files: workplans 1426 open 114 Counter({'blocked': 105, 'backlog': 5, 'active': 2, 'proposed': 1, 'ready': 1})
open tasks Counter({'done': 283, 'wait': 258, 'todo': 38, 'cancel': 6})

=== A. satisfied waits in open workplans (file view) ===

=== B. blocked workplans without any wait task ===

=== B2. non-blocked open workplans whose only open tasks are wait ===
CUST-WP-0076 the-custodian proposed 1
FEP-WP-0003 frontend-patterns backlog 2
FEP-WP-0004 frontend-patterns backlog 3
FEP-WP-0006 frontend-patterns backlog 1

=== B3. open workplans with zero open tasks ===

=== C. unqualified waits in open non-residual workplans ===

=== E. roots by transitive open-workplan fan-in (file view) ===
  9 SAND-WP-0015-T04             wait h=False on=message-from:railiance-platform dec=None | Credential owner railiance-platform/OpenBao with rein-aharness must es
      -> ACTIVITY-WP-0032, CUST-WP-0073, EMERGENT-WP-0002, FEP-WP-0008, FI-WP-0005, GLAS-WP-0012, LLM-WP-0009, REINAH-WP-0003, SAND-WP-0014
  7 SECRETS-WP-0009-T03          wait h=False on=message-from:glas-harness dec=None | Native apply/verify and credential delivery/revocation completed; owne
      -> ACTIVITY-WP-0032, CUST-WP-0073, EMERGENT-WP-0002, FEP-WP-0008, GLAS-WP-0012, LLM-WP-0009, REINAH-WP-0003
  6 GLAS-WP-0012                 WP blocked glas-harness
      -> ACTIVITY-WP-0032, CUST-WP-0073, EMERGENT-WP-0002, FEP-WP-0008, LLM-WP-0009, REINAH-WP-0003
  4 FEP-WP-0009-T01              wait h=True on=None dec=6f698650-de45-4402-a84f-ea19ae5f96af | Needs an independent human reviewer to rate the masked pilot-01 answer
      -> FEP-WP-0003, FEP-WP-0004, FEP-WP-0006, FEP-WP-0008
  4 FEP-WP-0009-T02              todo
      -> FEP-WP-0003, FEP-WP-0004, FEP-WP-0006, FEP-WP-0008
  4 NK-WP-0040                   WP blocked net-kingdom
      -> RAIL-HO-WP-0013, RCLK-WP-0002, RCLK-WP-0004, RCLK-WP-0005
  3 FLUID-WP-0008                WP blocked fluid-core
      -> FLUID-WP-0009, FT-WP-0001, FT-WP-0002
  3 FLUID-WP-0008-T02            wait h=True on=None dec=7f455718-66c9-4049-9aaf-1143aea39d34 | Human step: operator registers the bot via BotFather and stores the to
      -> FLUID-WP-0009, FT-WP-0001, FT-WP-0002
  3 FLUID-WP-0008-T03            wait h=True on=None dec=7f455718-66c9-4049-9aaf-1143aea39d34 | Human step: operator creates the private test channel, then the public
      -> FLUID-WP-0009, FT-WP-0001, FT-WP-0002
  3 RAPPS-WP-0014-T03            wait h=True on=None dec=d06307e5-2737-461a-a2f4-a12c3b492a9a | Await populated two-user/document workflow, coherent PostgreSQL/media/
      -> CUST-WP-0071, USER-WP-0027, VERGABE-WP-0019
  3 RCLK-WP-0002                 WP blocked railiance-clock
      -> RAIL-HO-WP-0013, RCLK-WP-0004, RCLK-WP-0005
  2 FT-WP-0001-T12               todo
      -> FLUID-WP-0009, FT-WP-0002
  2 HFACT-WP-0001-T01            wait h=True on=None dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Exact one-cycle runtime is installed and synthetically proved on works
      -> LLM-WP-0009, VERGABE-WP-0018
  2 IR-WP-0005-T02               wait h=True on=message-from:secrets-engine dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Human acceptance of three apply/verify/exec approvals for the pinned i
      -> IR-WP-0006, IR-WP-0007
  2 RAIL-FAB-WP-0028             WP blocked railiance-fabric
      -> RAIL-FAB-WP-0029, RAPP-TELEMETRY-WP-0001
  2 RAIL-HO-WP-0013              WP blocked railiance-infra
      -> RCLK-WP-0004, RCLK-WP-0005
  2 RAPPCOREHUB-WP-0002-T05      wait h=True on=None dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Operator approval after final backup/delta verification; seven-day sta
      -> CORE-WP-0010, HUB-WP-0012
  2 SECRETS-WP-0006-T05          wait h=True on=message-from:railiance-platform dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-
      -> SECRETS-WP-0007, WARDEN-WP-0037
  2 USER-WP-0026-T03             wait h=False on=message-from:net-kingdom dec=None | Needs a provider-owned workload catalogue and application access decis
      -> USER-WP-0027, USER-WP-0028
  1 ACTIVITY-WP-0041             WP blocked activity-core
      -> RPF-WP-0048
  1 ACTIVITY-WP-0042             WP blocked activity-core
      -> RPF-WP-0036
  1 ACTIVITY-WP-0042-T05         wait h=False on=message-from:railiance-platform dec=None | Platform owner must accept the candidate request/receipt contract, exe
      -> RPF-WP-0036
  1 KG-WP-0005-T03               wait h=False on=message-from:qonto-assistant dec=None | Operational evidence from an authorized deployed qonto-assistant proce
      -> QONTO-WP-0006
  1 MASON-WP-0005-T02            todo
      -> RPF-WP-0035
  1 NK-WP-0003                   WP completed net-kingdom
      -> NK-WP-0011
  1 NK-WP-0004                   WP done net-kingdom
      -> NK-WP-0011
  1 NK-WP-0022                   WP blocked net-kingdom
      -> RMASTER-WP-0020
  1 RCLK-WP-0005                 WP blocked railiance-clock
      -> RCLK-WP-0004
  1 RCLK-WP-0005-T04             wait h=False on=message-from:railiance-bootstrap dec=None | Bootstrap owner fresh-estate and upgrade rehearsal, failed-time gate a
      -> RCLK-WP-0004
  1 REINAH-WP-0003-T04           wait h=False on=message-from:activity-core dec=None | Migration of profile-absent FI/Binky definitions with Activity Core, k
      -> LLM-WP-0009
  1 REINAH-WP-0003-T05           todo
      -> LLM-WP-0009
  1 RPF-WP-0035-T02              wait h=True on=message-from:key-cape dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | SECRETS-WP-0007-T04 done 2026-09-27, so that gate is open. Real blocke
      -> SECRETS-WP-0008
  1 RPF-WP-0044-T03              wait h=True on=None dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Adopted 2026-09-21; the follow-on step (issue-core adoption, then auto
      -> RPF-WP-0043
  1 RPF-WP-0044-T04              wait h=True on=message-from:rapp-issue-core dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder go-ahead plus rapp-issue-core's agreement (hub message) that A
      -> RPF-WP-0043
  1 RPF-WP-0044-T05              wait h=True on=None dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Adopted 2026-09-21; remaining preconditions and the next step wait on 
      -> RPF-WP-0043
  1 RPF-WP-0044-T06              wait h=True on=None dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder go-ahead for the ESO adoption after adding CRD Prune=false,Del
      -> RPF-WP-0043
  1 RPF-WP-0050-T04              todo
      -> WARDEN-WP-0041
  1 RTEL-WP-0002                 WP blocked railiance-telemetry
      -> RPF-WP-0036
  1 STATE-WP-0079                WP blocked state-hub
      -> HUB-WP-0006
  1 STATE-WP-0079-T04            todo
      -> HUB-WP-0006
  1 STATE-WP-0079-T05            wait h=False on=None dec=None | Legacy-meter evidence must cover a full week (capture fixed 2026-08-20
      -> HUB-WP-0006
  1 UPC-WP-0002                  WP blocked prj-unattended-progress-company
      -> UPC-WP-0004
  1 VERGABE-WP-0019              WP blocked vergabe-teilnahme
      -> USER-WP-0027
  1 WARDEN-WP-0034               WP blocked ops-warden
      -> WARDEN-WP-0040

=== F. cycles (file view) ===

=== G. human gates by fan-in ===
  4 FEP-WP-0009-T01              frontend-patterns      dec=6f698650-de45-4402-a84f-ea19ae5f96af | Needs an independent human reviewer to rate the masked pilot-01 answers; no model may supply or infer these sc
  3 FLUID-WP-0008-T02            fluid-core             dec=7f455718-66c9-4049-9aaf-1143aea39d34 | Human step: operator registers the bot via BotFather and stores the token in OpenBao.
  3 FLUID-WP-0008-T03            fluid-core             dec=7f455718-66c9-4049-9aaf-1143aea39d34 | Human step: operator creates the private test channel, then the public channel.
  3 RAPPS-WP-0014-T03            railiance-apps         dec=d06307e5-2737-461a-a2f4-a12c3b492a9a | Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery point, iso
  2 IR-WP-0005-T02               intelligence-radar     dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Human acceptance of three apply/verify/exec approvals for the pinned intelligence-radar-key-check recipient; s
  2 HFACT-WP-0001-T01            prj-helixforge-factory dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Exact one-cycle runtime is installed and synthetically proved on workstation and Railiance; independent pilot 
  2 RAIL-HO-WP-0013-T04          railiance-infra        dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Depends on T03 and reviewed live-host authorization.
  2 RAPPCOREHUB-WP-0002-T05      rapp-core-hub          dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Operator approval after final backup/delta verification; seven-day stabilization window from 2026-08-21.
  2 SECRETS-WP-0006-T05          secrets-engine         dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-T03. Other lanes still need exact approv
  1 NK-WP-0022-T08               net-kingdom            dec=5d8dcdb5-6d7b-463e-bb39-0a4737331403 | Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart drill befor
  1 STATE-WP-0079-T06            state-hub              dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Stopping the primary is a founder decision; needs T04 handoffs and T05 retirement first; legacy meter still ha
  1 ACTIVITY-WP-0042-T03         activity-core          dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder must confirm whether activity-core's backup worker is the atm-backup-daily unit before declaring to op
  1 ACTIVITY-WP-0042-T08         activity-core          dec=6110ead5-1831-4e20-aebd-ac1f978b503b | KV4 provider repair is delivered. Current exact-primary projection needs repo-manager historical-prefix accept
  1 ACTIVITY-WP-0041-T02         activity-core          dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Adopted 2026-09-27 (manual sync); automated sync waits on RPF-WP-0048-T02: soak evidence plus founder confirma
  1 ACTIVITY-WP-0041-T03         activity-core          dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder approves the exact autonomous scope: merge paths, tests, images, ceilings, stop conditions, rollback, 
  1 FT-WP-0001-T01               fluid-telegram         dec=7f455718-66c9-4049-9aaf-1143aea39d34 | Human step: operator registers the HelixForge bot via BotFather.
  1 FT-WP-0001-T02               fluid-telegram         dec=7f455718-66c9-4049-9aaf-1143aea39d34 | Human step: operator creates the private test and public channels.
  1 HFACT-WP-0001-T03            prj-helixforge-factory dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | September 16 native OpenRouter receipt resolves the generic requester, operator-reader, deployed approval and 
  1 UPC-WP-0002-T01              prj-unattended-progress-company dec=42ad2ad5-600c-41c0-a627-cad4b0d1a29b | Founder must execute OH-2026-001…005 (Orange/Red) in binky-control and record the outcome; all five still `pre
  1 UPC-WP-0002-T02              prj-unattended-progress-company dec=42ad2ad5-600c-41c0-a627-cad4b0d1a29b | Founder must execute OH-2026-001…005 (Orange/Red) in binky-control and record the outcome; all five still `pre
  1 UPC-WP-0002-T03              prj-unattended-progress-company dec=42ad2ad5-600c-41c0-a627-cad4b0d1a29b | Founder must execute OH-2026-001…005 (Orange/Red) in binky-control and record the outcome; all five still `pre
  1 UPC-WP-0002-T04              prj-unattended-progress-company dec=42ad2ad5-600c-41c0-a627-cad4b0d1a29b | Founder must execute OH-2026-001…005 (Orange/Red) in binky-control and record the outcome; all five still `pre
  1 RCLK-WP-0005-T05             railiance-clock        dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Disposable VM proof after T02/T03, then specifically authorized native verification through the S1 owner.
  1 RPF-WP-0048-T02              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | 24h soak after adoption, then founder confirmation of the scoped identity and checks before automated sync; AC
  1 RPF-WP-0044-T03              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Adopted 2026-09-21; the follow-on step (issue-core adoption, then automation) waits on the founder's go-ahead.
  1 RPF-WP-0044-T04              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder go-ahead plus rapp-issue-core's agreement (hub message) that ArgoCD owns production and make deploy st
  1 RPF-WP-0044-T05              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Adopted 2026-09-21; remaining preconditions and the next step wait on the founder's go-ahead.
  1 RPF-WP-0044-T06              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder go-ahead for the ESO adoption after adding CRD Prune=false,Delete=false and re-running the diff.
  1 RPF-WP-0044-T07              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder go-ahead to restore automated prune/selfHeal on railiance-apps-root once T03-T06 are proven.
  1 RPF-WP-0035-T02              railiance-platform     dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | SECRETS-WP-0007-T04 done 2026-09-27, so that gate is open. Real blocker: live KeyCape registration of client s
  1 VERGABE-WP-0019-T06          vergabe-teilnahme      dec=d06307e5-2737-461a-a2f4-a12c3b492a9a | Source and live SSO/recovery are delivered, and one founder sign-in passed September 24. Await invited recipie
  0 MARKITECT-WP-0002-T07        markitect-main         dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Registry ownership/access and npm/CDN publication receipts from the standalone maintainer.
  0 NK-WP-0042-T02               net-kingdom            dec=cef97ccd-4ee7-40fe-859e-1df9c9360ecb | Agree the MFA-required user experience with user-engine and one pilot workload; must be accepted from a user's
  0 NK-WP-0011-T02               net-kingdom            dec=8a5d1eb8-b665-4d25-9742-a15ecfc87c0c | ADR-0009 adoption trigger absent; then railiance-platform/rapp-postgres must admit the database consumer and r
  0 CUST-WP-0076-T01             the-custodian          dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Operator must select the concrete attended provisioning scope, date and any recurrence; the checklist renderer
  0 CUST-WP-0073-T05             the-custodian          dec=1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa | Deferred by founder decision 2026-09-24; reopened only by the founder on one of the three triggers below, in o
  0 FLEX-WP-0027-T03             access-engine          dec=e1868a8d-cad7-48c6-84d1-78a5a566d4a4 | Needs the operator's exact signed-in account and actual human acknowledgements; synthetic policy checks are no
  0 FLEX-WP-0020-T11             access-engine          dec=e071b34e-c4d4-49d0-824d-2c58bb0ae496 | Soak window after T10; destructive cleanup needs separate human approval.
  0 FLEX-WP-ADHOC-2026-10-03-T02 access-engine          dec=877c268b-2089-42f1-a811-d98f549c1cb2 | Live railiance01 change; founder go needed for CI image digest, helm install and tunnel.
  0 EMERGENT-WP-0002-T02         emergent-security      dec=d20a9750-2b29-534e-8227-fb866581a6ca | Cross-owner doctrine ratification and human exact-packet adoption remain pending; local boundary implementatio
  0 FIN-WP-0005-T01              fin-hub                dec=b6a44b55-8d10-4b96-8a71-524a0c34d2f3 | Operator and Steuerbuero confirm the Qonto plan, DATEV tenant, master-data owner, workflow and retention polic
  0 FT-WP-0002-T01               fluid-telegram         dec=7f455718-66c9-4049-9aaf-1143aea39d34 | An operator registers a dedicated account, obtains api_id/api_hash and runs the guided session bootstrap; neve
  0 GLAS-WP-0015-T03             glas-harness           dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Await owner returns: secrets-engine config, holder admission, lane approvals and scoped delivery; operator inp
  0 HOH-WP-0002-T04              hall-of-helix          dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Publishing 102 internal seats is an irreversible outward change; corpus review and disposition are the founder
  0 HUB-WP-0012-T06              hub-core               dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | T04/T05 live admission and Railiance/platform owners' attended receipts
  0 INFD-WP-0005-T05             informed-decision      dec=0d6792b6-59e4-4fa0-887a-c4e51ea8e131 | Requester CLIENT_SECRET must reach the review pod by ESO (railiance-platform, msg cd811073) and the custody ch
  0 INFD-WP-0005-T10             informed-decision      dec=24b0c846-a58e-43bc-ab80-988180ddd2f9 | Live rollout of intake, admission branch and write-back flag needs the founder's go
  0 MASON-WP-0005-T03            ops-mason              dec=e9f44beb-ad15-4285-8996-1e66d312fe59 | Explicit human approval of the plan (status: approved, approved_by, approved_at) after the live survey.
  0 MASON-WP-0006-T06            ops-mason              dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval e
  0 MASON-WP-0004-T01            ops-mason              dec=e9f44beb-ad15-4285-8996-1e66d312fe59 | Founder ruling on the genuinely unclear paths; no scoped metadata grant or complete inventory yet.
  0 MASON-WP-0004-T02            ops-mason              dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Requires a valid scoped metadata grant (operator) before the described paths can be written and verified.
  0 WARDEN-WP-0027-T02           ops-warden             dec=1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa | Trust-root design is a founder decision: who holds unseal shares and recovery keys, quorum, break-glass invoca
  0 WARDEN-WP-0039-T03           ops-warden             dec=None | Code side done 2026-10-03 (policy.fetch_flex_auth_url). Waits on founder go: deploy access-engine pin flex-aut
  0 WARDEN-WP-0037-T03           ops-warden             dec=1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa | Founder HOLD 2026-09-21: no rotation until SECRETS-WP-0006-T06 moves the publish lane off the legacy whynot-de
  0 UPC-WP-0004-T02              prj-unattended-progress-company dec=42ad2ad5-600c-41c0-a627-cad4b0d1a29b | Publish gates: IP ownership, domain, Impressum (founder) and G1 via UPC-WP-0002; DEC-2026-006 approved as prep
  0 UPC-WP-0004-T03              prj-unattended-progress-company dec=42ad2ad5-600c-41c0-a627-cad4b0d1a29b | Publish gates: IP ownership, domain, Impressum (founder) and G1 via UPC-WP-0002; DEC-2026-006 approved as prep
  0 UPC-WP-0003-T03              prj-unattended-progress-company dec=42ad2ad5-600c-41c0-a627-cad4b0d1a29b | Needs ≥30 days of founder-logged minutes in binky-control/briefs/load-log.csv (window starts 2026-09-28 at the
  0 RAIL-HO-WP-0011-T08          railiance-infra        dec=5d8dcdb5-6d7b-463e-bb39-0a4737331403 | Live recipient removal or credential replacement requires explicit operator approval after the dry run.
  0 RMASTER-WP-0020-T08          railiance-master       dec=5d8dcdb5-6d7b-463e-bb39-0a4737331403 | Retention expiry, a successful railiance01 DR drill and new explicit approval for destructive deletion.
  0 RPF-WP-0027-T03              railiance-platform     dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receip
  0 RPF-WP-0027-T06              railiance-platform     dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff
  0 RPF-WP-0038-T04              railiance-platform     dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker cred
  0 RPF-WP-0044-T08              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Planning only; needs an operator read-only check of coulombcore's ArgoCD, outside agent session scope.
  0 RPF-WP-0015-T03              railiance-platform     dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infr
  0 RPF-WP-0050-T02              railiance-platform     dec=1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa | Founder must explicitly choose batched attended custody, response-wrapped issuer delivery, or scoped MFA silen
  0 RPF-WP-0043-T04              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED);
  0 RPF-WP-0035-T03              railiance-platform     dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability sc
  0 RPF-WP-0035-T07              railiance-platform     dec=1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa | Founder HOLD (2026-09-21) on the legacy whynot-design npm pointer; custody disposition is an attended decision
  0 RPF-WP-0035-T06              railiance-platform     dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays
  0 RPF-WP-0035-T08              railiance-platform     dec=ab85ae8a-12a0-4945-ae64-1d3d86d5b26f | Provisioned and delivered 2026-09-11 (CCR-2026-0021/0022 applied); do not repeat. Receiver rollout with eviden
  0 RPF-WP-0036-T03              railiance-platform     dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | activity-core replied (not accepted yet): role acceptance is the founder decision ACTIVITY-WP-0042-T01 (D2); t
  0 RAPP-OPENBAO-WP-0002-T02     rapp-openbao           dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Await the loopback OIDC callback accepted by the OpenBao platform-admin role and an attended MFA login (see RM
  0 RAPP-POLICY-NEXUS-WP-0002-T05 rapp-policy-nexus      dec=89f1058f-33bc-47a8-8a49-0b44d426c67e | Live change; runs only after the founder approves the plan with T02-T04 done.
  0 REEF-RAILIANCE-WP-0003-T04   reef-railiance         dec=2fd5849c-240e-4d0a-bf07-5ebf8dfce3fd | Production approval requires mitigation or explicit acceptance of the single-node/shared-control-plane risk.
  0 RBT-WP-0006-T01              runbook-tutorials      dec=1e517449-2114-4a8f-9c6b-fcdbe977378e | Needs a decision on which identity runs the command.
  0 RBT-WP-0006-T02              runbook-tutorials      dec=1e517449-2114-4a8f-9c6b-fcdbe977378e | Needs a decision on scan scope.
  0 RBT-WP-0006-T03              runbook-tutorials      dec=1e517449-2114-4a8f-9c6b-fcdbe977378e | Needs decisions on access, identity and what is sent where.
  0 RBT-WP-0006-T04              runbook-tutorials      dec=1e517449-2114-4a8f-9c6b-fcdbe977378e | Needs a decision on how a pack in another repo is identified and trusted.
  0 RBT-WP-0006-T05              runbook-tutorials      dec=1e517449-2114-4a8f-9c6b-fcdbe977378e | Needs a decision whether hosts without a browser justify it; the CLI already covers v0.1 runs (moved from RBT-
  0 RBT-WP-0006-T06              runbook-tutorials      dec=1e517449-2114-4a8f-9c6b-fcdbe977378e | Needs a decision to start a v0.3 design: conditional applicability (G1), longer horizons (G2), gate recheck (G
  0 RBT-WP-0006-T07              runbook-tutorials      dec=1e517449-2114-4a8f-9c6b-fcdbe977378e | Optional follow-up agreed with Bernd on 2026-09-29: the workplans close without it. Needs a decision when to r
  0 TD-WP-0003-T01               test-driver            dec=b6a44b55-8d10-4b96-8a71-524a0c34d2f3 | Bounded live-model experiment: run count and cost ceiling agreed with the operator before the first call.
  0 TD-WP-0003-T06               test-driver            dec=b6a44b55-8d10-4b96-8a71-524a0c34d2f3 | Operator establishes Playwright and clears its licence.
  0 TD-WP-0003-T07               test-driver            dec=b6a44b55-8d10-4b96-8a71-524a0c34d2f3 | Needs an independently timed fresh implementation by an author who does not copy the fixtures.
  0 TD-WP-0004-T05               test-driver            dec=b6a44b55-8d10-4b96-8a71-524a0c34d2f3 | Operator/target-owner-selected system and approved bounded engagement.
  0 USER-WP-0035-T02             user-engine            dec=62aa95e4-3ccc-4867-8806-5e3db005b483 | Needs the operator-owned governed transactional mail lane (email-connect plus the OpenBao delivery token).
  0 USER-WP-0027-T04             user-engine            dec=cef97ccd-4ee7-40fe-859e-1df9c9360ecb | Attended live acceptance of U05-U08/P04-P06 against the real provider factor (enrollment, cancellation, replac
  0 USER-WP-0028-T03             user-engine            dec=cef97ccd-4ee7-40fe-859e-1df9c9360ecb | Attended live acceptance of U05-U08 (enrollment, cancel, replace, lost-factor recovery, old-AAL1-session behav
88 human gates
