the-custodian/infra/security-flow/playwright-delivery.json

{
  "case_id": "case:cross-owner:CUST-WP-0080-T05:playwright-delivery",
  "scenario_type": "cross_owner_wait",
  "observed_at": "2026-10-13",
  "coordinating_owner": "the-custodian / custodian-codex",
  "beneficiary_workplan_id": "CUST-WP-0080",
  "beneficiary_task_id": "CUST-WP-0080-T05",
  "obligor_repo": "railiance-platform",
  "obligor_workplan_id": "RPF-WP-0056",
  "obligor_task_id": "RPF-WP-0056-T03",
  "state": "waiting",
  "reason": "Pilot and scoped RBAC delivered; same-image abrupt recovery now verified by provider receipts. Remaining delivery: exact owner registration/custody/authenticator/transport revisions, real human/agent trials, provider acceptance and managed discovery; cross-version rollback remains unproven in provider T01.",
  "request_message_id": "1b279bad-a159-43da-8709-1167882e62f8",
  "driver_lookup": {
    "local_project_workplans_scanned": 10,
    "matching_driver": null
  },
  "source_records": [
    {
      "repo": "railiance-platform",
      "path": "docs/playwright-identity-handoff.md",
      "commit": "d303c99e3be993ffa989bc9ba3d7b471903858ce",
      "sha256": "9ddd4303c11182b62fdb45c737d5cd9457dcb83f47503cf9e0ef476f45016623"
    },
    {
      "repo": "railiance-platform",
      "path": "workplans/RPF-WP-0056-playwright-consumer-admission.md",
      "commit": "d303c99e3be993ffa989bc9ba3d7b471903858ce",
      "sha256": "8c4da42a929a7016df535bd40cfa724f308777c8a4822c6f4ca9868dad8eefdc"
    },
    {
      "repo": "rapp-playwright",
      "path": "workplans/RAPP-PLAYWRIGHT-WP-0004-consumer-verification.md",
      "commit": "3a30ef159ae680da9e03179fcbe4dac9cdcc9cc3",
      "sha256": "14ddd47537fe25964ed4df02c71a9d78dda74c4e2fb39c427b119de5f18e504e"
    },
    {
      "repo": "rapp-playwright",
      "path": "docs/evidence/2026-10-13-crash-recovery.md",
      "commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
      "sha256": "871221e07da35c468f0220aa0852145a83aee6a05a082219281d867d64c5ac4d"
    },
    {
      "repo": "rapp-playwright",
      "path": "docs/evidence/2026-10-13-crash-recovery/managed/verification.json",
      "commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
      "sha256": "87bebb470a0f3839ca6e991b1b3d4932cee04317f0e35bbcc18bd2183316a3fb"
    },
    {
      "repo": "rapp-playwright",
      "path": "docs/evidence/2026-10-13-crash-recovery/local/verification.json",
      "commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
      "sha256": "9ebd8c599cfae45e67c4994a325f78d47cc18fd1ce6ccde1791308e1c3e2ef0a"
    },
    {
      "repo": "rapp-playwright",
      "path": "docs/evidence/2026-10-13-crash-recovery/managed-first-attempt.json",
      "commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
      "sha256": "cb32871a3b9175301444efa1246869550ad3e2c78d26839e52f6df784bd415c3"
    },
    {
      "repo": "rapp-playwright",
      "path": "workplans/RAPP-PLAYWRIGHT-WP-0004-consumer-verification.md",
      "commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
      "sha256": "83410fc8993810fcdcdb4baba191dee334d09aa9c1817943a6dbbdf357ec9a50"
    }
  ],
  "linked_existing_tasks": [
    {
      "repo": "railiance-platform",
      "task_id": "RPF-WP-0056-T03",
      "hub_task_id": "a82762eb-bb6d-5600-89ca-a81ada2eba9f",
      "status_observed": "wait",
      "responsibility": "Integrated supported consumer flow and live consumer acceptance."
    },
    {
      "repo": "railiance-platform",
      "task_id": "RPF-WP-0056-T06",
      "hub_task_id": "ef6c21bc-0048-5b73-976e-130cd9af538d",
      "status_observed": "wait",
      "responsibility": "Accept Custodian coordinating owner and source task return."
    },
    {
      "repo": "rapp-playwright",
      "task_id": "RAPP-PLAYWRIGHT-WP-0004-T01",
      "hub_task_id": "09f87694-8832-5ae8-9d0b-b66834ffcfcc",
      "status_observed": "wait",
      "responsibility": "Accept native human/agent consumer operation and disposition of unproven cross-version rollback; same-image abrupt recovery is delivered."
    },
    {
      "repo": "rapp-playwright",
      "task_id": "RAPP-PLAYWRIGHT-WP-0004-T03",
      "hub_task_id": "c8642437-27c5-5e58-b0f8-847c285fb4e6",
      "status_observed": "wait",
      "responsibility": "Publish supported managed availability with reuse-surface."
    }
  ],
  "owner_requests": [
    {
      "repo": "railiance-cluster",
      "message_id": "0c1023ce-86ac-404a-842e-2f7e1a6d90f1",
      "responsibility": "Native JWT authenticator integration, version-specific validation, preserved existing authentication, rollback and API allow/deny receipts.",
      "accepted_task_id": null,
      "acceptance": "Not observed; exact owner source task and revision must be returned."
    },
    {
      "repo": "key-cape",
      "message_id": "85bf4765-35cc-418f-903b-2dba64e8a06b",
      "responsibility": "Public PKCE and distinct agent registration contract, claims/audience/scope, issuance/expiry and client disablement.",
      "accepted_task_id": null,
      "acceptance": "Not observed; exact owner source task and revision must be returned."
    },
    {
      "repo": "net-kingdom",
      "message_id": "c6b4dfb0-44d5-4f12-8854-2c38ab6dc454",
      "responsibility": "Supported loopback/custom-scope registration outside current browser-RP type; registration and governed per-agent custody with Platform.",
      "accepted_task_id": "NK-WP-0050-T02",
      "acceptance": "NK-WP-0050-T01 registration preparation done. T02 progress: digest-bound private activation, conditional patch/readback and exact original-state rollback preparation verified in eba6e1f plus 276b95f collision repair; governed custody, protected executor integration and scoped live action remain open. T03 live acceptance waits.",
      "source_commit": "276b95f6bab983a06795c26d5592b895b9a55f27",
      "source_workplan": "workplans/NK-WP-0050-playwright-consumer-registration.md"
    },
    {
      "repo": "ops-bridge",
      "message_id": "c367f3a2-ceba-4ec9-b241-b917c47ba11e",
      "responsibility": "Supported per-caller TLS API transport, individual identity, renewal, cleanup and active connection termination.",
      "accepted_task_id": null,
      "acceptance": "Not observed; exact owner source task and revision must be returned."
    }
  ],
  "dependency_order": [
    {
      "milestone": "M1",
      "requires": [],
      "deliverable": "Collect reviewed owner source tasks, exact registration/claim contract, governed per-agent custody route, supported per-caller transport and authenticator rollback proposal. Reviews can proceed independently; do not infer rollout authority."
    },
    {
      "milestone": "M2",
      "requires": [
        "M1"
      ],
      "deliverable": "Owners activate reviewed issuer/registration, API authenticator and per-caller transport in dependency order. Platform integrates one-command login/connect/trial with renewal, actionable failures and cleanup."
    },
    {
      "milestone": "M3",
      "requires": [
        "M2"
      ],
      "deliverable": "Real human and registered agent independently prove API-returned identity, least-privilege permissions and responsive/keyboard browser trials. Native wrong-audience, missing-scope, expired/tampered and ineligible-identity attempts fail. Prove revocation/active connection termination and retain remaining JWT lifetime limits."
    },
    {
      "milestone": "M4",
      "requires": [
        "M3"
      ],
      "deliverable": "Platform/provider accept real consumer receipts, retain delivered same-image abrupt recovery and explicit cross-version rollback limitation; publish docs and update existing capability.infotech.headless-browser managed availability; read back discovery."
    }
  ],
  "first_executable_milestone": "M1: NetKingdom registration preparation delivered in NK-WP-0050-T01; finish T02 custody/guarded activation integration, and obtain KeyCape, cluster and ops-bridge exact owner source revisions before M2 live activation.",
  "unresolved_user_policy_decision": null,
  "eligibility": "All identified platform humans and coding agents already admitted; no repeat membership approval.",
  "constraints": [
    "First delivery uses scoped port-forward and supported per-caller API transport; no new gateway required.",
    "No shared admin kubeconfig/workstation SSH identity; no Secrets/exec/workload writes/other namespaces or new targets.",
    "Human platform login and distinct registered governed agent identities.",
    "No synthetic token/admin impersonation acceptance substitute.",
    "Client disablement stops issuance; existing JWTs persist to expiry and active connections require termination.",
    "No foreign task statuses changed or owner approvals invented; no workers injected."
  ],
  "availability_observed": "Managed pilot and same-image abrupt recovery verified; real consumer identity/transport and final managed availability remain pending. Local provider discovery is published.",
  "owner_progress": [
    {
      "message_id": "a2449fe0-ba12-47b8-9ca3-d7deedc089c3",
      "repo": "rapp-playwright",
      "commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
      "accepted_scope": "Local and managed same-image abrupt interruption/recovery; active and queued work interrupted, orphan PNG removed, completed hashes retained, fresh responsive/keyboard trial passed.",
      "review_scope": "Reviewed committed provider report and local/managed/failure receipts; coordinator did not repeat a live crash.",
      "first_transport_failure_retained": true,
      "identity_acceptance": false,
      "cross_version_rollback": false
    },
    {
      "repo": "net-kingdom",
      "commit": "5dd74dfbdf3fd38adb1bfc1bdc1326181435f0e9",
      "accepted_scope": "Registration source responsibility, exact public and per-agent compiler, preservation/refusal tests and native disposable token/config checks.",
      "implementation_task": "NK-WP-0050-T02",
      "preparation_task": "NK-WP-0050-T01",
      "identity_acceptance": false,
      "custody_admitted": false,
      "live_activated": false
    },
    {
      "repo": "net-kingdom",
      "commit": "276b95f6bab983a06795c26d5592b895b9a55f27",
      "implementation_task": "NK-WP-0050-T02",
      "accepted_scope": "Private activation patch preparation and exact original-state recovery, including reproduced effective-audience/delivery-alias collision repair; 90 focused tests and native synthetic startup checks pass.",
      "custody_admitted": false,
      "live_activated": false,
      "identity_acceptance": false
    }
  ]
}