant (operator) before the described paths can be written and veri
  0 FLEX-WP-0020-T11             repo=access-engine          dec=None | Soak window after T10; destructive cleanup needs separate human approval.
  0 RAPPCOREHUB-WP-0003-T04      repo=rapp-core-hub          dec=None | Attended provisioning of a dedicated read:repository Forgejo identity mounted through a namespace Se
  0 FT-WP-0002-T01               repo=fluid-telegram         dec=None | An operator registers a dedicated account, obtains api_id/api_hash and runs the guided session boots
  0 WARDEN-WP-0037-T03           repo=ops-warden             dec=None | Prove routing and publication
  0 Review the plan and obtain t repo=ops-mason              dec=None | Explicit human approval of the plan (status: approved, approved_by, approved_at) after the live surv
  0 RPF-WP-0035-T03              repo=railiance-platform     dec=None | Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the cap
  0 RPF-WP-0036-T03              repo=railiance-platform     dec=None | T02 done (cadence/expiry available). Remaining gate: scheduling needs a named accepted execution own
  0 HOH-WP-0002-T04              repo=hall-of-helix          dec=None | Publishing 102 internal seats is an irreversible outward change; corpus review and disposition are t
  0 RPF-WP-0038-T04              repo=railiance-platform     dec=None | Operator chooses the independent archive prefix and confirms retention/caller contract and bounded w
  0 GLAS-WP-0015-T03             repo=glas-harness           dec=None | Await owner returns: secrets-engine config, holder admission, lane approvals and scoped delivery; op
  0 RPF-WP-0035-T06              repo=railiance-platform     dec=None | INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front 
  0 RPF-WP-0035-T07              repo=railiance-platform     dec=None | Founder HOLD (2026-09-21) on the legacy whynot-design npm pointer; custody disposition is an attende
  0 RPF-WP-0035-T08              repo=railiance-platform     dec=None | AUDIT-WP-0009-T09/T11 done; remaining gate is human: attended first-provision via factory_audit_cust
  0 FLEX-WP-0027-T03             repo=access-engine          dec=None | Needs the operator's exact signed-in account and actual human acknowledgements; synthetic policy che
  0 Review on 2026-12-21         repo=ops-mason              dec=None | Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-
  0 RPF-WP-0043-T04              repo=railiance-platform     dec=None | Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=
  0 RPF-WP-0044-T08              repo=railiance-platform     dec=None | Planning only; needs an operator read-only check of coulombcore's ArgoCD, outside agent session scop
  0 USER-WP-0035-T02             repo=user-engine            dec=None | Needs the operator-owned governed transactional mail lane (email-connect plus the OpenBao delivery t
  0 NK-WP-0042-T02               repo=net-kingdom            dec=None | Agree the MFA-required user experience with user-engine and one pilot workload; must be accepted fro
  0 Rotate what was exposed      repo=the-custodian          dec=None | Deferred by founder decision 2026-09-24; reopened only by the founder on one of the three triggers b
  0 Deploy, verify sinks and ena repo=activity-core          dec=None | Kubernetes change gate: route through ArgoCD adoption (ACTIVITY-WP-0041) or an explicit scoped excep
  0 RPF-WP-0048-T02              repo=railiance-platform     dec=None | 24h soak after adoption, then founder confirmation of the scoped identity and checks before automate
  0 HUB-WP-0012-T06              repo=hub-core               dec=None | T04/T05 live admission and Railiance/platform owners' attended receipts
  0 TD-WP-0004-T05               repo=test-driver            dec=None | Operator/target-owner-selected system and approved bounded engagement.
  0 Opt-in, audited step executi repo=runbook-tutorials      dec=None | Needs a decision on which identity runs the command.
  0 Cross-repo pack index        repo=runbook-tutorials      dec=None | Needs a decision on scan scope.
  0 Runbook-aware feedback assis repo=runbook-tutorials      dec=None | Needs decisions on access, identity and what is sent where.
  0 Dependencies between runbook repo=runbook-tutorials      dec=None | Needs a decision on how a pack in another repo is identified and trusted.
65
