files: workplans 1128 open 108 Counter({'blocked': 100, 'active': 5, 'proposed': 2, 'backlog': 1})
open tasks Counter({'done': 250, 'wait': 232, 'todo': 44, 'cancel': 6, 'progress': 4})

=== A. satisfied waits in open workplans (file view) ===
ACTIVITY-WP-0032-T05         activity-core          human=False on=None | deps terminal: ACTIVITY-WP-0032-T03,ACTIVITY-WP-0032-T04,ACTIVITY-WP-0031-T01
COORDINATION-WP-0004-T02     coordination-engine    human=False on=None | deps terminal: COORDINATION-WP-0004-T01
MARKITECT-WP-0002-T07        markitect-main         human=True on=None | deps terminal: MARKITECT-WP-0002-T06
RAPPS-WP-0014-T03            railiance-apps         human=True on=None | deps terminal: RAPPS-WP-0014-T02
RCLK-WP-0005-T04             railiance-clock        human=False on=message-from:railiance-bootstrap | deps terminal: RCLK-WP-0005-T01
TD-WP-0003-T07               test-driver            human=False on=None | deps terminal: TD-WP-0003-T02
USER-WP-0027-T04             user-engine            human=False on=None | deps terminal: KEY-WP-0035-T02,KEY-WP-0035-T03,NK-WP-0033
USER-WP-0028-T03             user-engine            human=False on=None | deps terminal: KEY-WP-0035,NK-WP-0033

=== B. blocked workplans without any wait task ===
RAIL-FAB-WP-0031 railiance-fabric residual []
UPC-WP-0002 prj-unattended-progress-company implementation [('UPC-WP-0002-T01', 'progress'), ('UPC-WP-0002-T02', 'progress'), ('UPC-WP-0002-T03', 'progress'), ('UPC-WP-0002-T04', 'progress')]
UPC-WP-0003 prj-unattended-progress-company planning [('UPC-WP-0003-T03', 'todo')]
UPC-WP-0004 prj-unattended-progress-company planning [('UPC-WP-0004-T02', 'todo'), ('UPC-WP-0004-T03', 'todo')]

=== B2. non-blocked open workplans whose only open tasks are wait ===
ACTIVITY-WP-0042 activity-core proposed 3
MARKITECT-WP-0002 markitect-main active 4
RBT-WP-0006 runbook-tutorials active 7

=== B3. open workplans with zero open tasks ===
RAIL-FAB-WP-0031 railiance-fabric blocked residual 3

=== C. unqualified waits in open non-residual workplans ===
ACTIVITY-WP-0042-T01 activity-core | 
ACTIVITY-WP-0042-T02 activity-core | 
ACTIVITY-WP-0042-T03 activity-core | 

=== E. roots by transitive open-workplan fan-in (file view) ===
  7 SAND-WP-0015-T04             wait h=False on=message-from:railiance-platform dec=None | Credential owner railiance-platform/OpenBao with rein-aharness must es
      -> CUST-WP-0073, FEP-WP-0008, FI-WP-0005, GLAS-WP-0012, LLM-WP-0009, REINAH-WP-0003, SAND-WP-0014
  5 SECRETS-WP-0009-T03          wait h=False on=message-from:glas-harness dec=None | Native apply/verify and credential delivery/revocation completed; owne
      -> CUST-WP-0073, FEP-WP-0008, GLAS-WP-0012, LLM-WP-0009, REINAH-WP-0003
  4 GLAS-WP-0012                 WP blocked glas-harness
      -> CUST-WP-0073, FEP-WP-0008, LLM-WP-0009, REINAH-WP-0003
  4 FEP-WP-0002-T03              todo
      -> FEP-WP-0003, FEP-WP-0004, FEP-WP-0006, FEP-WP-0008
  4 NK-WP-0040                   WP blocked net-kingdom
      -> RAIL-HO-WP-0013, RCLK-WP-0002, RCLK-WP-0004, RCLK-WP-0005
  4 FLUID-WP-0007                WP done fluid-core
      -> FLUID-WP-0008, FLUID-WP-0009, FT-WP-0001, FT-WP-0002
  3 RAPPS-WP-0014-T03            wait h=True on=None dec=None | Await populated two-user/document workflow, coherent PostgreSQL/media/
      -> CUST-WP-0071, USER-WP-0027, VERGABE-WP-0019
  3 RCLK-WP-0002                 WP blocked railiance-clock
      -> RAIL-HO-WP-0013, RCLK-WP-0004, RCLK-WP-0005
  3 FLUID-WP-0008-T03            wait h=True on=None dec=None | Human step: operator creates the private test channel, then the public
      -> FLUID-WP-0009, FT-WP-0001, FT-WP-0002
  3 FLUID-WP-0008-T02            wait h=True on=None dec=None | Human step: operator registers the bot via BotFather and stores the to
      -> FLUID-WP-0009, FT-WP-0001, FT-WP-0002
  2 FT-WP-0001-T12               todo
      -> FLUID-WP-0009, FT-WP-0002
  2 RAIL-HO-WP-0013              WP blocked railiance-infra
      -> RCLK-WP-0004, RCLK-WP-0005
  2 ACTIVITY-WP-0041             WP blocked activity-core
      -> ACTIVITY-WP-0040, RPF-WP-0048
  2 HFACT-WP-0001-T01            wait h=True on=None dec=None | Exact one-cycle runtime is installed and synthetically proved on works
      -> LLM-WP-0009, VERGABE-WP-0018
  2 RAIL-FAB-WP-0028             WP blocked railiance-fabric
      -> RAIL-FAB-WP-0029, RAPP-TELEMETRY-WP-0001
  2 IR-WP-0005-T02               wait h=True on=message-from:secrets-engine dec=None | Human acceptance of three apply/verify/exec approvals for the pinned i
      -> IR-WP-0006, IR-WP-0007
  2 RAPPCOREHUB-WP-0002-T05      wait h=True on=None dec=None | Operator approval after final backup/delta verification; seven-day sta
      -> CORE-WP-0010, HUB-WP-0012
  2 USER-WP-0026-T03             wait h=False on=message-from:net-kingdom dec=None | Needs a provider-owned workload catalogue and application access decis
      -> USER-WP-0027, USER-WP-0028
  1 RCLK-WP-0005                 WP blocked railiance-clock
      -> RCLK-WP-0004
  1 RBT-WP-0004                  UNKNOWN
      -> RBT-WP-0006
  1 RTEL-WP-0002                 WP blocked railiance-telemetry
      -> RPF-WP-0036
  1 RPF-WP-0044-T06              wait h=True on=None dec=None | Founder go-ahead for the ESO adoption after adding CRD Prune=false,Del
      -> RPF-WP-0043
  1 RPF-WP-0044-T03              wait h=True on=None dec=None | Adopted 2026-09-21; the follow-on step (issue-core adoption, then auto
      -> RPF-WP-0043
  1 NK-WP-0003                   UNKNOWN
      -> NK-WP-0011
  1 RPF-WP-0044-T05              wait h=True on=None dec=None | Adopted 2026-09-21; remaining preconditions and the next step wait on 
      -> RPF-WP-0043
  1 SECRETS-WP-0006-T05          wait h=True on=message-from:railiance-platform dec=None | OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-
      -> SECRETS-WP-0007
  1 NK-WP-0022                   WP blocked net-kingdom
      -> RMASTER-WP-0020
  1 MASON-WP-0005-T01            wait h=False on=message-from:railiance-platform dec=None | railiance-platform must confirm the tenant/path segment and the KeyCap
      -> RPF-WP-0035
  1 STATE-WP-0079-T05            wait h=False on=None dec=None | Legacy-meter evidence must cover a full week (capture fixed 2026-08-20
      -> HUB-WP-0006
  1 REINAH-WP-0003-T04           wait h=False on=message-from:activity-core dec=None | Migration of profile-absent FI/Binky definitions with Activity Core, k
      -> LLM-WP-0009
  1 RPF-WP-0035-T02              wait h=True on=None dec=None | KEY-WP-0009 finished; remaining gate is human: attended platform provi
      -> SECRETS-WP-0008
  1 VERGABE-WP-0019              WP blocked vergabe-teilnahme
      -> USER-WP-0027
  1 WARDEN-WP-0034               WP blocked ops-warden
      -> WARDEN-WP-0040
  1 RAPP-POLICY-NEXUS-WP-0002-T02 wait h=False on=message-from:railiance-platform dec=None | Waiting on railiance-platform (lane) and railiance-apps (production bi
      -> RPF-WP-0043
  1 REINAH-WP-0003-T05           todo
      -> LLM-WP-0009
  1 NK-WP-0004                   UNKNOWN
      -> NK-WP-0011
  1 STATE-WP-0079-T04            todo
      -> HUB-WP-0006
  1 RCLK-WP-0005-T04             wait h=False on=message-from:railiance-bootstrap dec=None | Bootstrap owner fresh-estate and upgrade rehearsal, failed-time gate a
      -> RCLK-WP-0004
  1 STATE-WP-0079                WP blocked state-hub
      -> HUB-WP-0006
  1 RAPP-POLICY-NEXUS-WP-0002    WP blocked rapp-policy-nexus
      -> RPF-WP-0043
  1 RPF-WP-0044-T04              wait h=True on=message-from:rapp-issue-core dec=None | Founder go-ahead plus rapp-issue-core's agreement (hub message) that A
      -> RPF-WP-0043
  1 NK-WP-0006                   UNKNOWN
      -> NK-WP-0011

=== F. cycles (file view) ===

=== G. human gates by fan-in ===
  3 FLUID-WP-0008-T02            fluid-core             dec=None | Human step: operator registers the bot via BotFather and stores the token in OpenBao.
  3 FLUID-WP-0008-T03            fluid-core             dec=None | Human step: operator creates the private test channel, then the public channel.
  3 RAPPS-WP-0014-T03            railiance-apps         dec=None | Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery point, iso
  2 ACTIVITY-WP-0041-T03         activity-core          dec=None | Founder approves the exact autonomous scope: merge paths, tests, images, ceilings, stop conditions, rollback, 
  2 IR-WP-0005-T02               intelligence-radar     dec=None | Human acceptance of three apply/verify/exec approvals for the pinned intelligence-radar-key-check recipient; s
  2 HFACT-WP-0001-T01            prj-helixforge-factory dec=None | Exact one-cycle runtime is installed and synthetically proved on workstation and Railiance; independent pilot 
  2 RAIL-HO-WP-0013-T04          railiance-infra        dec=None | Depends on T03 and reviewed live-host authorization.
  2 RAPPCOREHUB-WP-0002-T05      rapp-core-hub          dec=None | Operator approval after final backup/delta verification; seven-day stabilization window from 2026-08-21.
  1 NK-WP-0022-T08               net-kingdom            dec=None | Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart drill befor
  1 STATE-WP-0079-T06            state-hub              dec=None | Stopping the primary is a founder decision; needs T04 handoffs and T05 retirement first; legacy meter still ha
  1 FT-WP-0001-T01               fluid-telegram         dec=None | Human step: operator registers the HelixForge bot via BotFather.
  1 FT-WP-0001-T02               fluid-telegram         dec=None | Human step: operator creates the private test and public channels.
  1 HFACT-WP-0001-T03            prj-helixforge-factory dec=None | September 16 native OpenRouter receipt resolves the generic requester, operator-reader, deployed approval and 
  1 RCLK-WP-0005-T05             railiance-clock        dec=None | Disposable VM proof after T02/T03, then specifically authorized native verification through the S1 owner.
  1 RPF-WP-0044-T03              railiance-platform     dec=None | Adopted 2026-09-21; the follow-on step (issue-core adoption, then automation) waits on the founder's go-ahead.
  1 RPF-WP-0044-T04              railiance-platform     dec=None | Founder go-ahead plus rapp-issue-core's agreement (hub message) that ArgoCD owns production and make deploy st
  1 RPF-WP-0044-T05              railiance-platform     dec=None | Adopted 2026-09-21; remaining preconditions and the next step wait on the founder's go-ahead.
  1 RPF-WP-0044-T06              railiance-platform     dec=None | Founder go-ahead for the ESO adoption after adding CRD Prune=false,Delete=false and re-running the diff.
  1 RPF-WP-0044-T07              railiance-platform     dec=None | Founder go-ahead to restore automated prune/selfHeal on railiance-apps-root once T03-T06 are proven.
  1 RPF-WP-0035-T02              railiance-platform     dec=None | KEY-WP-0009 finished; remaining gate is human: attended platform provisioning of the exact JWT mount/role/poli
  1 RAPP-POLICY-NEXUS-WP-0002-T05 rapp-policy-nexus      dec=None | Live change; runs only after the founder approves the plan with T02-T04 done.
  1 SECRETS-WP-0006-T05          secrets-engine         dec=None | OpenRouter key-check native acceptance is recorded in SECRETS-WP-0010-T03. Other lanes still need exact approv
  1 VERGABE-WP-0019-T06          vergabe-teilnahme      dec=None | Source and live SSO/recovery are delivered, and one founder sign-in passed September 24. Await invited recipie
  0 MARKITECT-WP-0002-T07        markitect-main         dec=None | Registry ownership/access and npm/CDN publication receipts from the standalone maintainer.
  0 NK-WP-0042-T02               net-kingdom            dec=None | Agree the MFA-required user experience with user-engine and one pilot workload; must be accepted from a user's
  0 NK-WP-0045-T01               net-kingdom            dec=None | Bernd accepts or amends NK-ADR-0017 (proposed) after user-engine confirms the AccountAuthority mapping.
  0 NK-WP-0045-T04               net-kingdom            dec=None | Needs a decision on where a workload reads the record (OpenBao-held, platform service, or repository artifact)
  0 CUST-WP-0073-T05             the-custodian          dec=None | Deferred by founder decision 2026-09-24; reopened only by the founder on one of the three triggers below, in o
  0 ACTIVITY-WP-0040-T02         activity-core          dec=None | Kubernetes change gate: route through ArgoCD adoption (ACTIVITY-WP-0041) or an explicit scoped exception befor
  0 FIN-WP-0005-T01              fin-hub                dec=None | Operator and Steuerbuero confirm the Qonto plan, DATEV tenant, master-data owner, workflow and retention polic
  0 FT-WP-0002-T01               fluid-telegram         dec=None | An operator registers a dedicated account, obtains api_id/api_hash and runs the guided session bootstrap; neve
  0 GLAS-WP-0015-T03             glas-harness           dec=None | Await owner returns: secrets-engine config, holder admission, lane approvals and scoped delivery; operator inp
  0 HOH-WP-0002-T04              hall-of-helix          dec=None | Publishing 102 internal seats is an irreversible outward change; corpus review and disposition are the founder
  0 HUB-WP-0012-T06              hub-core               dec=None | T04/T05 live admission and Railiance/platform owners' attended receipts
  0 MASON-WP-0005-T03            ops-mason              dec=None | Explicit human approval of the plan (status: approved, approved_by, approved_at) after the live survey.
  0 MASON-WP-0006-T06            ops-mason              dec=None | Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval e
  0 MASON-WP-0007-T05            ops-mason              dec=None | Wrapped platform-admin process copies the tenant-engine token from the registry document to platform/workloads
  0 MASON-WP-0004-T01            ops-mason              dec=None | Founder ruling on the genuinely unclear paths; no scoped metadata grant or complete inventory yet.
  0 MASON-WP-0004-T02            ops-mason              dec=None | Requires a valid scoped metadata grant (operator) before the described paths can be written and verified.
  0 WARDEN-WP-0027-T02           ops-warden             dec=None | Trust-root design is a founder decision: who holds unseal shares and recovery keys, quorum, break-glass invoca
  0 WARDEN-WP-0037-T03           ops-warden             dec=None | 
  0 RAIL-HO-WP-0011-T08          railiance-infra        dec=None | Live recipient removal or credential replacement requires explicit operator approval after the dry run.
  0 RMASTER-WP-0020-T08          railiance-master       dec=None | Retention expiry, a successful railiance01 DR drill and new explicit approval for destructive deletion.
  0 RPF-WP-0027-T03              railiance-platform     dec=None | Attended resolver run: postchecks outstanding; NetKingdom asked to package the complete sequence as one receip
  0 RPF-WP-0027-T06              railiance-platform     dec=None | Platform/OpenBao owner must publish the non-secret routing receipt for both lanes through the attended handoff
  0 RPF-WP-0038-T04              railiance-platform     dec=None | Operator chooses the independent archive prefix and confirms retention/caller contract and bounded worker cred
  0 RPF-WP-0048-T02              railiance-platform     dec=None | 24h soak after adoption, then founder confirmation of the scoped identity and checks before automated sync; AC
  0 RPF-WP-0044-T08              railiance-platform     dec=None | Planning only; needs an operator read-only check of coulombcore's ArgoCD, outside agent session scope.
  0 RPF-WP-0015-T03              railiance-platform     dec=None | Single-node outage exercise needs operator access and a declared restart order coordinated with railiance-infr
  0 RPF-WP-0043-T04              railiance-platform     dec=None | Founder go-ahead: the merge is a live production change (CONSTRUCT @ railiance-platform, activation=APPROVED);
  0 RPF-WP-0035-T03              railiance-platform     dec=None | Attended platform policy/schema apply after MASON-WP-0005 construction coordination confirms the capability sc
  0 RPF-WP-0035-T07              railiance-platform     dec=None | Founder HOLD (2026-09-21) on the legacy whynot-design npm pointer; custody disposition is an attended decision
  0 RPF-WP-0035-T06              railiance-platform     dec=None | INFD-WP-0001-T07/T08 terminal; remaining gate is human approval of the scoped delivery proof; front door stays
  0 RPF-WP-0035-T08              railiance-platform     dec=None | AUDIT-WP-0009-T09/T11 done; remaining gate is human: attended first-provision via factory_audit_custody.py aft
  0 RPF-WP-0036-T03              railiance-platform     dec=None | T02 done (cadence/expiry available). Proposed execution owner: activity-core (automation execution per SCOPE.m
  0 RAPPCOREHUB-WP-0003-T04      rapp-core-hub          dec=None | Attended provisioning of a dedicated read:repository Forgejo identity mounted through a namespace Secret; no P
  0 RAPP-OPENBAO-WP-0002-T02     rapp-openbao           dec=None | Await the loopback OIDC callback accepted by the OpenBao platform-admin role and an attended MFA login (see RM
  0 REEF-RAILIANCE-WP-0003-T04   reef-railiance         dec=None | Production approval requires mitigation or explicit acceptance of the single-node/shared-control-plane risk.
  0 RBT-WP-0006-T01              runbook-tutorials      dec=None | Needs a decision on which identity runs the command.
  0 RBT-WP-0006-T02              runbook-tutorials      dec=None | Needs a decision on scan scope.
  0 RBT-WP-0006-T03              runbook-tutorials      dec=None | Needs decisions on access, identity and what is sent where.
  0 RBT-WP-0006-T04              runbook-tutorials      dec=None | Needs a decision on how a pack in another repo is identified and trusted.
  0 RBT-WP-0006-T05              runbook-tutorials      dec=None | Needs a decision whether hosts without a browser justify it; the CLI already covers v0.1 runs (moved from RBT-
  0 RBT-WP-0006-T06              runbook-tutorials      dec=None | Needs a decision to start a v0.3 design: conditional applicability (G1), longer horizons (G2), gate recheck (G
  0 RBT-WP-0006-T07              runbook-tutorials      dec=None | Optional follow-up agreed with Bernd on 2026-09-29: the workplans close without it. Needs a decision when to r
  0 TD-WP-0003-T01               test-driver            dec=None | Bounded live-model experiment: run count and cost ceiling agreed with the operator before the first call.
  0 TD-WP-0003-T06               test-driver            dec=None | Operator establishes Playwright and clears its licence.
  0 TD-WP-0004-T05               test-driver            dec=None | Operator/target-owner-selected system and approved bounded engagement.
  0 USER-WP-0035-T02             user-engine            dec=None | Needs the operator-owned governed transactional mail lane (email-connect plus the OpenBao delivery token).
69 human gates
