From 858229e8db1ac2fcb17bb63e5d6648060e2671ee Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 1 Nov 2026 23:40:18 +0100 Subject: [PATCH] docs: preserve reviewed NetKingdom session artifacts --- .../WORK-RECORDS.md.worktree | 536 ++++++++ .../publication-backup/originals.json | 10 + .../publication-commit.json | 317 +++++ .../publication-inputs.json | 315 +++++ .../unrelated-state-verification.json | 6 + .../key-cape-publication/application.json | 7 + .../key-cape-publication/consistency.json | 144 ++ .../consistency.stderr.txt | 1 + .../key-cape-publication/projection.json | 198 +++ .../projection.stderr.txt | 0 .../key-cape-publication/protected.json | 1194 +++++++++++++++++ .../.custodian-brief.md.worktree | 37 + .../WORK-RECORDS.md.worktree | 224 ++++ .../publication-backup/originals.json | 10 + .../publication-commit.json | 33 + .../publication-inputs.json | 31 + .../consistency.json | 393 ++++++ .../consistency.stderr.txt | 1 + .../projection.json | 172 +++ .../projection.stderr.txt | 0 .../.custodian-brief.md.worktree | 47 + .../WORK-RECORDS.md.worktree | 48 + .../publication-backup/originals.json | 10 + .../publication-commit.json | 18 + .../publication-inputs.json | 15 + .../application.json | 7 + .../railiance-apps-publication/protected.json | 898 +++++++++++++ .../.custodian-brief.md.worktree | 47 + .../WORK-RECORDS.md.worktree | 48 + .../publication-backup/originals.json | 10 + .../publication-commit.json | 25 + .../publication-inputs.json | 23 + .../consistency.stderr.txt | 1 + .../publish-net-kingdom/projection.stderr.txt | 0 .../.custodian-brief.md.worktree | 91 ++ .../WORK-RECORDS.md.worktree | 289 ++++ .../publication-backup/originals.json | 10 + .../consistency.stderr.txt | 1 + .../projection.stderr.txt | 0 .../.custodian-brief.md.worktree | 47 + .../WORK-RECORDS.md.worktree | 48 + .../publication-backup/originals.json | 10 + .../publication/first-add-failure.json | 8 + .../.custodian-brief.md.worktree | 62 + .../WORK-RECORDS.md.worktree | 536 ++++++++ .../publication-backup/originals.json | 10 + .../publication/publication-inputs.json | 167 +++ .../.custodian-brief.md.worktree | 62 + .../WORK-RECORDS.md.worktree | 536 ++++++++ .../publication-backup/originals.json | 10 + 50 files changed, 6713 insertions(+) create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/originals.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-commit.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-inputs.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/unrelated-state-verification.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/application.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/projection.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/projection.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/protected.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/.custodian-brief.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/originals.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-commit.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-inputs.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/projection.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/projection.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/.custodian-brief.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/originals.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-commit.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-inputs.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/application.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/protected.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/.custodian-brief.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/originals.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-commit.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-inputs.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/consistency.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/projection.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/.custodian-brief.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/originals.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/consistency.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/projection.stderr.txt create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/.custodian-brief.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/originals.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/first-add-failure.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/.custodian-brief.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/originals.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-inputs.json create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/.custodian-brief.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/WORK-RECORDS.md.worktree create mode 100644 docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/originals.json diff --git a/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..6dc81634 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,536 @@ +# Work Records — the-custodian + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | CUST-WP-ADHOC-2026-05-02 | done | — | workplans/ADHOC-2026-05-02.md | +| workplan | CUST-WP-ADHOC-2026-07-02 | finished | — | workplans/ADHOC-2026-07-02.md | +| workplan | CUST-WP-ADHOC-2026-08-25-RETIRED | finished | — | workplans/ADHOC-2026-08-25-retired.md | +| workplan | CUST-WP-ADHOC-2026-08-25 | finished | — | workplans/ADHOC-2026-08-25.md | +| workplan | CUST-WP-ADHOC-2026-09-06 | finished | — | workplans/ADHOC-2026-09-06.md | +| workplan | CUST-WP-0000 | finished | — | workplans/CUST-WP-0000-state-hub-v0.1-build-deploy.md | +| workplan | CUST-WP-0000b | finished | — | workplans/CUST-WP-0000b-state-hub-v0.2-decisions-dependencies.md | +| workplan | CUST-WP-0001 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| workplan | CUST-WP-0002 | finished | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| workplan | CUST-WP-0004 | finished | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| workplan | CUST-WP-0005 | finished | — | workplans/CUST-WP-0005-dynamic-domains.md | +| workplan | CUST-WP-0006 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| workplan | CUST-WP-0007 | finished | — | workplans/CUST-WP-0007-gems-migration.md | +| workplan | CUST-WP-0008 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| workplan | CUST-WP-0009 | finished | — | workplans/CUST-WP-0009-human-interventions.md | +| workplan | CUST-WP-0010 | finished | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| workplan | CUST-WP-0010b | finished | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| workplan | CUST-WP-0013 | finished | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| workplan | CUST-WP-0015 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| workplan | CUST-WP-0016 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| workplan | CUST-WP-0017 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| workplan | CUST-WP-0018 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| workplan | CUST-WP-0019 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| workplan | CUST-WP-0020 | done | — | workplans/CUST-WP-0020-test-suite.md | +| workplan | CUST-WP-0021 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| workplan | CUST-WP-0022 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| workplan | CUST-WP-0023 | done | — | workplans/CUST-WP-0023-tpsc.md | +| workplan | CUST-WP-0024 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| workplan | CUST-WP-0026 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| workplan | CUST-WP-0027 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| workplan | CUST-WP-0029 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| workplan | CUST-WP-0030 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| workplan | CUST-WP-0031 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| workplan | CUST-WP-0032 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| workplan | CUST-WP-0033 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| workplan | CUST-WP-0039 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| workplan | CUST-WP-0040 | finished | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| workplan | CUST-WP-0041 | done | — | workplans/CUST-WP-0041-api-performance.md | +| workplan | CUST-WP-0043 | finished | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| workplan | CUST-WP-0044 | finished | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| workplan | CUST-WP-0045 | finished | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| workplan | CUST-WP-0069 | finished | — | workplans/CUST-WP-0045-cutover-runbook.md | +| workplan | CUST-WP-0046 | finished | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| workplan | CUST-WP-0047 | finished | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| workplan | CUST-WP-0048 | finished | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| workplan | CUST-WP-0049 | finished | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| workplan | CUST-WP-0050 | finished | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| workplan | CUST-WP-0051 | finished | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| workplan | CUST-WP-0052 | finished | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| workplan | CUST-WP-0053 | finished | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| workplan | CUST-WP-0055 | finished | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| workplan | CUST-WP-0056 | finished | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| workplan | CUST-WP-0059 | finished | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| workplan | CUST-WP-0060 | finished | — | workplans/CUST-WP-0060-work-record-canonization.md | +| workplan | CUST-WP-0061 | finished | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| workplan | CUST-WP-0062 | finished | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| workplan | CUST-WP-0063 | finished | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| workplan | CUST-WP-0064 | finished | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| workplan | CUST-WP-0065 | finished | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| workplan | CUST-WP-0066 | finished | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| workplan | CUST-WP-0067 | finished | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| workplan | CUST-WP-0068 | finished | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| workplan | CUST-WP-0070 | finished | — | workplans/CUST-WP-0070-publication-repo-category.md | +| workplan | CUST-WP-0071 | blocked | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| workplan | CUST-WP-0072 | finished | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| workplan | CUST-WP-0073 | blocked | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| workplan | CUST-WP-0074 | finished | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| workplan | CUST-WP-0075 | finished | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| workplan | CUST-WP-0076 | finished | — | workplans/CUST-WP-0076-provisioning-window-cadence.md | +| workplan | CUST-WP-0077 | finished | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| workplan | CUST-WP-0078 | finished | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| workplan | CUST-WP-0079 | blocked | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| workplan | CUST-WP-0080 | active | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| workplan | CUST-WP-0081 | finished | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| workplan | THE-WP-0001 | finished | — | workplans/THE-WP-0001-federation-interface.md | +| task | CUST-WP-ADHOC-2026-05-02-T01 | done | — | workplans/ADHOC-2026-05-02.md | +| task | CUST-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md | +| task | ADHOC-2026-08-25-T01 | done | — | workplans/ADHOC-2026-08-25-retired.md | +| task | CUST-WP-ADHOC-2026-08-25-T01 | done | — | workplans/ADHOC-2026-08-25.md | +| task | CUST-WP-ADHOC-2026-09-06-T01 | done | — | workplans/ADHOC-2026-09-06.md | +| task | CUST-WP-0001-T01 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| task | CUST-WP-0001-T02 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| task | CUST-WP-0002-T01 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T02 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T03 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T04 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T05 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T06 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T07 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T08 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T09 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T10 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T11 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T12 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T13 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T14 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T15 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0004-T01 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T02 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T03 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T04 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T05 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T06 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T07 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T08 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T09 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T10 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0005-T01 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T02 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T03 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T04 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T05 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T06 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T07 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T08 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T09 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T10 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T11 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | T01 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T02 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T03 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T04 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T05 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T01 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T02 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T03 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T04 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T05 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T06 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T07 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T08 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T09 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T10 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T11 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T12 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T13 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T14 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T15 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T16 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T17 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | CUST-WP-0008-T01 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T02 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T03 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T04 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0009-T1 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0009-T2 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0009-T3 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0010-T1 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010-T2 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010-T3 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010b-T01 | done | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| task | CUST-WP-0010b-T02 | done | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| task | CUST-WP-0013-T01 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T02 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T03 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T04 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T05 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T06 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T07 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T08 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T09 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T10 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T11 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T12 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T13 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T14 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0015-T01 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T02 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T03 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T04 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T05 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0016-T01 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T02 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T03 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T04 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T05 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0017-T01 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T02 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T03 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T04 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T05 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T06 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0018-T01 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T02 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T03 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T04 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T05 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T06 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T07 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0019-T01 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0019-T02 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0019-T03 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0020-T01 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T02 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T03 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T04 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T05 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0021-T01 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T02 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T03 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T04 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T05 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0022-T01 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T02 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T03 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T04 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T05 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T06 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T07 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T08 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T09 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T10 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0023-T01 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T02 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T03 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T04 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T05 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T06 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T07 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T08 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T09 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T10 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0024-T01 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T02 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T03 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T04 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T05 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0026-T01 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T02 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T03 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T04 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T05 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0027-T01 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T02 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T03 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T04 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T05 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0029-T01 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T02 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T03 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T04 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T05 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T06 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T07 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T08 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | T01 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T02 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T03 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T04 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T05 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T06 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T07 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T08 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T09 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T01 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T02 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T03 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T04 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T05 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T06 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T07 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | CUST-WP-0032-T01 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T02 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T03 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T04 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T05 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T06 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T07 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T08 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T09 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T10 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T11 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T12 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T13 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T14 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T15 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0033-T01 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T02 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T03 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T04 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T05 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T06 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0039-T1 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T2 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T3 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T4 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T5 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T6 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | T01 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T02 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T03 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T04 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T05 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T06 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | CUST-WP-0041-T1 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T2 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T3 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T4 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0043-T01 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T02 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T03 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T04 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T05 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T06 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T07 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T08 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T09 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0044-T01 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T02 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T03 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T04 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T05 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T06 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0045-T01 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T02 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T03 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T04 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T05 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T06 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T07 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T08 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0046-T01 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T02 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T03 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T04 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T05 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T06 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T07 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0047-T01 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T02 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T03 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T04 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T05 | cancel | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T06 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T07 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0048-T01 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T02 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T03 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T04 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T05 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T06 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T07 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T08 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0049-T01 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T02 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T03 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T04 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T05 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T06 | cancel | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0050-T01 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T02 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T03 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T04 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T05 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T06 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T07 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T08 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T09 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T10 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T11 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0051-T01 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T02 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T03 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T04 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T05 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T06 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T07 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T08 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0052-T01 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T02 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T03 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T04 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T05 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T06 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T07 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0053-T01 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T02 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T03 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T04 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T05 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0055-T01 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T02 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T03 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T04 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T05 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T06 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T07 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T08 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0056-T01 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0056-T02 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0056-T03 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0059-T01 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T02 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T03 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T04 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T05 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T06 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0060-T01 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T02 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T03 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T04 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T05 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T06 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T07 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0061-T01 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T02 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T03 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T04 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T05 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T06 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0062-T01 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T02 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T03 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T04 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T05 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T06 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0063-T01 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T02 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T03 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T04 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T05 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0064-T01 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T02 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T03 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T04 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0065-T01 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T02 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T03 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T04 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0066-T01 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0066-T02 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0066-T03 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0067-T01 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T02 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T03 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T04 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T05 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T06 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T07 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T08 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T09 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T10 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0068-T01 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T02 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T03 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T04 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T05 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T06 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T07 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T08 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T09 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0070-T01 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0070-T02 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0070-T03 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0071-T01 | done | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T02 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T03 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T04 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T05 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0072-T01 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T02 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T03 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T04 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0073-T01 | done | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T02 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T03 | done | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T04 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T05 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0074-T01 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T02 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T03 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T04 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T05 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T06 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0075-T01 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T02 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T03 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T04 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T05 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T06 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0076-T01 | done | — | workplans/CUST-WP-0076-provisioning-window-cadence.md | +| task | CUST-WP-0077-T01 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T02 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T03 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T04 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T05 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0078-T01 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T02 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T03 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T04 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0079-T01 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T02 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T03 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T04 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T05 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T06 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T07 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0080-T01 | done | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T02 | done | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T03 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T04 | todo | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T05 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T06 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0081-T01 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | CUST-WP-0081-T02 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | CUST-WP-0081-T03 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | THE-WP-0001-T01 | done | — | workplans/THE-WP-0001-federation-interface.md | +| task | THE-WP-0001-T02 | done | — | workplans/THE-WP-0001-federation-interface.md | +| intake | CUST-IN-0001 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0002 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0003 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0004 | routed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0005 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0006 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0007 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0008 | closed | blue | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0009 | closed | blue | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0010 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0011 | routed | red | intakes.md | +| intake | CUST-IN-0012 | closed | green | intakes.md | +| intake | CUST-IN-0013 | closed | blue | intakes.md | +| intake | CUST-IN-0014 | closed | blue | intakes.md | +| intake | CUST-IN-0015 | open | blue | intakes.md | +| intake | CUST-IN-0016 | open | green | intakes.md | +| intake | CUST-IN-0017 | open | green | intakes.md | +| intake | CUST-IN-0018 | open | green | intakes.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/originals.json new file mode 100644 index 00000000..5a19a7b4 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 6aad3a5788fad3abd60c0f1270f160062dc0168b 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 d535e0f2dcc3d454e041a8f1b547b5dea4493380 0\tWORK-RECORDS.md" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-commit.json b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-commit.json new file mode 100644 index 00000000..f28370e6 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-commit.json @@ -0,0 +1,317 @@ +{ + "exit_code": 0, + "commit": "90e29dccfc7dd66450aa4d93630b378f8c681acc", + "base": "83078392c076acd1e30425efd81115910f97f006", + "files": [ + { + "path": "docs/changes/netkingdom-target-2026-10-18/cust80-completion-r4/completion-audit.json", + "sha256": "8a4e3e61f3639a31d9d5df7803d3cb420eb391b191894e209d62b9e3100d5127" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/README.md", + "sha256": "d64834b572ad10302c5edbaa62406652feaa71640d7c93c03ce16b6a9ba7ac82" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/apply_owner.py", + "sha256": "82f027e306b0217c5260eabd426161702732c18cb108e80874dececf5d5b373b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/baseline.json", + "sha256": "fd1bb4074032d34706297723b499ff103be02912d9a08957521eb28fd0ae8114" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-attempt1.json", + "sha256": "82e9eb100d1f0446d5412467e42833cd9da28278659fcb99078f6436a9707435" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-attempt1.jsonl", + "sha256": "8047cd4f4fbd2e1ef04112f119ac2d80a75673a9c78fdbabb36a0ef876e94bef" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-fixture-receipt.json", + "sha256": "61d2243797160e73e2a9fffe7747857dc84694c7653920c3c505eff4123432a9" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary_fixture.py", + "sha256": "c50b7812a2145de26637ed308d8994283fa96da38b1df767e4c703afa1a09d5c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/build-attempt1.json", + "sha256": "46fc022cc329c20696412a247c107cbe42a75c8d24b9662a8012ee7101c5adf2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/build-attempt1.jsonl", + "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/committed-source-equivalence.json", + "sha256": "f51bd2e5e90c81d403069a0130cae1d732e3d2c6f1f1ea883b1166c98167377e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/controlled-revocation-omission.json", + "sha256": "1134048b198312bc75e40ad256ecd68145853dc9a7db013e8f813c471c215497" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt1.json", + "sha256": "47e230347c930b01dae9e172b0752ab3d096dab81fb02781f8babfbce20305e2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt1.jsonl", + "sha256": "a532f528ee71da2cac50a3c488fbf6d94d2d587b6240f41f335a000a5dd7b30b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt2.json", + "sha256": "be0b26631fb7e5c595d27f751176abe6ea3f3279167bea6dfd77d37ba5ef7793" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt2.jsonl", + "sha256": "014a3e1d5747b44b37b51ab2a04731813821ba305404da68d6c2edf2539a7f84" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/freeze_candidate.py", + "sha256": "4b3fdad177292a1fde2d02fd74962130f905ec31bab8f936554449606c5ce17e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-attempt1.json", + "sha256": "9afdcf762abaf253e3c44ed250188923e71649f7dc58a680c11a444447e47ff0" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-attempt1.jsonl", + "sha256": "55754790c7bb6839ca607956f64d434bcd05af0dbd4a8570f60c4512bf5e536d" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-source-inventory.json", + "sha256": "9bacac653f28000314e177a63a4a62dc08eda7ab957b5dd9b6b90ed60009ec7e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-assignment.json", + "sha256": "f0a4b3e160951f7e49aa01c6626a52830af5740e8697a416537df5a36494d59a" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-preflight-refusal.json", + "sha256": "0867d02dbc4751c3642627ffde364a87b2a530283221d7e70eea55d44c8c0ce2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-preview.json", + "sha256": "53b35217e4ad315aabfe9d57e04459e41a3498032a486f810ea62544c7ca1250" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-application.json", + "sha256": "61d748eb7012346f7a72ed688e925d3bf0f86bf538a601e199a0e9196b63a038" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/before.json", + "sha256": "b2b460e0064e040d86dff2cba55e8d496f2f298908980c03f9215fbdd52f6396" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/consistency-result-summary.json", + "sha256": "e7f4aa5832078e5ede03532555b2045728885775ecf364629a3866da6e2ebb1f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/existing-binding-restoration-proposal.json", + "sha256": "8a2ef6e3e97c9143045feabf962aa61fe46f1b886ed0b854e1725f8bad7c2611" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/existing-binding.json", + "sha256": "fb1abb81f5b20a2b20cdad349845e6603728e262b8dedcd784845a8740a98627" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-generated-cleanup.json", + "sha256": "e624fc13d4097733a0afd87c70b3bed17ce6dc853f5719574ec33961d62be7e8" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/consistency.json", + "sha256": "fed55936ef8e85acb1f17ae2a014ef9021da87168777650d38b9cbb0053544a8" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/consistency.stderr.txt", + "sha256": "f4a6aa1609a13600a0b97cbb08bbc03b3e247b619ff37912d37f7e109ce798ba" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/projection.json", + "sha256": "4d57eb5ffe84416571b4303e72a56bbbe5abb7b94d164e49c94afc3a74adbbf6" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/projection.stderr.txt", + "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/publication-commit.json", + "sha256": "c0c30cd31ecc5b4a1fffd95db1c1a8e5581ec9c0fc29354fe02d766b5e3af40c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/publication-inputs.json", + "sha256": "c6256e6c8601e5c64ac99b23799158835a059c987ff896febaacace346d9b310" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-readback.json", + "sha256": "80fb941c71831045de82d7aa71ea73859503d0cb64d9bd2c335b2bc3d9b9bbb4" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-source.patch", + "sha256": "e3d3bc375a8a0a49eff434483050ae338935391b5b361e64f0880ed992f4c85c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/SCOPE.md", + "sha256": "a80e80ba2e5279ba50232e6b3f57a5bdd14866e584d2d055dfb09e98a4c24ce0" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/docs/online-token-status.md", + "sha256": "f5e41b47500b15c80b2da6cbe37a9e64bcbde1c072750934cf74464a19488925" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/docs/operations.md", + "sha256": "3659362e3c7f8720e52cc8dc7c67a6295ac26462f383c68c06c120fac6e6e472" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/cmd/keycape/main.go", + "sha256": "2f81ea0b0b33f38298e028d5610625e3834fdf1aa12f6f392579d6207bcf6f1d" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/config.go", + "sha256": "19cd234757f8908880d28b8b40939367dfab1322e0401e4e563d56cd3af06683" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/token_status_test.go", + "sha256": "b2b2ec13215c9661d79142ea698cb8b080f6e017de050bedebf3eb8d16df2ad5" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/validate.go", + "sha256": "2b1766979b817802f43bdd0f999ac61452d86cdfafc1539a5d6be896b900a405" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/discovery.go", + "sha256": "00e4c831a2b4d29aecf3597a09c943315b87c5834dbcd4912ba5d8d31ab28cd5" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token.go", + "sha256": "304fa78d79a5436b9174d88991c19c0834356cb5425c6ed369accb85467a402f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status.go", + "sha256": "d9c22a71bb2efad7ea240f2689a98f14768ce3c1519d1d8b4e78ee7af2dc70b3" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_discovery_test.go", + "sha256": "27adb5797afba46ca2b1f16018721f055f82760498088b58b993730be1fa2031" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_http.go", + "sha256": "a7202d3176454f8ab42c090426e2debcb5cc2c1fc089e79746bb78e5c455af97" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_internal_test.go", + "sha256": "3d3ab41987c7586bd53af8b5c36ff6667b5b2a32d59789915eb9a36b7ceeba53" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_test.go", + "sha256": "e2613d44deefcbfbd0ce1db5ce2588849fb4be9b8bed33cb538171cc29f63e90" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_transport_test.go", + "sha256": "3a9945f0292125e86d0014b5245a20c0475d6c518eccff0f9b936356d8e0b347" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/userinfo.go", + "sha256": "f9c986f7a2c79f27a9970a296e6b493014fed77af2f22ba96c4a457d049c916f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/workplans/ADHOC-2026-09-27.md", + "sha256": "f6220f17fc5b6e7300d0a55ac29f78f385ad89db276ccaa21693428fffa5919b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/workplans/KEY-WP-0042-online-access-token-status.md", + "sha256": "6d7ff6dea31b251e261195fff97a2061d56579b5786629d95014f6d1cbe0f55e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preceding-proposal-manifest.json", + "sha256": "c1a0420b5a497b8d6d913c0dd43f61eb164b832af179d0a7f7ceb457128802a1" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preceding-proposal.patch", + "sha256": "926f36443c36c6568ba4fb5f7db26697bcab01f8ce0beaa57ba227329f156a13" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/SCOPE.md", + "sha256": "20fbadf3e33339bca4b541cdfa33a0de00095c968d51006dc4d0a46735cc834f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/docs/operations.md", + "sha256": "e68ec32073b7731214308ccd2fceb522d934b00f1d76e6d438e2870030497cfc" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/cmd/keycape/main.go", + "sha256": "ff1ee4f5d2eb86a1e4184374d5244e24704d9d5fd780e173062af07112344afd" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/config/config.go", + "sha256": "afd465acd9b6879493b888acc6fc54b9a71e032892701a81f1072986d2c30ac7" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/config/validate.go", + "sha256": "8189ee82e7df74a2a4a1f53e213b1be0a5c737fd76d8f283f7ec9f8ed38c3a65" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/discovery.go", + "sha256": "5ff9ddd9e2f4304b562e116100ca31fe7eabf8315d7d73998d3e6c5bea53956d" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/token.go", + "sha256": "8422cc9dbd39c88dfe835b43f6262cb120bc0d2e5b08898a151167b7555368d3" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/userinfo.go", + "sha256": "bbd5fa9ebd0726371c90d6938536c1ce5fcfacbbe853a80833e3587fc2115a0b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/workplans/ADHOC-2026-09-27.md", + "sha256": "2794d1940fc3c5e4a2df57de9d4b742fa6aa8602b67f1d3177c0d96bc5aaf314" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/restore_owner_generated_brief.py", + "sha256": "d3e84fd323cb8c3283d1bb09108cc3bbf8cbc46f504e3bebad1a61d04d5a3dc6" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/run_candidate.py", + "sha256": "df249e1946a3661b47bf4d8515e4faf8d0cdd91d0ebbda2304630aeedafdd214" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-check-equivalence.json", + "sha256": "ad214d41e3ad926eff17784fd2e13ce1b6ca2a30e3b6e5d5efcdd93b5d53ce63" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-decision-receipt.json", + "sha256": "51953a52a52f314ebbd1b00b4ba15ef7eb8845a7e0b000c5b1cfb2b0db0a209f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-decision-request.json", + "sha256": "c9f3857a28a631899d31493d7d75f7cba5391437f4e9a4e4e1d68383d8dfc53c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-manifest.json", + "sha256": "a133e0de7bbdaf5cd5a519ddaccd3d314b47da6a3bbd9a883162b9238dda7bea" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/type_source_digests.py", + "sha256": "003ba79ae73fc3684a55cad4dc0f437c82089bb753673b4320847bf62c304c3c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/typed-source-digest-derivation.json", + "sha256": "4207730a1b77fd9386aeaf812d6dd2371b289972b2d4422141f710bbf8b361bf" + }, + { + "path": "workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md", + "sha256": "b78a7089191c0f90de6fdd2ee7e4f901b567da0545a4fc2facad9d8c4b1be4e4" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r1/first-commit-refusal.json", + "sha256": "439717a99e50e3d127fb9234e0519da366db9a135f6081cedeefd7938ed32d60" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r1/scanner-refusal.json", + "sha256": "be8ac3d59f27e983cace2cef932dcdbaed9199d542f44df437dcb2f5238f7ec7" + } + ], + "stdout": "[main 90e29dc] Verify issuer-owned current token status and scoped revocation source\n 77 files changed, 16241 insertions(+)\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-completion-r4/completion-audit.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r1/first-commit-refusal.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r1/scanner-refusal.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/README.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/apply_owner.py\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/baseline.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-attempt1.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-attempt1.jsonl\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-fixture-receipt.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary_fixture.py\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/build-attempt1.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/build-attempt1.jsonl\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/committed-source-equivalence.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/controlled-revocation-omission.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt1.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt1.jsonl\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt2.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt2.jsonl\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/freeze_candidate.py\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-attempt1.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-attempt1.jsonl\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-source-inventory.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-assignment.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-preflight-refusal.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-preview.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-application.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/before.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/consistency-result-summary.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/existing-binding-restoration-proposal.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/existing-binding.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-generated-cleanup.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/consistency.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/consistency.stderr.txt\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/projection.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/projection.stderr.txt\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/publication-commit.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/publication-inputs.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-readback.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-source.patch\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/SCOPE.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/docs/online-token-status.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/docs/operations.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/cmd/keycape/main.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/config.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/token_status_test.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/validate.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/discovery.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_discovery_test.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_http.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_internal_test.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_test.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_transport_test.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/userinfo.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/workplans/ADHOC-2026-09-27.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/workplans/KEY-WP-0042-online-access-token-status.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preceding-proposal-manifest.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preceding-proposal.patch\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/SCOPE.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/docs/operations.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/cmd/keycape/main.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/config/config.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/config/validate.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/discovery.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/token.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/userinfo.go\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/workplans/ADHOC-2026-09-27.md\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/restore_owner_generated_brief.py\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/run_candidate.py\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-check-equivalence.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-decision-receipt.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-decision-request.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-manifest.json\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/type_source_digests.py\n create mode 100644 docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/typed-source-digest-derivation.json\n", + "stderr": "{\"blocked_blob_ids\": [], \"scanned_blobs\": 76, \"scanner_sha256\": \"88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509\", \"scanner_version\": \"8.30.1\", \"scope\": \"changed-staged-blobs\", \"status\": \"clean\"}\n" +} diff --git a/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-inputs.json b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-inputs.json new file mode 100644 index 00000000..854db72d --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/publication-inputs.json @@ -0,0 +1,315 @@ +{ + "owner": "the-custodian", + "base_revision": "83078392c076acd1e30425efd81115910f97f006", + "message": "Verify issuer-owned current token status and scoped revocation source", + "files": [ + { + "path": "docs/changes/netkingdom-target-2026-10-18/cust80-completion-r4/completion-audit.json", + "sha256": "8a4e3e61f3639a31d9d5df7803d3cb420eb391b191894e209d62b9e3100d5127" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/README.md", + "sha256": "d64834b572ad10302c5edbaa62406652feaa71640d7c93c03ce16b6a9ba7ac82" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/apply_owner.py", + "sha256": "82f027e306b0217c5260eabd426161702732c18cb108e80874dececf5d5b373b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/baseline.json", + "sha256": "fd1bb4074032d34706297723b499ff103be02912d9a08957521eb28fd0ae8114" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-attempt1.json", + "sha256": "82e9eb100d1f0446d5412467e42833cd9da28278659fcb99078f6436a9707435" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-attempt1.jsonl", + "sha256": "8047cd4f4fbd2e1ef04112f119ac2d80a75673a9c78fdbabb36a0ef876e94bef" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary-fixture-receipt.json", + "sha256": "61d2243797160e73e2a9fffe7747857dc84694c7653920c3c505eff4123432a9" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/binary_fixture.py", + "sha256": "c50b7812a2145de26637ed308d8994283fa96da38b1df767e4c703afa1a09d5c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/build-attempt1.json", + "sha256": "46fc022cc329c20696412a247c107cbe42a75c8d24b9662a8012ee7101c5adf2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/build-attempt1.jsonl", + "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/committed-source-equivalence.json", + "sha256": "f51bd2e5e90c81d403069a0130cae1d732e3d2c6f1f1ea883b1166c98167377e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/controlled-revocation-omission.json", + "sha256": "1134048b198312bc75e40ad256ecd68145853dc9a7db013e8f813c471c215497" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt1.json", + "sha256": "47e230347c930b01dae9e172b0752ab3d096dab81fb02781f8babfbce20305e2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt1.jsonl", + "sha256": "a532f528ee71da2cac50a3c488fbf6d94d2d587b6240f41f335a000a5dd7b30b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt2.json", + "sha256": "be0b26631fb7e5c595d27f751176abe6ea3f3279167bea6dfd77d37ba5ef7793" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/focused-attempt2.jsonl", + "sha256": "014a3e1d5747b44b37b51ab2a04731813821ba305404da68d6c2edf2539a7f84" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/freeze_candidate.py", + "sha256": "4b3fdad177292a1fde2d02fd74962130f905ec31bab8f936554449606c5ce17e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-attempt1.json", + "sha256": "9afdcf762abaf253e3c44ed250188923e71649f7dc58a680c11a444447e47ff0" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-attempt1.jsonl", + "sha256": "55754790c7bb6839ca607956f64d434bcd05af0dbd4a8570f60c4512bf5e536d" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/full-source-inventory.json", + "sha256": "9bacac653f28000314e177a63a4a62dc08eda7ab957b5dd9b6b90ed60009ec7e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-assignment.json", + "sha256": "f0a4b3e160951f7e49aa01c6626a52830af5740e8697a416537df5a36494d59a" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-preflight-refusal.json", + "sha256": "0867d02dbc4751c3642627ffde364a87b2a530283221d7e70eea55d44c8c0ce2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/identifier-preview.json", + "sha256": "53b35217e4ad315aabfe9d57e04459e41a3498032a486f810ea62544c7ca1250" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-application.json", + "sha256": "61d748eb7012346f7a72ed688e925d3bf0f86bf538a601e199a0e9196b63a038" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/before.json", + "sha256": "b2b460e0064e040d86dff2cba55e8d496f2f298908980c03f9215fbdd52f6396" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/consistency-result-summary.json", + "sha256": "e7f4aa5832078e5ede03532555b2045728885775ecf364629a3866da6e2ebb1f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/existing-binding-restoration-proposal.json", + "sha256": "8a2ef6e3e97c9143045feabf962aa61fe46f1b886ed0b854e1725f8bad7c2611" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-consistency/existing-binding.json", + "sha256": "fb1abb81f5b20a2b20cdad349845e6603728e262b8dedcd784845a8740a98627" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-generated-cleanup.json", + "sha256": "e624fc13d4097733a0afd87c70b3bed17ce6dc853f5719574ec33961d62be7e8" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/consistency.json", + "sha256": "fed55936ef8e85acb1f17ae2a014ef9021da87168777650d38b9cbb0053544a8" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/consistency.stderr.txt", + "sha256": "f4a6aa1609a13600a0b97cbb08bbc03b3e247b619ff37912d37f7e109ce798ba" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/projection.json", + "sha256": "4d57eb5ffe84416571b4303e72a56bbbe5abb7b94d164e49c94afc3a74adbbf6" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/projection.stderr.txt", + "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/publication-commit.json", + "sha256": "c0c30cd31ecc5b4a1fffd95db1c1a8e5581ec9c0fc29354fe02d766b5e3af40c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-publication/publication-inputs.json", + "sha256": "c6256e6c8601e5c64ac99b23799158835a059c987ff896febaacace346d9b310" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-readback.json", + "sha256": "80fb941c71831045de82d7aa71ea73859503d0cb64d9bd2c335b2bc3d9b9bbb4" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/owner-source.patch", + "sha256": "e3d3bc375a8a0a49eff434483050ae338935391b5b361e64f0880ed992f4c85c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/SCOPE.md", + "sha256": "a80e80ba2e5279ba50232e6b3f57a5bdd14866e584d2d055dfb09e98a4c24ce0" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/docs/online-token-status.md", + "sha256": "f5e41b47500b15c80b2da6cbe37a9e64bcbde1c072750934cf74464a19488925" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/docs/operations.md", + "sha256": "3659362e3c7f8720e52cc8dc7c67a6295ac26462f383c68c06c120fac6e6e472" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/cmd/keycape/main.go", + "sha256": "2f81ea0b0b33f38298e028d5610625e3834fdf1aa12f6f392579d6207bcf6f1d" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/config.go", + "sha256": "19cd234757f8908880d28b8b40939367dfab1322e0401e4e563d56cd3af06683" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/token_status_test.go", + "sha256": "b2b2ec13215c9661d79142ea698cb8b080f6e017de050bedebf3eb8d16df2ad5" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/config/validate.go", + "sha256": "2b1766979b817802f43bdd0f999ac61452d86cdfafc1539a5d6be896b900a405" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/discovery.go", + "sha256": "00e4c831a2b4d29aecf3597a09c943315b87c5834dbcd4912ba5d8d31ab28cd5" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token.go", + "sha256": "304fa78d79a5436b9174d88991c19c0834356cb5425c6ed369accb85467a402f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status.go", + "sha256": "d9c22a71bb2efad7ea240f2689a98f14768ce3c1519d1d8b4e78ee7af2dc70b3" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_discovery_test.go", + "sha256": "27adb5797afba46ca2b1f16018721f055f82760498088b58b993730be1fa2031" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_http.go", + "sha256": "a7202d3176454f8ab42c090426e2debcb5cc2c1fc089e79746bb78e5c455af97" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_internal_test.go", + "sha256": "3d3ab41987c7586bd53af8b5c36ff6667b5b2a32d59789915eb9a36b7ceeba53" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_test.go", + "sha256": "e2613d44deefcbfbd0ce1db5ce2588849fb4be9b8bed33cb538171cc29f63e90" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/token_status_transport_test.go", + "sha256": "3a9945f0292125e86d0014b5245a20c0475d6c518eccff0f9b936356d8e0b347" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/src/internal/server/oidc/userinfo.go", + "sha256": "f9c986f7a2c79f27a9970a296e6b493014fed77af2f22ba96c4a457d049c916f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/workplans/ADHOC-2026-09-27.md", + "sha256": "f6220f17fc5b6e7300d0a55ac29f78f385ad89db276ccaa21693428fffa5919b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/postimages/workplans/KEY-WP-0042-online-access-token-status.md", + "sha256": "6d7ff6dea31b251e261195fff97a2061d56579b5786629d95014f6d1cbe0f55e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preceding-proposal-manifest.json", + "sha256": "c1a0420b5a497b8d6d913c0dd43f61eb164b832af179d0a7f7ceb457128802a1" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preceding-proposal.patch", + "sha256": "926f36443c36c6568ba4fb5f7db26697bcab01f8ce0beaa57ba227329f156a13" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/SCOPE.md", + "sha256": "20fbadf3e33339bca4b541cdfa33a0de00095c968d51006dc4d0a46735cc834f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/docs/operations.md", + "sha256": "e68ec32073b7731214308ccd2fceb522d934b00f1d76e6d438e2870030497cfc" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/cmd/keycape/main.go", + "sha256": "ff1ee4f5d2eb86a1e4184374d5244e24704d9d5fd780e173062af07112344afd" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/config/config.go", + "sha256": "afd465acd9b6879493b888acc6fc54b9a71e032892701a81f1072986d2c30ac7" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/config/validate.go", + "sha256": "8189ee82e7df74a2a4a1f53e213b1be0a5c737fd76d8f283f7ec9f8ed38c3a65" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/discovery.go", + "sha256": "5ff9ddd9e2f4304b562e116100ca31fe7eabf8315d7d73998d3e6c5bea53956d" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/token.go", + "sha256": "8422cc9dbd39c88dfe835b43f6262cb120bc0d2e5b08898a151167b7555368d3" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/src/internal/server/oidc/userinfo.go", + "sha256": "bbd5fa9ebd0726371c90d6938536c1ce5fcfacbbe853a80833e3587fc2115a0b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/preimages/workplans/ADHOC-2026-09-27.md", + "sha256": "2794d1940fc3c5e4a2df57de9d4b742fa6aa8602b67f1d3177c0d96bc5aaf314" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/restore_owner_generated_brief.py", + "sha256": "d3e84fd323cb8c3283d1bb09108cc3bbf8cbc46f504e3bebad1a61d04d5a3dc6" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/run_candidate.py", + "sha256": "df249e1946a3661b47bf4d8515e4faf8d0cdd91d0ebbda2304630aeedafdd214" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-check-equivalence.json", + "sha256": "ad214d41e3ad926eff17784fd2e13ce1b6ca2a30e3b6e5d5efcdd93b5d53ce63" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-decision-receipt.json", + "sha256": "51953a52a52f314ebbd1b00b4ba15ef7eb8845a7e0b000c5b1cfb2b0db0a209f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-decision-request.json", + "sha256": "c9f3857a28a631899d31493d7d75f7cba5391437f4e9a4e4e1d68383d8dfc53c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/source-manifest.json", + "sha256": "a133e0de7bbdaf5cd5a519ddaccd3d314b47da6a3bbd9a883162b9238dda7bea" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/type_source_digests.py", + "sha256": "003ba79ae73fc3684a55cad4dc0f437c82089bb753673b4320847bf62c304c3c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/keycape-token-status-r1/typed-source-digest-derivation.json", + "sha256": "4207730a1b77fd9386aeaf812d6dd2371b289972b2d4422141f710bbf8b361bf" + }, + { + "path": "workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md", + "sha256": "b78a7089191c0f90de6fdd2ee7e4f901b567da0545a4fc2facad9d8c4b1be4e4" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r1/first-commit-refusal.json", + "sha256": "439717a99e50e3d127fb9234e0519da366db9a135f6081cedeefd7938ed32d60" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r1/scanner-refusal.json", + "sha256": "be8ac3d59f27e983cace2cef932dcdbaed9199d542f44df437dcb2f5238f7ec7" + } + ] +} diff --git a/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/unrelated-state-verification.json b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/unrelated-state-verification.json new file mode 100644 index 00000000..362a906f --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/cust80-token-status-publication-r2/unrelated-state-verification.json @@ -0,0 +1,6 @@ +{ + "original_worktree_and_index_unchanged": true, + "files": 8, + "baseline": "docs/changes/netkingdom-target-2026-10-18/cust80-postgres-publication-r1/unrelated-state-before.json", + "native_gates_closed": 0 +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/application.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/application.json new file mode 100644 index 00000000..49fdb400 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/application.json @@ -0,0 +1,7 @@ +{ + "owner": "key-cape", + "files": 6, + "existing_task_blocks_preserved": 4, + "unrelated_worktree_and_index_preserved": true, + "native_admission": false +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.json new file mode 100644 index 00000000..6e38f111 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.json @@ -0,0 +1,144 @@ +{ + "repo_slug": "key-cape", + "repo_path": "/home/worsch/key-cape", + "source_revision": "e2c5a947829568baf837543a6708fd0c3f6a863b", + "source_revision_reason": null, + "issues": [ + { + "severity": "WARN", + "check_id": "C-24", + "message": "Repo classification advisory: capability_tag 'security' is not a recommended family tag (allowed, check for synonym)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-33", + "message": "WORK-RECORDS.md is missing or stale \u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)", + "file_path": "WORK-RECORDS.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'USER-WP-0020' is not linked to State Hub", + "file_path": "workplans/KEY-WP-0007-user-engine-portal-oidc-client.md", + "db_id": "", + "file_value": "USER-WP-0020", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'NK-WP-0025' is not linked to State Hub", + "file_path": "workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md", + "db_id": "", + "file_value": "NK-WP-0025", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'NK-WP-0030' is not linked to State Hub", + "file_path": "workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md", + "db_id": "", + "file_value": "NK-WP-0030", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0027' is not linked to State Hub", + "file_path": "workplans/KEY-WP-0010-openbao-operator-loopback-callback.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0027", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-23", + "message": "Lifecycle drift in 'key-wp-0042': workplan status 'proposed' has an active task \u2014 report only (ADR-007: do not auto-promote proposed)", + "file_path": "workplans/KEY-WP-0042-online-access-token-status.md", + "db_id": "e2eecd1c-45c7-5a7c-bd1c-d31c845e3d38", + "file_value": "proposed", + "db_value": "proposed", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-22", + "message": "Task description drift 'KEY-WP-0042-T01': file content differs from DB (file wins)", + "file_path": "workplans/KEY-WP-0042-online-access-token-status.md#KEY-WP-0042-T01", + "db_id": "d8af8e77-f6e5-5d0d-8b44-794af3dee5cf", + "file_value": "The reviewable contract is `docs/online-token-status.md`: opt-in RFC 7662/7009\naccess-token status; registered owning-cl", + "db_value": "The reviewable contract is `docs/online-token-status.md`: opt-in RFC 7662/7009\naccess-token status; registered owning-cl", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-22", + "message": "Task description drift 'KEY-WP-0042-T02': file content differs from DB (file wins)", + "file_path": "workplans/KEY-WP-0042-online-access-token-status.md#KEY-WP-0042-T02", + "db_id": "2cade51f-d25a-5719-96b4-b57d50c1b97d", + "file_value": "Wire the same issuer store to both actual grant types, UserInfo, introspection,\nrevocation, configuration validation and", + "db_value": "Wire the same issuer store to both actual grant types, UserInfo, introspection,\nrevocation, configuration validation and", + "fixable": true + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'keycape-implementation@retired-20260826' (id=2c9caad8\u2026, status=archived) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "2c9caad8-2ced-492d-9d63-376387b4b9b0", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread inbox message(s) older than 3 day(s): the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "3 unread message(s) lack thread_id for supersession tracking: the-custodian:52b0031d, the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 45/45", + "C-17 cleared: pushed 1 backlogged commit(s)", + "C-33 fixed: regenerated WORK-RECORDS.md", + "C-22 fixed: task d8af8e77\u2026 description updated", + "C-22 fixed: task 2cade51f\u2026 description updated", + "brief: .custodian-brief.md updated", + "push: pushed" + ], + "summary": { + "fail": 0, + "automation_error": 0, + "warn": 11, + "info": 1 + }, + "result": "warn" +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.stderr.txt new file mode 100644 index 00000000..3345563f --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/consistency.stderr.txt @@ -0,0 +1 @@ +WARN: git commit failed for writeback: Generated-only commits rejected: staged diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/projection.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/projection.json new file mode 100644 index 00000000..50fa7d3f --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/projection.json @@ -0,0 +1,198 @@ +{ + "ok": true, + "status": "applied", + "repo_slug": "key-cape", + "commit": "e2c5a947829568baf837543a6708fd0c3f6a863b", + "requests": 2, + "elapsed_ms": 8056.9, + "git": { + "upstream": "origin/main", + "behind": 0, + "ahead": 0 + }, + "identifiers": { + "schema": "repo-manager.identifier-assignment.v1", + "ok": true, + "executed": true, + "repo": "key-cape", + "namespace": "helixforge", + "assignments": [], + "historical_invalid_identifiers": [], + "historical_identity_collisions": [], + "files_changed": [] + }, + "receipt": { + "schema": "state-hub.repository-projection-reconcile.v1", + "instance_role": "primary", + "instance_label": "railiance01", + "expected_commit": "e2c5a947829568baf837543a6708fd0c3f6a863b", + "derived_commit": "e2c5a947829568baf837543a6708fd0c3f6a863b", + "outcome": { + "schema": "state-hub.projection-reset.v1", + "repo_slug": "key-cape", + "commit": "e2c5a947829568baf837543a6708fd0c3f6a863b", + "status": "applied", + "counts": { + "created": 0, + "updated": 45, + "retired": 0, + "refused": 0, + "released": 0, + "created_tasks": 0, + "updated_tasks": 0, + "cancelled_tasks": 0, + "created_edges": 0, + "removed_edges": 0, + "unresolved_edges": 1, + "external_edges": 8 + }, + "created": [], + "updated": [ + "ADHOC-2026-09-05", + "ADHOC-2026-09-07", + "ADHOC-2026-09-27", + "KEY-WP-0001", + "KEY-WP-0002", + "KEY-WP-0003", + "KEY-WP-0004", + "KEY-WP-0005", + "KEY-WP-0006", + "KEY-WP-0007", + "KEY-WP-0008", + "KEY-WP-0009", + "KEY-WP-0010", + "KEY-WP-0011", + "KEY-WP-0012", + "KEY-WP-0013", + "KEY-WP-0014", + "KEY-WP-0015", + "KEY-WP-0016", + "KEY-WP-0017", + "KEY-WP-0018", + "KEY-WP-0019", + "KEY-WP-0020", + "KEY-WP-0021", + "KEY-WP-0022", + "KEY-WP-0023", + "KEY-WP-0024", + "KEY-WP-0025", + "KEY-WP-0026", + "KEY-WP-0027", + "KEY-WP-0028", + "KEY-WP-0029", + "KEY-WP-0030", + "KEY-WP-0031", + "KEY-WP-0032", + "KEY-WP-0033", + "KEY-WP-0034", + "KEY-WP-0035", + "KEY-WP-0036", + "KEY-WP-0037", + "KEY-WP-0038", + "KEY-WP-0039", + "KEY-WP-0040", + "KEY-WP-0041", + "KEY-WP-0042" + ], + "retired": [], + "released": [], + "created_tasks": [], + "updated_tasks": [], + "cancelled_tasks": [], + "created_edges": [], + "removed_edges": [], + "unresolved_edges": [ + { + "workplan": "KEY-WP-0010", + "from": "KEY-WP-0010", + "target": "RAILIANCE-WP-0027", + "reason": "missing" + } + ], + "external_edges": [ + { + "workplan": "KEY-WP-0038", + "from": "KEY-WP-0038-T03", + "target": "KEY-WP-0038-T02", + "relationship_type": "starts_after", + "from_workplan_id": "098e3e2c-a138-560e-b2d3-3a15eb49d8a9", + "from_task_id": "40ddaa29-7245-508c-ad48-ddc063e25115", + "to_workplan_id": null, + "to_task_id": "ddcfb482-8f33-5c81-9ce8-84be8fa5dc30" + }, + { + "workplan": "KEY-WP-0038", + "from": "KEY-WP-0038-T02", + "target": "KEY-WP-0038-T01", + "relationship_type": "starts_after", + "from_workplan_id": "098e3e2c-a138-560e-b2d3-3a15eb49d8a9", + "from_task_id": "ddcfb482-8f33-5c81-9ce8-84be8fa5dc30", + "to_workplan_id": null, + "to_task_id": "5f019d13-1fa3-5b88-a27a-75a3339ca96e" + }, + { + "workplan": "KEY-WP-0038", + "from": "KEY-WP-0038-T02", + "target": "NK-WP-0048-T06", + "relationship_type": "starts_after", + "from_workplan_id": "098e3e2c-a138-560e-b2d3-3a15eb49d8a9", + "from_task_id": "ddcfb482-8f33-5c81-9ce8-84be8fa5dc30", + "to_workplan_id": null, + "to_task_id": "d9b26bcf-a7c6-59a2-92a0-f913d76a203c" + }, + { + "workplan": "KEY-WP-0039", + "from": "KEY-WP-0039-T02", + "target": "KEY-WP-0038-T03", + "relationship_type": "starts_after", + "from_workplan_id": "09c3bddf-6058-5603-8488-cccdb7be4f86", + "from_task_id": "03da4c38-1dac-53b1-8b0b-e697df48e9d3", + "to_workplan_id": null, + "to_task_id": "40ddaa29-7245-508c-ad48-ddc063e25115" + }, + { + "workplan": "KEY-WP-0039", + "from": "KEY-WP-0039-T02", + "target": "KEY-WP-0039-T01", + "relationship_type": "starts_after", + "from_workplan_id": "09c3bddf-6058-5603-8488-cccdb7be4f86", + "from_task_id": "03da4c38-1dac-53b1-8b0b-e697df48e9d3", + "to_workplan_id": null, + "to_task_id": "4d06b059-3768-53bb-83a4-a9a71c0850b8" + }, + { + "workplan": "KEY-WP-0039", + "from": "KEY-WP-0039-T02", + "target": "KEY-WP-0038-T02", + "relationship_type": "starts_after", + "from_workplan_id": "09c3bddf-6058-5603-8488-cccdb7be4f86", + "from_task_id": "03da4c38-1dac-53b1-8b0b-e697df48e9d3", + "to_workplan_id": null, + "to_task_id": "ddcfb482-8f33-5c81-9ce8-84be8fa5dc30" + }, + { + "workplan": "KEY-WP-0007", + "from": "KEY-WP-0007", + "target": "KEY-WP-0005", + "relationship_type": "blocks", + "from_workplan_id": "24db4178-705c-5b09-b7db-ee7a345d71a0", + "from_task_id": null, + "to_workplan_id": "711a8303-69aa-5db6-9043-92530c6dc81b", + "to_task_id": null + }, + { + "workplan": "KEY-WP-0009", + "from": "KEY-WP-0009", + "target": "KEY-WP-0006", + "relationship_type": "blocks", + "from_workplan_id": "c1a9b1cc-2ff0-566a-b544-1a2ef967fc0d", + "from_task_id": null, + "to_workplan_id": "d8d20d8f-61e0-54e2-9a88-a3958f0b6f2d", + "to_task_id": null + } + ], + "refused": [], + "notes": [] + } + } +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/projection.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/projection.stderr.txt new file mode 100644 index 00000000..e69de29b diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/protected.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/protected.json new file mode 100644 index 00000000..d4673b16 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/protected.json @@ -0,0 +1,1194 @@ +{ + ".claude/rules/agents.md": { + "sha256": "sha256:55ad7da95751de483e42e08d3ccae7d6b04daf8ad5f7457047eff06778b05fa5", + "index": "100644 0e8a5d95b6d263fbaeae4261a7051112fb27ee18 0\t.claude/rules/agents.md" + }, + ".claude/rules/architecture.md": { + "sha256": "sha256:21314c8ac9329a2ab6f554807a7fe131a7417923b7e9faf5782ad25c70a4ff93", + "index": "100644 7c2a64580a2fb55d6586e154ee70d801430faa3e 0\t.claude/rules/architecture.md" + }, + ".claude/rules/credential-routing.md": { + "sha256": "sha256:8f2951b8808f7f3f63f0e2179948255fcf31b6f9c021b5053fcb6c5d0256a1e6", + "index": "100644 2ab2aee3c221b4c2f637786f66de431236b61bc5 0\t.claude/rules/credential-routing.md" + }, + ".claude/rules/first-session.md": { + "sha256": "sha256:605a48a56a3dfd84baa08bdf769cd012e4de566873712b7039d9390473d0271c", + "index": "100644 5b6b1876a29a4de2c3e6fd0f67c3ffbeb144c496 0\t.claude/rules/first-session.md" + }, + ".claude/rules/repo-boundary.md": { + "sha256": "sha256:3ab0772c1ea280c48a75f2d44a1d0494e6e124fd91145ad19e65ac48488ead22", + "index": "100644 b74d916907b49e9abed8a8bd8f4f3cd7aadf95ef 0\t.claude/rules/repo-boundary.md" + }, + ".claude/rules/repo-identity.md": { + "sha256": "sha256:5ae2098aa75878ddf966c8b0f7bfa532e40b320f776dd1e5e1c55bd04380ba03", + "index": "100644 c4b8fa16164b5a8b37fee603997121a5c9680aac 0\t.claude/rules/repo-identity.md" + }, + ".claude/rules/session-protocol.md": { + "sha256": "sha256:e61d95ebe2f1bc92594ab1fcc12e09c95f961a509ddc43ff9310b15fe7115a79", + "index": "100644 0c2d89e25d9b55e90982f7596f7336328a49c786 0\t.claude/rules/session-protocol.md" + }, + ".claude/rules/stack-and-commands.md": { + "sha256": "sha256:8debf28c7e28aeb321a0638a2e7f1dbdcb7c4013f06f5994caf5be240df902da", + "index": "100644 dc53ac69288ec906421a0e8e1e1083528c047702 0\t.claude/rules/stack-and-commands.md" + }, + ".claude/rules/workplan-convention.md": { + "sha256": "sha256:d5ef7350f78ad8091568dca79b072d615133256756b0584ffbc30c7320b063ac", + "index": "100644 f43cfff94d75b083b3ca10e7982654d71e75dfdf 0\t.claude/rules/workplan-convention.md" + }, + ".custodian-brief.md": { + "sha256": "sha256:96d84539b3a92786bff37fcc70161adec4648b9547287e52e6b817bc080a080a", + "index": "100644 d3b36c3bffbeb922769a2a788e35b4113fccaa3f 0\t.custodian-brief.md" + }, + ".forgejo/workflows/acceptance.yaml": { + "sha256": "sha256:1ac9f025edc3394f23c6cc46ee779abe81d70b9e798454ca50cabc070ee66ca9", + "index": "100644 b1bcdc2c729352cada7b654b59a07fe6850fc466 0\t.forgejo/workflows/acceptance.yaml" + }, + ".forgejo/workflows/image.yaml": { + "sha256": "sha256:5bb3910207295c830aa2a6f9bc65ab8cf9f264ea9d2687aacad88c39429f5644", + "index": "100644 0e16cc2ea75d37e1da788ca847c127fc04f5a98f 0\t.forgejo/workflows/image.yaml" + }, + ".gitea/workflows/image.yaml": { + "sha256": "sha256:849e4228aee5c2541ff14c87fbe875a629ee484d74e9cd00a827862f0aa3b958", + "index": "100644 e8491b77aad0b288977d3fb5eb8ca8db4a7725de 0\t.gitea/workflows/image.yaml" + }, + ".github/workflows/ci.yml": { + "sha256": "sha256:e2f9854245d0d62a0ab291b92eaf93c8787d036af42466bf2f8d05233ff7eaac", + "index": "100644 32a386e9115c36d1689d9ff595eab8d66f037286 0\t.github/workflows/ci.yml" + }, + ".gitignore": { + "sha256": "sha256:cfa7e0d0d9ab86e0246ba668147cdfe1c599ae34b1843780cdbccfaa3d0f7621", + "index": "100644 e705f7f1738a49dd9a78b5907d68d9429107c67c 0\t.gitignore" + }, + ".repo-classification.yaml": { + "sha256": "sha256:416fcc6bf409163146a88451a90a04980bb2530433e92579e14f9061a8a30207", + "index": "100644 4fc521fc9c4263b37c6978ea68651d1cb0c25faf 0\t.repo-classification.yaml" + }, + "AGENTS.md": { + "sha256": "sha256:77c8e1ac762e7c101cd09a3aa184993309ed057821bd53fb0d318979a45c9315", + "index": "100644 4a0df33e6635969b7158daec3e80bd28e5f0bbc1 0\tAGENTS.md" + }, + "CLAUDE.md": { + "sha256": "sha256:60ac8c6f039b1f285639ad7f1ebd815352b6fff0be3ec6401658c744aaca740e", + "index": "100644 e81c1b48c16dc3bf49af30e48b476107d916ee21 0\tCLAUDE.md" + }, + "Dockerfile": { + "sha256": "sha256:5ef0e8a932b999adba8deec6478ba21499edaff9351b863910de647bbfdcdef6", + "index": "100644 6adf9ce0636d7782fd231e418a0009deeee9868b 0\tDockerfile" + }, + "INTENT.md": { + "sha256": "sha256:b22cb440691bb399b064ee10ab1a03e1e07838da1051bf6235fbfe2cf820eb10", + "index": "100644 b2519df87f5b29b324187f97f7a0d92dff3fc874 0\tINTENT.md" + }, + "LICENSE": { + "sha256": "sha256:ff413f361a3b3bf44cf50f110fbcc4837064d57eefbcef89df2b43997c6262b6", + "index": "100644 7e08e28d5f32bdea3a9e1c828ae9f1e21d9edae7 0\tLICENSE" + }, + "Makefile": { + "sha256": "sha256:fb7c057286017e18c5a10ce7752f09336becffba3e30d9fb9b6a2467e53dcb50", + "index": "100644 e41dc7886fa558b3a5a3a69753780891a9e42371 0\tMakefile" + }, + "README.md": { + "sha256": "sha256:953586cca96d01e9240448186b922c9b8ea03827a7f314731e9a9ead4f19d0d3", + "index": "100644 5435b16714d66247db4d99ab7782cf8cd21532d9 0\tREADME.md" + }, + "SCOPE.md": { + "sha256": "sha256:a80e80ba2e5279ba50232e6b3f57a5bdd14866e584d2d055dfb09e98a4c24ce0", + "index": "100644 ef9506b724477e66b5b1cc2af7dcf6382b82cb00 0\tSCOPE.md" + }, + "WORK-RECORDS.md": { + "sha256": "sha256:431842547bd82750f284f8c1c9f519892f1bb1c1a684b9b1e38adc6fdfdc299d", + "index": "100644 d86b29bbc480acfa6d12d5052039578d7d4e380c 0\tWORK-RECORDS.md" + }, + "adapters/go/tokenstatus/LICENSE": { + "sha256": "sha256:ff413f361a3b3bf44cf50f110fbcc4837064d57eefbcef89df2b43997c6262b6", + "index": "100644 7e08e28d5f32bdea3a9e1c828ae9f1e21d9edae7 0\tadapters/go/tokenstatus/LICENSE" + }, + "adapters/go/tokenstatus/go.mod": { + "sha256": "sha256:e8b028e1002e63a76dba78a4abbd67882307ad198e4783bad631652061aa0f54", + "index": "100644 e41be92c0fa170dd5bdb30d9a55c7865a9522ac7 0\tadapters/go/tokenstatus/go.mod" + }, + "adapters/go/tokenstatus/internal/jose/jose.go": { + "sha256": "sha256:a6de154cd81e34a521b8aac5dce6b45a3cfb015681ed16e2beb8f2a24c72c00d", + "index": "100644 6eef3d8a067500cbc44adf5745759c4cd6486157 0\tadapters/go/tokenstatus/internal/jose/jose.go" + }, + "adapters/go/tokenstatus/pkg/tokenstatus/client.go": { + "sha256": "sha256:f34626a85d67590b9c61474f19ce1021f8afd17093f8f522b3f98e9cef34e575", + "index": "100644 5b2057c5ceede71f0ba6d1b80533442bba1dd1ba 0\tadapters/go/tokenstatus/pkg/tokenstatus/client.go" + }, + "adapters/go/tokenstatus/producer-source.json": { + "sha256": "sha256:3bd9b25b912e7c17b331997ca5fee9da8a7c314f336e09e3c116885954799b73", + "index": "100644 87a48b613744110dfa3730969ff5b9d70962d964 0\tadapters/go/tokenstatus/producer-source.json" + }, + "bin/keycape": { + "sha256": "sha256:20bd7eefd64e027192bcc113029cd032b797332ab6150b9f1ff5d325d2bf5cb5", + "index": "100755 e7887dfbae490351f88d1f249e928f695f6a16d2 0\tbin/keycape" + }, + "bin/keycape-to-keycloak": { + "sha256": "sha256:7e5292c6ce338ea922aada2de13fe9011db98b8c9ca5d66533aef4bfe9818144", + "index": "100755 592504fd11f4c4fc821f3d6b0350b1285c38b0b0 0\tbin/keycape-to-keycloak" + }, + "bin/lldap-export": { + "sha256": "sha256:5320718452ca388788ba1316b437bc56a70f393fdde4079587eec284e027bcae", + "index": "100755 e49fe216aa04525d611c99ddf930639f98929ad0 0\tbin/lldap-export" + }, + "bin/lldap-to-ldap": { + "sha256": "sha256:480378861f090538507ffca0a83a752cea1c153549658e389a2ae725aa5061e8", + "index": "100755 9609697bd8e21396add3009893fcd8a11352eabd 0\tbin/lldap-to-ldap" + }, + "bin/validator": { + "sha256": "sha256:f548b0dc1746c8c492727a1c09fcb81cab7c8695b1608de3d421ab7d301061e5", + "index": "100755 b732e3274c05371e62768da3c3bdc3ac767329a0 0\tbin/validator" + }, + "capabilities/playbooks/key-cape.lightweight-sso.yaml": { + "sha256": "sha256:4ddc7b2ada4022ec3efa7693e9539de521a40140055e7066a78c67d9b0e2596b", + "index": "100644 b43901fe8a7c3ca61f509b5cb2eac8b2ef091064 0\tcapabilities/playbooks/key-cape.lightweight-sso.yaml" + }, + "capabilities/playbooks/key-cape.privacyidea-token-authority.yaml": { + "sha256": "sha256:0b0d8a75a97e9b8342496cf19d071f31e576eebad0343b95077b95d271db4d58", + "index": "100644 2872ef7727ac0fc2c3943296098fbea6f2a85f62 0\tcapabilities/playbooks/key-cape.privacyidea-token-authority.yaml" + }, + "config/dev-config.yaml": { + "sha256": "sha256:303dae14861a00403c10631457eb3ecb0f9615002053401b079d7d8f07ff4b50", + "index": "100644 bf8ea915b24d93be803ed1ef8c18c13a82976c9b 0\tconfig/dev-config.yaml" + }, + "config/service-clients.example.yaml": { + "sha256": "sha256:b7e17698a0946f387c481b7e27fe9ddea22cdd9db2e34e32a50457e02a34b18e", + "index": "100644 a4b13e5cffdc1cb683a202b90724bd86f565ccda 0\tconfig/service-clients.example.yaml" + }, + "docker-compose.dev.yml": { + "sha256": "sha256:dd30f791458c7c4169168ee272ac6b12378c828a6e757828c85fe55264c088d7", + "index": "100644 fa050d2a3722fe7372938ec2cb34b31244b7aa61 0\tdocker-compose.dev.yml" + }, + "docker-compose.scenario-b.yml": { + "sha256": "sha256:49fe67dab4113736cdea8d4a91491935e32212eaf73706933408957fe148efb3", + "index": "100644 a8976c28eb6c40af92e1daadcf168aaef8647ad5 0\tdocker-compose.scenario-b.yml" + }, + "docker-compose.scenario-c.yml": { + "sha256": "sha256:b46d665d0d740267a3cc6b297cbedce41215257181a51261458d8a0a715d8c59", + "index": "100644 5743fa39140e5bac1f2cad2479c5928470e76e1c 0\tdocker-compose.scenario-c.yml" + }, + "docs/adr/ADR-0001-choose-go-for-keycape.md": { + "sha256": "sha256:436b538b55a286914bf5039194e48634cdf1b1aa540c524862d27f63ef85bfed", + "index": "100644 52ab3e94c61c02ea0b13a0b8cf4e3f7d0f89eb40 0\tdocs/adr/ADR-0001-choose-go-for-keycape.md" + }, + "docs/approval-clients-deployment.patch.yaml": { + "sha256": "sha256:89bd4f0932f63b82de6363b31580c7f4b03b36981ae9d07658ebbdfb54149d22", + "index": "100644 f42bfba2462bbc739f409bb817ab85904236e3d1 0\tdocs/approval-clients-deployment.patch.yaml" + }, + "docs/approval-clients-rollout.md": { + "sha256": "sha256:b79f89997afe06538767a170c4ad6966e4573eff81bddd3ea12b79b27bf777e1", + "index": "100644 08b3e12ea62dd0da1354c59060434b88c9e7040f 0\tdocs/approval-clients-rollout.md" + }, + "docs/approval-engine-auth-contract.md": { + "sha256": "sha256:a8a86cd1b37bdb045a5c3dd601e033328f84e5691df1e2bb5a07723ccc226207", + "index": "100644 3c35fe6242d82b72a0a66b3da17f8e5dd078df2e 0\tdocs/approval-engine-auth-contract.md" + }, + "docs/approval-engine-provisioning-request.yaml": { + "sha256": "sha256:92d0e01f8a1a8db7ee59d4a37e4e4931fedeb98ac43d307f32721f5aa383b798", + "index": "100644 902c20cb3cfa6d4592947ac76df88a2fa5186649 0\tdocs/approval-engine-provisioning-request.yaml" + }, + "docs/authorization-code-bindings.md": { + "sha256": "sha256:fd8ce239444a05615b8e40b54ed9fef6454df74117d5fb17207b10c57d5f5921", + "index": "100644 f305058adf60bef56762c2588b5b5b2474f45430 0\tdocs/authorization-code-bindings.md" + }, + "docs/credential-renewal-release-2026-09-13.md": { + "sha256": "sha256:6694e801ae020fc975fe2cd922e3ee9bf93592f30905e81bb9816648d9b70325", + "index": "100644 de742b60f5872ad84195f33f2a5763952653fcd5 0\tdocs/credential-renewal-release-2026-09-13.md" + }, + "docs/enrollment-assurance-release-2026-09-13.md": { + "sha256": "sha256:3a776f2caab9312faf077fef1453c801a4abd926e20fc56865976215301234fa", + "index": "100644 c2061c6a760e810adccdc404e044cb79baa4fdcb 0\tdocs/enrollment-assurance-release-2026-09-13.md" + }, + "docs/evidence/2026-09-08-upstream-issuer-live-proof.json": { + "sha256": "sha256:25b08d6699e75a5aad134677bc6deb8b93e80017b9368455ca9fec22220b115e", + "index": "100644 85dab93ed1f2196810ead4f6b81a897fd06c33ff 0\tdocs/evidence/2026-09-08-upstream-issuer-live-proof.json" + }, + "docs/evidence/2026-09-09-keycape-verifier-admission.json": { + "sha256": "sha256:2cb6c59e06563013675990d8c40684dc73ccdb966429254501bb9f05ac0993c3", + "index": "100644 6ae6fc721df48426e93e505206a0df8e18ef2499 0\tdocs/evidence/2026-09-09-keycape-verifier-admission.json" + }, + "docs/evidence/2026-09-09-upstream-issuer-pin.json": { + "sha256": "sha256:1a43e9d8594c5a77114f5964f7f0ef63f8398fc7f0985eae524b82a9cbb45bbe", + "index": "100644 62fe341c90c514a92585641d14287f60076e8836 0\tdocs/evidence/2026-09-09-upstream-issuer-pin.json" + }, + "docs/evidence/2026-09-14-informed-decision-browser-registration.json": { + "sha256": "sha256:9c91dc3a53359ad6e8efb3d8f75ad87893c0d12dc14aec535ee19ba75b0941c6", + "index": "100644 cc87339baeae5406bd7ce76fe89bd0aaf95b366f 0\tdocs/evidence/2026-09-14-informed-decision-browser-registration.json" + }, + "docs/evidence/2026-09-24-fresh-login-and-account-switch.md": { + "sha256": "sha256:3c984ad2d502f114fcb6b837f7d5fff2d201338e6e62f34e403e77f53bce867d", + "index": "100644 200863c7e6b87f3045c1bffd2b951be1bdee5d84 0\tdocs/evidence/2026-09-24-fresh-login-and-account-switch.md" + }, + "docs/evidence/2026-10-07-secrets-engine-openbao-issuance.json": { + "sha256": "sha256:a405ef5289159c525695352ba71da7eca8e897b6f2dc7e5795f9b239361d8068", + "index": "100644 2278d9917b56923887b64b157b10de537739ee55 0\tdocs/evidence/2026-10-07-secrets-engine-openbao-issuance.json" + }, + "docs/evidence/2026-10-11-key39-next-source-inspection.json": { + "sha256": "sha256:d9bc54b645ea52dc3084f7a95f66456fa2206a6c0dcdd61207ede9af07054a79", + "index": "100644 d97906b5ee836fca2e52bbe42a462b02200f4fe5 0\tdocs/evidence/2026-10-11-key39-next-source-inspection.json" + }, + "docs/evidence/upstream-issuer-probe.json": { + "sha256": "sha256:3c276f34754d31a4819c4f65297d931b2659e8b29f7683c26459d574814eb8bf", + "index": "100644 88d98b835b63a016ede535cdf6416add36c17514 0\tdocs/evidence/upstream-issuer-probe.json" + }, + "docs/forgejo-oidc-client-request.yaml": { + "sha256": "sha256:7ba5bf23eb0a074a496cbb40c38d5c2ba688d5808dd558b2e74624ae8ccf44e5", + "index": "100644 04d0bccc32fa1e0d5739f22b5d71a638e345e386 0\tdocs/forgejo-oidc-client-request.yaml" + }, + "docs/native-authentication.md": { + "sha256": "sha256:378a5fa8174580bde811b716ec8e987339013b9f8d7725cb398fa3b9f8d95655", + "index": "100644 e714df21c4113ac853f2fbbf9309c06ea1b05863 0\tdocs/native-authentication.md" + }, + "docs/offline-checker-owner-review-2026-10-16.json": { + "sha256": "sha256:aa9083e77ea08d166e8cec7c5d73362c19058567c5e80a576766af3745958dc0", + "index": "100644 9f3c00bf7dcef2b3fa40a1c0fd99a7c03cb8facf 0\tdocs/offline-checker-owner-review-2026-10-16.json" + }, + "docs/offline-checker-owner-review-2026-10-16.md": { + "sha256": "sha256:75ed6866b29cbb9f2c5c2a395da2afa25d021f248587c7055bd721e2c55b8685", + "index": "100644 be834c5854e2d1ac3f2747fb45dd80953508ff45 0\tdocs/offline-checker-owner-review-2026-10-16.md" + }, + "docs/oidc-browser-relying-party-type-review.md": { + "sha256": "sha256:0bc277ff71eec01dc8f46a952b7eb152cc1727d0b138f384050ac15b654cd72a", + "index": "100644 259f7e10fb0a6aaa071aac342906cde85c056609 0\tdocs/oidc-browser-relying-party-type-review.md" + }, + "docs/openbao-negative-probe-clients.yaml": { + "sha256": "sha256:23c3d49e713de76d75916aede5bdd109d8918169a3078e4e776f0478064dc778", + "index": "100644 713036618418c02f612071f41c4864b9b67c900a 0\tdocs/openbao-negative-probe-clients.yaml" + }, + "docs/openbao-negative-probe-session-proposal.md": { + "sha256": "sha256:82ab5678426ae78d44464b1293c76bef10d1fedda0b8cea6e0cc2514b89c8684", + "index": "100644 fe9a9945d837fec98dc15452c1e7935b6a4fd0f1 0\tdocs/openbao-negative-probe-session-proposal.md" + }, + "docs/openbao-negative-token-producer-decision.json": { + "sha256": "sha256:7b3e4a53ac4af33c780f16c3f1aa9cde0154040ad2747a8d361dd79bbb7f435c", + "index": "100644 d3b806af1dd024bfc0f518d30ef26e1b715be361 0\tdocs/openbao-negative-token-producer-decision.json" + }, + "docs/openbao-negative-token-producer-decision.md": { + "sha256": "sha256:38e4c9660ca57a1fb6e5ff04f214af61dd1a58abf564a5ed22216d909e27fc73", + "index": "100644 e44cbcb98a7bb4efd727a026e70db45f5195fa30 0\tdocs/openbao-negative-token-producer-decision.md" + }, + "docs/openbao-service-auth-contract.md": { + "sha256": "sha256:9b815eff44ebe898b93da5f4a5eeb927fe23d9490397386f3bca3682ce5c81dc", + "index": "100644 3416a5943e1b535870d16841c10a89fdb65521c8 0\tdocs/openbao-service-auth-contract.md" + }, + "docs/operations.md": { + "sha256": "sha256:3659362e3c7f8720e52cc8dc7c67a6295ac26462f383c68c06c120fac6e6e472", + "index": "100644 c4d838155b92955c76a0d5ec4642f481e8ae3979 0\tdocs/operations.md" + }, + "docs/optional-mfa.md": { + "sha256": "sha256:e1725c3e453b00ff74c7a07c2392ed7a2723fa9a159bd174d52a7fa4f1697c0b", + "index": "100644 f95f57aaa5cfd6203ea5d1b0ce99369ec32c40cc 0\tdocs/optional-mfa.md" + }, + "docs/proposals/2026-10-11-key39-founder-source-design-decision.json": { + "sha256": "sha256:d2f6e2fc733d8092a27a1dafb2f77601cbff398c5606b12bb053b4cd7bcd4091", + "index": "100644 2be7eb82c4ee1ec9a4b9227d2163b063063e40f7 0\tdocs/proposals/2026-10-11-key39-founder-source-design-decision.json" + }, + "docs/proposals/2026-10-11-key39-founder-source-design-decision.md": { + "sha256": "sha256:1816e48b44eb874e4c97db82ee56ed27c23083ddcfc322d9de9876132e802688", + "index": "100644 ad23cbde3d063f40e85948d0b37ec99847f24840 0\tdocs/proposals/2026-10-11-key39-founder-source-design-decision.md" + }, + "docs/proposals/2026-10-11-key39-next-execution-prerequisites.json": { + "sha256": "sha256:78288f6991910715b7ee8fdb2a32654418dd9becd5fccd254bab8d150420cfd3", + "index": "100644 09fe2e81cdda1372fc0ed7ec2e3103d303d7211d 0\tdocs/proposals/2026-10-11-key39-next-execution-prerequisites.json" + }, + "docs/qonto-runtime-identity-contract.md": { + "sha256": "sha256:24bc64dad4b6a6c01e69c2daeb35c62bd8e4539b18d1af329d4f647fc8b124cb", + "index": "100644 714a84c4a5d9e9258110b703297763537bbd07ec 0\tdocs/qonto-runtime-identity-contract.md" + }, + "docs/reviews/2026-10-11-key39-lifecycle-v2-keycape-source-ack.json": { + "sha256": "sha256:776e5a522be3a73a00cf690c68fe084d12d5cd04117666f2dab9031d07537199", + "index": "100644 315a7210651a2777eeca2a5f502cfa5b91207600 0\tdocs/reviews/2026-10-11-key39-lifecycle-v2-keycape-source-ack.json" + }, + "docs/reviews/2026-10-11-key39-lifecycle-v2-keycape-source-ack.sources.json": { + "sha256": "sha256:a272cc4af0979a5e47de36515aa5de256998a7006a038a0a00182b79bcc7227b", + "index": "100644 6c462037bb51a833451f37ddcca6a347656f354d 0\tdocs/reviews/2026-10-11-key39-lifecycle-v2-keycape-source-ack.sources.json" + }, + "docs/reviews/2026-10-11-key39-lifecycle-v4-keycape-source-ack.json": { + "sha256": "sha256:6e90cbe246658325b01b672162da5b336f65bb769b7608ef578473a409278a13", + "index": "100644 af94cc71214d638d2e33cdb455b29c9ef5cfb1f4 0\tdocs/reviews/2026-10-11-key39-lifecycle-v4-keycape-source-ack.json" + }, + "docs/reviews/2026-10-11-key39-lifecycle-v4-keycape-source-ack.sources.json": { + "sha256": "sha256:e448fbf4c8d65886e3f790b91ac2856ea50ae866428086d2ae422073b449ecfa", + "index": "100644 1a1ebdddca7e3e1c419ef293466174644dfdec1b 0\tdocs/reviews/2026-10-11-key39-lifecycle-v4-keycape-source-ack.sources.json" + }, + "docs/reviews/2026-10-11-key39-lifecycle-v5-keycape-source-ack.json": { + "sha256": "sha256:10f74210b02c9c47370a0da223719a7f2dbc5c181319c7ad8f4de282c6efd03e", + "index": "100644 9ad2ee43cf5c66a66ff0472f4c9f40d0e550283a 0\tdocs/reviews/2026-10-11-key39-lifecycle-v5-keycape-source-ack.json" + }, + "docs/reviews/2026-10-11-key39-lifecycle-v5-keycape-source-ack.sources.json": { + "sha256": "sha256:6ba36436559cdc0da035faaf3718f5736a68633a731f103a7084feba5943546f", + "index": "100644 567ee0f3aa1b14f8633e874a35530eb76b8c93c4 0\tdocs/reviews/2026-10-11-key39-lifecycle-v5-keycape-source-ack.sources.json" + }, + "docs/reviews/2026-10-11-key39-v7-input-keycape-source-review.json": { + "sha256": "sha256:73d8ee75c6201f650d32658d0731e2e91ae40cf53e1693b0f5fb029c42a75723", + "index": "100644 f0aa85ec5484751c8e490e2c60a77a600e21a1e1 0\tdocs/reviews/2026-10-11-key39-v7-input-keycape-source-review.json" + }, + "docs/reviews/2026-10-11-key39-v7-input-keycape-source-review.sources.json": { + "sha256": "sha256:4d405fe6547e29a5cc849d698e4d8ea04dede70a25595142f025efbe96e371d7", + "index": "100644 f4d4d9013656d1039585e32e3a9777eab096fa71 0\tdocs/reviews/2026-10-11-key39-v7-input-keycape-source-review.sources.json" + }, + "docs/reviews/2026-10-11-key39-v7-input-keycape-work-record.json": { + "sha256": "sha256:557269082b81bf82bb0c35e8f651342def8aa79a7794d970cd973fcf583fdc6b", + "index": "100644 2b5ccdb5341c43030ff87a62d418e2322d4e75af 0\tdocs/reviews/2026-10-11-key39-v7-input-keycape-work-record.json" + }, + "docs/reviews/2026-10-11-key39-v8-input-keycape-source-ack.json": { + "sha256": "sha256:100430d7c31050b1c68fa6c9b6b2b37e4f914f36fd4591b9f4d9ed62544457c1", + "index": "100644 7e4d3ec75f7671b2327f7eccfc51d1d902db275f 0\tdocs/reviews/2026-10-11-key39-v8-input-keycape-source-ack.json" + }, + "docs/reviews/2026-10-11-key39-v8-input-keycape-source-ack.sources.json": { + "sha256": "sha256:0c601702c4ade690c33368784944a5239c4aadee6d47b1fe3768267bcab23369", + "index": "100644 1d9a58cd94ceba2d4727060eaf13cc0442240352 0\tdocs/reviews/2026-10-11-key39-v8-input-keycape-source-ack.sources.json" + }, + "docs/reviews/2026-10-11-key39-v8-input-keycape-work-record.json": { + "sha256": "sha256:ed9f94f2c58f8210461385e41e02707da92539f1594070a585bfe5a6db6b9488", + "index": "100644 69a2ab4de8cbe2987a2be322648aa90ace9e26d6 0\tdocs/reviews/2026-10-11-key39-v8-input-keycape-work-record.json" + }, + "docs/reviews/2026-10-11-key39-v9-v4-keycape-source-ack.json": { + "sha256": "sha256:4108d3afde1756c3889e6092878afd99a1193e59971ffe04d3845bbe21a42c7e", + "index": "100644 553e90a108f111a9c42b88e16e1f38ff38af3231 0\tdocs/reviews/2026-10-11-key39-v9-v4-keycape-source-ack.json" + }, + "docs/reviews/2026-10-11-key39-v9-v4-keycape-source-ack.sources.json": { + "sha256": "sha256:2a7a587264ceeb902040417d0bc5c329af461590d8bc99edf818ec5699f0a5b0", + "index": "100644 524f47af20bae995988f59285c5f29283261e007 0\tdocs/reviews/2026-10-11-key39-v9-v4-keycape-source-ack.sources.json" + }, + "docs/reviews/2026-10-11-key39-v9-v4-keycape-work-record.json": { + "sha256": "sha256:b5074fdc22eb8f62ae035254bfb8311272cf8a7ec6ed14b60eebd14f5ef4046c", + "index": "100644 acf3e488fa9af74216f669e3f84bdf5d22e3963b 0\tdocs/reviews/2026-10-11-key39-v9-v4-keycape-work-record.json" + }, + "docs/secrets-engine-openbao-owner-packet.md": { + "sha256": "sha256:0bc704a3c18cd475c151e6e1d208ff5f9e1a45ce565fe3f4f009d6a3fccc5860", + "index": "100644 2b7e30ef9b82ebbf22ad589d31d0fccb74b33c95 0\tdocs/secrets-engine-openbao-owner-packet.md" + }, + "docs/sitting-requester-registration.json": { + "sha256": "sha256:0d71459be790c229a8d8e62b5cb94a3d4e7ef9c16cf3e82a2dba9804123e416e", + "index": "100644 ce5f53365f2ae3b14cd53f4b43c248f77c5a0223 0\tdocs/sitting-requester-registration.json" + }, + "docs/t03-requester-registration.json": { + "sha256": "sha256:189c0b8341c98d0c0eb82670b8a4655692ba0f93a56ec03dc03c3ec264e29f6e", + "index": "100644 d45478c9ef6363a735fd3605417e9275c18a2a94 0\tdocs/t03-requester-registration.json" + }, + "docs/t03-requester-registration.md": { + "sha256": "sha256:578b56b18359c9c59e9d67692e4f11fbfe5fd6fa10e822528a4340759e584247", + "index": "100644 32efcf0a5afc5c660bd754eb494020c32f609bdd 0\tdocs/t03-requester-registration.md" + }, + "docs/tenant-claim-contract.md": { + "sha256": "sha256:a7ce4f59c39f6b953a0ebb0592329e20e7830e64d7297abd05df72b758a23483", + "index": "100644 9ab277b85b550ac52ccf98bfda0a0dd7c744e171 0\tdocs/tenant-claim-contract.md" + }, + "docs/upstream-issuer-proof.md": { + "sha256": "sha256:8076cb5efff621b4b4c4d1d2919caec1affecc4c14de23f37f6143b734077811", + "index": "100644 4e7d26b6a1cbcacf6498aed0e33da8964160c39e 0\tdocs/upstream-issuer-proof.md" + }, + "history/2026-09-05-011726-scope-intent-assessment.md": { + "sha256": "sha256:893e9586e83b0598aeba4b01f69b0dcbd15de90a7b102663015a1576c4d7508d", + "index": "100644 4f305e21acfa7ad7f44b70542ba8f627b5ef9362 0\thistory/2026-09-05-011726-scope-intent-assessment.md" + }, + "history/2026-09-09-scope-reassessment.md": { + "sha256": "sha256:25383fac79195d715b8b875363813750125be1b860fe328b2f666786567d9136", + "index": "100644 394eed11f5afb16de7eda7b09f99cf59dbbbacce 0\thistory/2026-09-09-scope-reassessment.md" + }, + "history/2026-09-28-railiance-admin-role.md": { + "sha256": "sha256:a43ac13b0c13d25a576803d29732f41f68653869744db415a70120515ce8f2ee", + "index": "100644 2c9e75f72d9983b1b2980d79b12380564465e640 0\thistory/2026-09-28-railiance-admin-role.md" + }, + "history/KEY-WP-0011-live-secret-exposure-recovery.md": { + "sha256": "sha256:788c6b7d2fe0d36eee870d1d5b0a28da2a2d53916c53835e458ac55258fc8a55", + "index": "100644 77233c20c2230459b2d78d9d28578e9472e568ce 0\thistory/KEY-WP-0011-live-secret-exposure-recovery.md" + }, + "history/KEY-WP-0011-rotated-credentials-2026-08-23-final.tar.age": { + "sha256": "sha256:71478bd7f493dd64e12fd123af386294e66f975b2072cf24d8468086a350b2f7", + "index": "100644 8eef81bac925dacfa8408bdfb4e5a2d672ba903e 0\thistory/KEY-WP-0011-rotated-credentials-2026-08-23-final.tar.age" + }, + "intakes/intakes.md": { + "sha256": "sha256:780d2792c26dc55293bb12f6af341949eda0b5fab128574fd7115d259cd0c601", + "index": "100644 845c3025f781d2296f40b4ec93c43935a480295d 0\tintakes/intakes.md" + }, + "registry/README.md": { + "sha256": "sha256:921c03c506d3e1c12b4796c18ac1cb74010e4f0bbada679f68edf55bda2518bb", + "index": "100644 569abe99c95e163d39048f4b02ccb47165751c7e 0\tregistry/README.md" + }, + "registry/capabilities/.gitkeep": { + "sha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "index": "100644 e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 0\tregistry/capabilities/.gitkeep" + }, + "registry/capabilities/capability.iam.key-cape.md": { + "sha256": "sha256:c987ddd0155c248e35409878e9b2dc36ffd18bbd1b82fce8a90157fc4224a915", + "index": "100644 59cc40e2ccad5b2ce9111366efbc9e48f8e18e70 0\tregistry/capabilities/capability.iam.key-cape.md" + }, + "registry/indexes/capabilities.yaml": { + "sha256": "sha256:901d15c15cacd844cf19a1a7b74c890ce5e0b00a3372a9e10bd7114f328596c8", + "index": "100644 0718f5218c9f4b4ef84c6d9aacd4b61440098405 0\tregistry/indexes/capabilities.yaml" + }, + "scripts/bootstrap-dev.sh": { + "sha256": "sha256:c05ddd72d2309c4d7900a9767eecc17c29e5ecd3c51c897438a8ffc9f5f6aa97", + "index": "100755 bf05bb3db90d62b77a1104e48d8e31045ccf0d8e 0\tscripts/bootstrap-dev.sh" + }, + "scripts/collect-upstream-issuer-proof.py": { + "sha256": "sha256:e810aea8d51be122f5fa7ce0e21128c0c76672a0cb6a059afa0bfdb68f09f5dd", + "index": "100644 29627c2056fbcf511bce069db0a8803c797295ff 0\tscripts/collect-upstream-issuer-proof.py" + }, + "scripts/factor_recovery.py": { + "sha256": "sha256:247be2b1c25007539208a02fb14c4b64d1f71df4be8dfae708ba1dc4d226449a", + "index": "100644 10832318492c4b34230400e458209777d58b08a1 0\tscripts/factor_recovery.py" + }, + "scripts/keycape_onboarding_guard.py": { + "sha256": "sha256:9465e5e0b98f7986c2bfdc2a72be5882677c2acddf2f7a10c4e7e14cf6a150c0", + "index": "100644 2bc28a205ffbd14c4f077c61957f5e3c0af284fb 0\tscripts/keycape_onboarding_guard.py" + }, + "scripts/openbao_negative_private_handoff.py": { + "sha256": "sha256:faf63a3e9504dcbb46847a114275f83d508521e095410a47f92f02b86ba82b1b", + "index": "100644 e3a875e114d176431b517667c0c096ac4a974ad2 0\tscripts/openbao_negative_private_handoff.py" + }, + "scripts/openbao_negative_private_launcher.py": { + "sha256": "sha256:46e57504b3185cc13f1656901a0ca02cc3887527cb09566e270f57b76099ab9c", + "index": "100644 4eae60ab0d0766a390743ed33d665ea852bb285e 0\tscripts/openbao_negative_private_launcher.py" + }, + "scripts/openbao_negative_probe.py": { + "sha256": "sha256:bb9610babf44a959342bac700bb5712e97f400b44c4d0659d21df4426e616e19", + "index": "100644 cb864ae0b2b46650a5e20ae90e9465701c362011 0\tscripts/openbao_negative_probe.py" + }, + "scripts/provider-browser-fixture.py": { + "sha256": "sha256:5d2278cd6c6871fe9370f2eebe0faeb2630abdeac85e8745cf1f81964b810a07", + "index": "100644 477857655b8316659d7a3a2afcbe330e497d3851 0\tscripts/provider-browser-fixture.py" + }, + "scripts/provider-onboarding-contract.py": { + "sha256": "sha256:7dcc18dbe739ebaebbf0895f8324e7f3a6d978a9340630c18eedd7f946565455", + "index": "100644 5ac86bfec073a054b712fa7a82fd44066f203a29 0\tscripts/provider-onboarding-contract.py" + }, + "scripts/provider_browser.mjs": { + "sha256": "sha256:d892b77aec406dc1d581281acdf12f9ccc55bd176e9ad7a23378803f6cb759a0", + "index": "100644 2abdf8d67ab9a61f93ab3ef90d36942ee7659702 0\tscripts/provider_browser.mjs" + }, + "scripts/provider_browser_acceptance.py": { + "sha256": "sha256:33aa5e6b5834e4d8b212da028b73b62909bf0310a4b6b1ffea9c990fae4e78ed", + "index": "100644 bc9f59737a06c59e7746aecd00df8112a9c830d1 0\tscripts/provider_browser_acceptance.py" + }, + "scripts/recovery_service.py": { + "sha256": "sha256:90746f479e4a4904d41bb80b0a583809c9d30f07a97f034c84f46c1d9d0abccd", + "index": "100644 ca0bb2a3554c569d3923c48bebe0850a1f4254ff 0\tscripts/recovery_service.py" + }, + "scripts/render-upstream-issuer-probe.py": { + "sha256": "sha256:4f9a79b8332a9c830181c9aacf28e76801d80ffb9669a0e822c1ae86d9a41b20", + "index": "100644 0f2dca8e890f18bf5430596a1c722bdc4bcb4d0c 0\tscripts/render-upstream-issuer-probe.py" + }, + "scripts/test-scenario-b.sh": { + "sha256": "sha256:7186980e174ee10c9c35fa2313f78390f56dedf6cf35b2738ad443d763ecb9d9", + "index": "100755 48a5832ed965624685eeeb9cad396b8e6a854426 0\tscripts/test-scenario-b.sh" + }, + "scripts/test-scenario-c.sh": { + "sha256": "sha256:d2ddda2fba72d50fc474a61d714c8fae0b8f1440ab67ea65841b8a8a9b99a7b8", + "index": "100755 e333ec26464ade014e45d7a13b153d0a6f29b0a1 0\tscripts/test-scenario-c.sh" + }, + "scripts/test_factor_recovery.py": { + "sha256": "sha256:49a69b6f60e31545929988e035e21d4d18984a6a130ac49e4980bc5e35aa07aa", + "index": "100644 25d961f46258329f2290811101388c293e16b025 0\tscripts/test_factor_recovery.py" + }, + "scripts/test_openbao_negative_private_handoff.py": { + "sha256": "sha256:e4eb600718e7d93b0e801ac3ab1427af9895a6e5d877c1134369e049e0849797", + "index": "100644 c17061849c2a8f9b6c614e69888502607c612674 0\tscripts/test_openbao_negative_private_handoff.py" + }, + "scripts/test_openbao_negative_private_launcher.py": { + "sha256": "sha256:243426a85075b3447adeb2ca320a13711409744f71837a06699de6ad5b04ee9d", + "index": "100644 e1d98a393d5276d64d689c3b961790219e939f77 0\tscripts/test_openbao_negative_private_launcher.py" + }, + "scripts/test_openbao_negative_private_preparation.py": { + "sha256": "sha256:8e4dd327c4a339a0151ecba57db5987965b5d536ca18123fb7c74a047a241548", + "index": "100644 8344b22b4d62deb60ccafafa7acca336d226b0a8 0\tscripts/test_openbao_negative_private_preparation.py" + }, + "scripts/test_openbao_negative_probe.py": { + "sha256": "sha256:08d5598357c4db72672b2c4dc21ef09711ac4f9873fb29f8a6949d34afb8d85c", + "index": "100644 242d4502ab1f2bda9886ec0936c647019c426696 0\tscripts/test_openbao_negative_probe.py" + }, + "scripts/test_recovery_service.py": { + "sha256": "sha256:7ba236fa95c55a36eeece50e04440999b03318bf65644a8f9fe5a63877796752", + "index": "100644 6cdb5acd55440ed089e2842f5c762627363defa1 0\tscripts/test_recovery_service.py" + }, + "scripts/test_render_upstream_issuer_probe.py": { + "sha256": "sha256:fd407b5c8ef4753bfb0878aef044fdce46463b30623c87133e480823655bcf70", + "index": "100644 ab6f45297f354d006c4e24beb698bafe8a93a31b 0\tscripts/test_render_upstream_issuer_probe.py" + }, + "spec/canonical-model.yaml": { + "sha256": "sha256:ea4516d17235ee2cf9e8df2be23e61f5f81aa1fcbb661cce9c1dfc4158acebf1", + "index": "100644 fca9b9d450cdee91d383ff8a67c738774c5aca4c 0\tspec/canonical-model.yaml" + }, + "spec/ldap-schema.yaml": { + "sha256": "sha256:65af5ae7f697803cb29fc4fcc8988d899612591f72b04d844e0baccfb8b1e4b7", + "index": "100644 41cc35711da626fd1986f0da439b230235cac4df 0\tspec/ldap-schema.yaml" + }, + "src/Makefile": { + "sha256": "sha256:6cdd3aa6e1cccaf4e028278acafe3e6a8d28170de89ff3462984d4f6eb56bd96", + "index": "100644 083df0b3e537a5ebb09b9a454f25c68d650fdac8 0\tsrc/Makefile" + }, + "src/cmd/keycape-to-keycloak/main.go": { + "sha256": "sha256:6141d3f86bbe3df2a814a0c9995e537d32bf7b19f5549e89d40974eb3270faf7", + "index": "100644 faca3748339a924aff723dcb3ed10ec8d737248f 0\tsrc/cmd/keycape-to-keycloak/main.go" + }, + "src/cmd/keycape/checkconfig.go": { + "sha256": "sha256:2c47c9aedf3457627fdec991703e3be50e5ef554e4104cf3741f8347687279f2", + "index": "100644 5edcfd7d4fe8f6af021676e8f0f8a0b258831c37 0\tsrc/cmd/keycape/checkconfig.go" + }, + "src/cmd/keycape/checkconfig_test.go": { + "sha256": "sha256:06955c996774109b26e4751ab20787f12718a1de96e3483a775fb19688d90e66", + "index": "100644 93e4c44654ca28fb16027748c9c24d91d5ced4bd 0\tsrc/cmd/keycape/checkconfig_test.go" + }, + "src/cmd/keycape/clients_test.go": { + "sha256": "sha256:6a3982c1b2bd9b15c387ba64d4c87b37304dc6f615ed2ab22eec888f620cb1da", + "index": "100644 c2b60259d95831503e35a0c67fbe6e3d0c4169f3 0\tsrc/cmd/keycape/clients_test.go" + }, + "src/cmd/keycape/main.go": { + "sha256": "sha256:553094de91cfafb021b7607eac1263fa155fedeb32c1e99e7c71e8d86e20ffd0", + "index": "100644 818b239a0033755bfa3ac32539ac0ddd88a003e2 0\tsrc/cmd/keycape/main.go" + }, + "src/cmd/lldap-export/main.go": { + "sha256": "sha256:f019a6dbb0849d06d5c3729874293d520478ca2887929a0595b59a324097ae75", + "index": "100644 daac6e986c48fcf2de9243ef78a40e0b88b9de4a 0\tsrc/cmd/lldap-export/main.go" + }, + "src/cmd/lldap-export/main_test.go": { + "sha256": "sha256:f105e490c717a414a5a3d1e65ceb4edcf74341ad7713b0accf8117a9b1ee02d2", + "index": "100644 5aa9a2bb1472931b7b9c798fbebfee45fe316f9b 0\tsrc/cmd/lldap-export/main_test.go" + }, + "src/cmd/lldap-to-ldap/main.go": { + "sha256": "sha256:adcc9481d009cad909bd55a71d95c17ce30e29ca63e88a7c9e8101b92d4b872e", + "index": "100644 c98b19b31f2c2be0124c88f001b33048a7221968 0\tsrc/cmd/lldap-to-ldap/main.go" + }, + "src/cmd/validator/main.go": { + "sha256": "sha256:e53b0a7860537dfb1cec69a00cdafe7073b35802421b5977f2fece4de01b9c1f", + "index": "100644 411272078c48cc52abce1007c0939528c66581fa 0\tsrc/cmd/validator/main.go" + }, + "src/go.mod": { + "sha256": "sha256:ab299ad4f94feb78e217e2228a4aa161b166460aa28df0c5009451ac1a337456", + "index": "100644 992c33f91d6b7f1244634cf583072f4bfbf73759 0\tsrc/go.mod" + }, + "src/go.sum": { + "sha256": "sha256:b10ad54277fb2bd927d3af727fc4dbb9ebe91a038a75be0469d0253ca699226d", + "index": "100644 d1f81c7aef0bb7c7892e9dd2131653661659bd0b 0\tsrc/go.sum" + }, + "src/internal/adapters/authelia/adapter.go": { + "sha256": "sha256:2887bd546f43a16338547dab5ce4a90850c670ed6f6c0d610a5d08c72c7f3f45", + "index": "100644 b78811acf78adad92d9a412c13cbb7aa86866468 0\tsrc/internal/adapters/authelia/adapter.go" + }, + "src/internal/adapters/authelia/adapter_test.go": { + "sha256": "sha256:d450b37e2b2405c189d444e50f0612e64177d6698cb4665a06ad967ae2224f93", + "index": "100644 81ac6205d8217509e6130b159c77e94291ca55a5 0\tsrc/internal/adapters/authelia/adapter_test.go" + }, + "src/internal/adapters/authelia/config.go": { + "sha256": "sha256:1b85ea3ffd324bced1ba108492ec780af8ba2b015d22cd51b294afaf36f2ec55", + "index": "100644 810f5b9387721058fb629a305d3aaf5254c65a12 0\tsrc/internal/adapters/authelia/config.go" + }, + "src/internal/adapters/authelia/issuer_probe.go": { + "sha256": "sha256:5846e2b514077a572611b898f449c04b096b086aeb724da055b2416994a7a7bb", + "index": "100644 082708a178b818d83632bfe31c77696c03530c60 0\tsrc/internal/adapters/authelia/issuer_probe.go" + }, + "src/internal/adapters/authelia/issuer_probe_test.go": { + "sha256": "sha256:a85e02399f8a5c81401dbf159e8054420bff56e08c8a98e8026cad8d31fcecec", + "index": "100644 7943c3f59d5c59aba5adaff9dab1af4d4055d635 0\tsrc/internal/adapters/authelia/issuer_probe_test.go" + }, + "src/internal/adapters/authelia/verify.go": { + "sha256": "sha256:189f9bc18b8d4319d2d88ee76a76e3b86468ebafde85ef460a4bafb7b350b4c4", + "index": "100644 7c85d3b9ea7d7843092b24d812807fb6b48755dd 0\tsrc/internal/adapters/authelia/verify.go" + }, + "src/internal/adapters/authelia/verify_test.go": { + "sha256": "sha256:f1570604d5038e49c14791f4d1aa278ad76a7e90294e82813d2c21e6a80a5511", + "index": "100644 d9003680dc01f3d709d938ff8843f0a96b8a69f6 0\tsrc/internal/adapters/authelia/verify_test.go" + }, + "src/internal/adapters/lldap/adapter.go": { + "sha256": "sha256:e7df7a159e9dd33a97932fd8cbde49a61091b8722796bf54ae4be887b4a3f5ef", + "index": "100644 e15cecd7c7ee83383745a367502bf6ab3d1280fe 0\tsrc/internal/adapters/lldap/adapter.go" + }, + "src/internal/adapters/lldap/adapter_test.go": { + "sha256": "sha256:650394ccc25d54c73c03746977a1880b1ed905634da8382da0ecf35843454081", + "index": "100644 e153314a0fc06e33ce8b957b66cc1838ee93a180 0\tsrc/internal/adapters/lldap/adapter_test.go" + }, + "src/internal/adapters/lldap/config.go": { + "sha256": "sha256:33059a27418b00e1987b7ced0b21dd39c1765338bf575fe2333ce3e606e5546b", + "index": "100644 fce760a4e97c94e1e542a4d2f0895a20c709fed9 0\tsrc/internal/adapters/lldap/config.go" + }, + "src/internal/adapters/lldap/config_internal_test.go": { + "sha256": "sha256:cbc71ce9a795b73c40b2714153eb2ee4d2e4007f7f56a7882eb862c23868cb68", + "index": "100644 d9e10ff898c19e85160e8b047f79a1d9daa797c7 0\tsrc/internal/adapters/lldap/config_internal_test.go" + }, + "src/internal/adapters/lldap/railiance_admin_test.go": { + "sha256": "sha256:63db481bb6e592e91bf4a555e75065fbd3bd8cd408a7967a4b7786e12bef5d5f", + "index": "100644 d76e938ebfc2f676d5dd0a0639707d1e7f4ebc08 0\tsrc/internal/adapters/lldap/railiance_admin_test.go" + }, + "src/internal/adapters/privacyidea/adapter.go": { + "sha256": "sha256:2559c68b5aa22bc5f61961e47d696b376f8bede533be03715ffc80c0d89ed904", + "index": "100644 35e65335a00ead963c3cd8e95e1b94a5b34e6a5a 0\tsrc/internal/adapters/privacyidea/adapter.go" + }, + "src/internal/adapters/privacyidea/adapter_test.go": { + "sha256": "sha256:6257489b9c51270da2c96f165c0efd1750b273218df51dca907d29c64c98b349", + "index": "100644 286562d56a3f263df68f34eb35bf68b6581688da 0\tsrc/internal/adapters/privacyidea/adapter_test.go" + }, + "src/internal/adapters/privacyidea/config.go": { + "sha256": "sha256:8dd769b18c04c562714794484630acdbda81b34ab1cfaf9cc7445513207e5021", + "index": "100644 b34c9f3d19109a7a0acc309c27639ce913f1e751 0\tsrc/internal/adapters/privacyidea/config.go" + }, + "src/internal/adapters/privacyidea/credential_file_test.go": { + "sha256": "sha256:9db15562c6fdf01e0806bbc478915413b17adb63c7e9ba213acfc4f9b2b2f0b6", + "index": "100644 017315272e6baa1151d4e73912b19c3bb8ca377b 0\tsrc/internal/adapters/privacyidea/credential_file_test.go" + }, + "src/internal/adapters/privacyidea/enrollment_state_test.go": { + "sha256": "sha256:dcf24c486629fa4835cddaa786af31ec78c05907694d4d93bce0f32876806377", + "index": "100644 6f3b883c0c7eced42bfdbe45713b1be5dadf0bc9 0\tsrc/internal/adapters/privacyidea/enrollment_state_test.go" + }, + "src/internal/adapters/privacyidea/optional_mfa_test.go": { + "sha256": "sha256:e2e415c671d1d0e7f30a0ce22f5ec58914d8e366b12e445e13b1d645a9ca6a65", + "index": "100644 13316d5ffada681a8f956b519f5a3d6ef94c3233 0\tsrc/internal/adapters/privacyidea/optional_mfa_test.go" + }, + "src/internal/adapters/privacyidea/read_scope_test.go": { + "sha256": "sha256:4685e1b84dad044db12708ecd231d4f91ec22ac45901ed2b5177e3be17d8cdc3", + "index": "100644 964fbb76048c44616d56b7da916d44c6b86432f0 0\tsrc/internal/adapters/privacyidea/read_scope_test.go" + }, + "src/internal/adapters/tenantengine/adapter.go": { + "sha256": "sha256:a54ef12fafd2efc24c547d562e0a558a7ecef586394e79f7de345dc8cbbbbef3", + "index": "100644 eeb54b9f0b7e1b9776fc37ecfc36599bbf07026a 0\tsrc/internal/adapters/tenantengine/adapter.go" + }, + "src/internal/adapters/tenantengine/adapter_test.go": { + "sha256": "sha256:b9c2db04bc187e6e6e56d4a42d4e657b9e56fef06843500fb4640477dee553e0", + "index": "100644 d437fd14dcfffa53999b16849888a86c553d0a42 0\tsrc/internal/adapters/tenantengine/adapter_test.go" + }, + "src/internal/authclient/cli.go": { + "sha256": "sha256:009c9ce900524b62483cf4955f3cbacc0dcb9027b8da77924b51b22e3fa5170c", + "index": "100644 57f0acc29d1f1743d489cd03c8e8d0c6e8530102 0\tsrc/internal/authclient/cli.go" + }, + "src/internal/authclient/client.go": { + "sha256": "sha256:61fb150349c5d3714450a90834c59af9a579a8a649c4149297a402cfcf6e39c5", + "index": "100644 0d39586235d89aa8097d76b7d210331e4a53083f 0\tsrc/internal/authclient/client.go" + }, + "src/internal/authclient/client_test.go": { + "sha256": "sha256:23642488fcff45e369d22ba0000c47e0e450c5f92560e643ab96303e2a2f43aa", + "index": "100644 dfce39882584ab7f37ecb9878d6b1801b74d9a4c 0\tsrc/internal/authclient/client_test.go" + }, + "src/internal/authclient/online.go": { + "sha256": "sha256:182ec3971ded3a7f3923aab7a23b7317de3ec0f657b8da6d9d882a43bcb0961a", + "index": "100644 b845c0f327ddafbf0bdca801c3563dae30d30f46 0\tsrc/internal/authclient/online.go" + }, + "src/internal/authclient/online_cli.go": { + "sha256": "sha256:6763c1e85396726b044067e77179ee2220e397bbd3888ec8de071c2826c6c7f2", + "index": "100644 c5305471ff74daf58c54b7e33411d337a6a97ed5 0\tsrc/internal/authclient/online_cli.go" + }, + "src/internal/authclient/online_cli_test.go": { + "sha256": "sha256:5408a183beda6a885ebae00d3fa420d3fb0d51e4aeb72965fef535d822270c4f", + "index": "100644 7c559944c2f22126204d30033acff81f10db8949 0\tsrc/internal/authclient/online_cli_test.go" + }, + "src/internal/authclient/online_export_test.go": { + "sha256": "sha256:5695f233e4caf581e494087cb203a74613d39a5626bbcc323b9f2d553a96b7ba", + "index": "100644 56cdc523ae73c5014ed91486f656f2516913e26b 0\tsrc/internal/authclient/online_export_test.go" + }, + "src/internal/authclient/online_human_test.go": { + "sha256": "sha256:e501c30b6d710a6dea89559ccf8b98de68502c2ee58d1778a56e97f1b7f3b6e0", + "index": "100644 d7fa19174f86baf1c35a5ea9ce2fe909741c89c5 0\tsrc/internal/authclient/online_human_test.go" + }, + "src/internal/authclient/online_test.go": { + "sha256": "sha256:6288329ca2576f72a361256050c94f9d1995e9fbe53b2a6318da2954bcbc7c6a", + "index": "100644 f7ff9095cfaaec15308268f5aa532a7aea387616 0\tsrc/internal/authclient/online_test.go" + }, + "src/internal/authclient/verify.go": { + "sha256": "sha256:804735be927ba7d0228ac378056730040d3ccf2ed020b4da0714085bae972f25", + "index": "100644 66b0ea4961b3573152c491f597fad3e02ea59a1a 0\tsrc/internal/authclient/verify.go" + }, + "src/internal/authclient/verify_test.go": { + "sha256": "sha256:7febc6698c87eac5fd8d2520c4f77c68e82f18a2aafa448cfa4990b96fdc46fc", + "index": "100644 a2a824f02554f0645a543934ee33419dca429085 0\tsrc/internal/authclient/verify_test.go" + }, + "src/internal/config/account_test.go": { + "sha256": "sha256:c6b75097d14dd42415c836407fa2a509857cdd2b771fb7e53d4507cbad2f4b1d", + "index": "100644 f28ad987f862203708795498947229df9de3757e 0\tsrc/internal/config/account_test.go" + }, + "src/internal/config/config.go": { + "sha256": "sha256:19cd234757f8908880d28b8b40939367dfab1322e0401e4e563d56cd3af06683", + "index": "100644 6376708a25cb5c5a3521d866dbe8323fa55455a8 0\tsrc/internal/config/config.go" + }, + "src/internal/config/config_test.go": { + "sha256": "sha256:af8602010985a0a5a6b4b2bf779f824e7eb5141e6bc2e8d8fcf600b964955100", + "index": "100644 d4236a6d45fa57b865b0983b395c6e9b3974105b 0\tsrc/internal/config/config_test.go" + }, + "src/internal/config/optional_mfa_test.go": { + "sha256": "sha256:03a00bc309943adbed68bdb9bf47facb6b3b50ef380fd49143b5ed54d684f63e", + "index": "100644 585aa6243370bb60a94506f5fa670516959c12b0 0\tsrc/internal/config/optional_mfa_test.go" + }, + "src/internal/config/token_status_test.go": { + "sha256": "sha256:b2b2ec13215c9661d79142ea698cb8b080f6e017de050bedebf3eb8d16df2ad5", + "index": "100644 0d1278d17f351df7b6d5ec379f858faebcaaaeba 0\tsrc/internal/config/token_status_test.go" + }, + "src/internal/config/validate.go": { + "sha256": "sha256:2b1766979b817802f43bdd0f999ac61452d86cdfafc1539a5d6be896b900a405", + "index": "100644 8df815142b95731f9bd95f5d519536ba0aa2c9b0 0\tsrc/internal/config/validate.go" + }, + "src/internal/domain/assurance.go": { + "sha256": "sha256:d3a29ece7c4fa4d9daa8b5fda89cbe0dd1ffef2ee2ecae0051ee68010edb8fd7", + "index": "100644 afbc48c673df6fe76ed3f2fa2aea492e476ec37b 0\tsrc/internal/domain/assurance.go" + }, + "src/internal/domain/assurance_test.go": { + "sha256": "sha256:87680e7afd47294dadc13092ca2bb7c47b9625c80e48a701765c00df3293d755", + "index": "100644 b9096ef7c09da6a413ed392c751799b3bb1b72bf 0\tsrc/internal/domain/assurance_test.go" + }, + "src/internal/domain/auth.go": { + "sha256": "sha256:ae800c5b1f58408147dd28a5c87ab2603b1537500a289397e711a4cb0e132cee", + "index": "100644 66c907c367651b193559701c2da564aea6757ae8 0\tsrc/internal/domain/auth.go" + }, + "src/internal/domain/conformance_test.go": { + "sha256": "sha256:6420ec21d4e7a97f60902e1f0debbaf20df91aeac6ab110629b82a67f4c5c9a1", + "index": "100644 5984835dd46da65b095829e05948f841554f733f 0\tsrc/internal/domain/conformance_test.go" + }, + "src/internal/domain/mfa.go": { + "sha256": "sha256:1b7875b08a0f280a20a14a4fa4fdb4fc84c3942795b1d1417943d32634121b87", + "index": "100644 30b0a92d9444324cdf67df1e856feb984385c29e 0\tsrc/internal/domain/mfa.go" + }, + "src/internal/domain/model.go": { + "sha256": "sha256:ce4309fc7426c66e4ebc18022d2f704c10ebbec243cc98e657d1de765ad09029", + "index": "100644 1cfda5371fe0c6eec07329b4990d3c6a105e92ee 0\tsrc/internal/domain/model.go" + }, + "src/internal/domain/repository.go": { + "sha256": "sha256:28f6d8f7f3d822e73f164af5e877f252db7dc6faa97f0ebf75d76aad64078011", + "index": "100644 56252d821062128e3323a0cdca1064d292a97898 0\tsrc/internal/domain/repository.go" + }, + "src/internal/errors/taxonomy.go": { + "sha256": "sha256:7d60f30a4ff0c9a21a3942451eb0292320a6346d3d81508e414a7dfbdc3c666c", + "index": "100644 80ebf0763538369dff67abd3a17c6269022f5e2e 0\tsrc/internal/errors/taxonomy.go" + }, + "src/internal/errors/taxonomy_test.go": { + "sha256": "sha256:6c0bdf1f8e90ea343d88f57f80f6c916c92428a9ac2191a518ee7b70df0eed45", + "index": "100644 2f5722e94e982c71b008b7f4c522d500df76a0e1 0\tsrc/internal/errors/taxonomy_test.go" + }, + "src/internal/jose/jose.go": { + "sha256": "sha256:a6de154cd81e34a521b8aac5dce6b45a3cfb015681ed16e2beb8f2a24c72c00d", + "index": "100644 6eef3d8a067500cbc44adf5745759c4cd6486157 0\tsrc/internal/jose/jose.go" + }, + "src/internal/jose/jose_test.go": { + "sha256": "sha256:cbbcbac620b27c8e93d9dc3fefc3ca4fcd20ab58c6bc8f79eb041b980aaa9a43", + "index": "100644 34abfa36f8dd355df7713eb940b269f785805402 0\tsrc/internal/jose/jose_test.go" + }, + "src/internal/migration/lldapexport/exporter.go": { + "sha256": "sha256:cb041827c9c0edf9da1338e966e7722e3765065582933b8c17b0d9008d44d103", + "index": "100644 4119e8a8950a8461c5fe5cb4944af498df5df84f 0\tsrc/internal/migration/lldapexport/exporter.go" + }, + "src/internal/migration/lldapexport/exporter_test.go": { + "sha256": "sha256:6f5cf0e43ea8aea9ceeb6d4d3ae0bfd9f3a5d18636dd49bea0c574c5253a44c2", + "index": "100644 e9071d133a6f3fbd2421d3d0dd9fc8a051d61693 0\tsrc/internal/migration/lldapexport/exporter_test.go" + }, + "src/internal/migration/tokeycloak/transformer.go": { + "sha256": "sha256:856e26fd2075f020ef02373b5b7e9e5a1e98473b5caca95b60b7983287fc10aa", + "index": "100644 4666a2b8579e73f76bd4ccf4518cdd9818035e2a 0\tsrc/internal/migration/tokeycloak/transformer.go" + }, + "src/internal/migration/tokeycloak/transformer_test.go": { + "sha256": "sha256:5c3f5145a37079262db805f5bedaabe1d42edf2ccec1788c09c02f5b8336639b", + "index": "100644 50dee2c66b1922e2d109ca963592fe3a0bf9711c 0\tsrc/internal/migration/tokeycloak/transformer_test.go" + }, + "src/internal/migration/toldap/generator.go": { + "sha256": "sha256:e59ba05203145f52818b3f4e34ab62126481faa9dde697f643fc1cda0638bb46", + "index": "100644 fd21830fd2299a401000bb418946d107bbefa1ee 0\tsrc/internal/migration/toldap/generator.go" + }, + "src/internal/migration/toldap/generator_test.go": { + "sha256": "sha256:73b0969ce2e2cb018aa5734714c86152d1695f0099a5caf7dd96b773717fc2cc", + "index": "100644 5ec399dca0db878f3d5fab76504947635770727d 0\tsrc/internal/migration/toldap/generator_test.go" + }, + "src/internal/server/errors/enforcement.go": { + "sha256": "sha256:f644546b1423992518fc4078ab561ab68fea1fcff00b734795af6652ae3dd4e2", + "index": "100644 81fd2c8d24016adb626f7a88b442361cf6197124 0\tsrc/internal/server/errors/enforcement.go" + }, + "src/internal/server/errors/enforcement_test.go": { + "sha256": "sha256:b4ea0c9a3aaebd66b0b0fcc73f544c76d5a377ac0c9561ccc2638a236844374c", + "index": "100644 0f8384bc5a147905ea99f33d1a4e573c7a85387e 0\tsrc/internal/server/errors/enforcement_test.go" + }, + "src/internal/server/oidc/account.go": { + "sha256": "sha256:b0e36d8cb5f9b1bf4cee573e46b204800c0e3162a912a122b271def4712ab72a", + "index": "100644 7036039edd2837cb22e804b60633b2425a5fb817 0\tsrc/internal/server/oidc/account.go" + }, + "src/internal/server/oidc/account_test.go": { + "sha256": "sha256:db1f7b8a2989b1d0deffee205ec9f4f35c7472135dcb8a10b5498893d881d763", + "index": "100644 1a2d68f1008418e138a6c2d293f2afda017c5ba5 0\tsrc/internal/server/oidc/account_test.go" + }, + "src/internal/server/oidc/assurance_time_test.go": { + "sha256": "sha256:911f65e8cea87ef867d6bf98199ed55abd29427b9f8d0838977d228e6186b08a", + "index": "100644 72ad579561c84e9ed99da98dd86ca472880ff123 0\tsrc/internal/server/oidc/assurance_time_test.go" + }, + "src/internal/server/oidc/audience_test.go": { + "sha256": "sha256:1b751e1aafb5dbdcb751b42b001e32ddfaccfa3d5ba9d5af67b44148d9802ae3", + "index": "100644 fb5b1f41c0619b7ea6d72c231aec2027769f7f77 0\tsrc/internal/server/oidc/audience_test.go" + }, + "src/internal/server/oidc/authorize.go": { + "sha256": "sha256:04f9bfb6b146ecf869161b7a0eb00b6486f424710c2c867e4f4b70af5f44ff5e", + "index": "100644 60447bc9cd056c2119b1611e38585bc81884a568 0\tsrc/internal/server/oidc/authorize.go" + }, + "src/internal/server/oidc/authorize_test.go": { + "sha256": "sha256:61042d55e20a11fb6e1e9e6c054e50c0f629b702ed6d8da281d52529e5c29b0d", + "index": "100644 434b51089fe92497644cdc4504f765f75c21f542 0\tsrc/internal/server/oidc/authorize_test.go" + }, + "src/internal/server/oidc/discovery.go": { + "sha256": "sha256:00e4c831a2b4d29aecf3597a09c943315b87c5834dbcd4912ba5d8d31ab28cd5", + "index": "100644 6291c51c64f044a624680afeb3ee408b57ed92b1 0\tsrc/internal/server/oidc/discovery.go" + }, + "src/internal/server/oidc/discovery_test.go": { + "sha256": "sha256:2d0dc24d59497aa5a9aa581f8fd3d9cca300d7e0cb4962907630570d60e7e7f0", + "index": "100644 f2d069d54f67ac1cad061e53687a44ab0c1648ba 0\tsrc/internal/server/oidc/discovery_test.go" + }, + "src/internal/server/oidc/handoff.go": { + "sha256": "sha256:a2ffede12c9140a6c7d14632122a39ffbd0e707cd357dcc11d3ad885dc2a7fa4", + "index": "100644 31954ca4dd03ccc36d9da03d5734ac029d46c9ce 0\tsrc/internal/server/oidc/handoff.go" + }, + "src/internal/server/oidc/handoff_test.go": { + "sha256": "sha256:23268b7f9f103f8a8798a168004580bc8fdb3a175161220dac26480a89f28e02", + "index": "100644 d8a33fb4e5f90f92e7acab2f198c540d39cfdebc 0\tsrc/internal/server/oidc/handoff_test.go" + }, + "src/internal/server/oidc/hardening_test.go": { + "sha256": "sha256:b41d6a987d5507d5160d970d0f2110ce681851fca1f4f7a3a9573163e8cd6f3e", + "index": "100644 d73a3ffcd40558731fb4fac2c66ff0588c0969f5 0\tsrc/internal/server/oidc/hardening_test.go" + }, + "src/internal/server/oidc/human_tenant_test.go": { + "sha256": "sha256:459664f90d76224958b3dd807d95d7bfcf0fce5f113498bd9886a41be19903a5", + "index": "100644 187bd993cb85369ada263c734bd4e7daec5bbb73 0\tsrc/internal/server/oidc/human_tenant_test.go" + }, + "src/internal/server/oidc/jwks.go": { + "sha256": "sha256:426d6596979ed6d097d6aaae66b6475d1c97687888c6ab1050c05cb14653ec60", + "index": "100644 e74bd2e4a219c25aefc781841e73eb219e0945a5 0\tsrc/internal/server/oidc/jwks.go" + }, + "src/internal/server/oidc/jwks_test.go": { + "sha256": "sha256:9100e83e58ce2cc2f6d2f47804ee0ce035ca424b209597a12c4ef1a8896163aa", + "index": "100644 1fd53f19e6c8a131a639d780bea7e1c0c609930a 0\tsrc/internal/server/oidc/jwks_test.go" + }, + "src/internal/server/oidc/login_session.go": { + "sha256": "sha256:efb0fcd066d81d753b7043c9c3d9e74e35cd510ca4304d21a51ba29dec833e1f", + "index": "100644 7953f06b4948162868166a8ffafef36b2445509b 0\tsrc/internal/server/oidc/login_session.go" + }, + "src/internal/server/oidc/logout.go": { + "sha256": "sha256:d4de80f8056e7a65c7a41f244dd38e447a4e04df729760a8a59cb6bb4e063893", + "index": "100644 496d237a3f642ac94c869f0dc3438d9a2e262b9d 0\tsrc/internal/server/oidc/logout.go" + }, + "src/internal/server/oidc/native_optional_test.go": { + "sha256": "sha256:329907bf7089d8f3ea05baad919d05677b8c3aaa201e6f233795ae9f69c003b5", + "index": "100644 47d4df2dee47489a0923df57fe654be87edf2b12 0\tsrc/internal/server/oidc/native_optional_test.go" + }, + "src/internal/server/oidc/optional_mfa_test.go": { + "sha256": "sha256:d758848d845c181cf1b18710e6ca24977f6b7576320dcad1f7293a5433c3b529", + "index": "100644 2f8eecda6f29cf3d31177ec3b7ec3650a871b555 0\tsrc/internal/server/oidc/optional_mfa_test.go" + }, + "src/internal/server/oidc/policy_isolation_test.go": { + "sha256": "sha256:35cb9870f5942c61c0e8c6ca875e9080bbd71c46c7b20fb18da01be88e0fa077", + "index": "100644 221ed02325c872a7947e798607da236f15d7d6e3 0\tsrc/internal/server/oidc/policy_isolation_test.go" + }, + "src/internal/server/oidc/policy_runtime_test.go": { + "sha256": "sha256:856146013d2aaa60836e669c297024923ed8e2856d31a89744a99baadae4a74a", + "index": "100644 c70d6a4a7d78abd6c0911776f8857ddedb7858bd 0\tsrc/internal/server/oidc/policy_runtime_test.go" + }, + "src/internal/server/oidc/principal_type_guard_test.go": { + "sha256": "sha256:b3fa097691f07594616e09e8775512d586a019ccdf8302bf594c1ac94f5f3f40", + "index": "100644 d1c9a9660f3e5fe6c878657957ce6bd7db175c6d 0\tsrc/internal/server/oidc/principal_type_guard_test.go" + }, + "src/internal/server/oidc/session.go": { + "sha256": "sha256:48473ebe123285ed21e7738834d9d9168dfc855d911cb9e7ce7e87b069a23a3c", + "index": "100644 15d759c148e72d4a84df18a3d62db1c6838d1be5 0\tsrc/internal/server/oidc/session.go" + }, + "src/internal/server/oidc/signin_diagnosis.go": { + "sha256": "sha256:b7976a1cfe1d8d1dca890cf0762cc82d08978a2e7537e45988b147ed0222042f", + "index": "100644 ba82ee4b244e241d8d156e05315d8b71626b1cef 0\tsrc/internal/server/oidc/signin_diagnosis.go" + }, + "src/internal/server/oidc/signin_diagnosis_test.go": { + "sha256": "sha256:97e80be67c480dfe8eef0683f25868a91a0fdc96472b5296b734b56274270b3e", + "index": "100644 72a1b3518b8824da04d1bf87bd4d73dfa1a7a934 0\tsrc/internal/server/oidc/signin_diagnosis_test.go" + }, + "src/internal/server/oidc/tenant_precondition_test.go": { + "sha256": "sha256:2f2c0d90d26da4e3a6c9145aec8c9d7121c791b6b993c2fe8893a763a30fa72f", + "index": "100644 a955146312249d526fa7fedefd085c1140399ac0 0\tsrc/internal/server/oidc/tenant_precondition_test.go" + }, + "src/internal/server/oidc/tenant_test.go": { + "sha256": "sha256:8a3879789589f0c3d6e473ba56dd7d7c86ec6fbdddaafa4b13354f82d5f88713", + "index": "100644 1517610493b1e91c16f9bfee5fd63361be2d7992 0\tsrc/internal/server/oidc/tenant_test.go" + }, + "src/internal/server/oidc/token_status.go": { + "sha256": "sha256:d9c22a71bb2efad7ea240f2689a98f14768ce3c1519d1d8b4e78ee7af2dc70b3", + "index": "100644 34792f4d5ec77ac3c5d6032e70b86254ab7f0613 0\tsrc/internal/server/oidc/token_status.go" + }, + "src/internal/server/oidc/token_status_discovery_test.go": { + "sha256": "sha256:27adb5797afba46ca2b1f16018721f055f82760498088b58b993730be1fa2031", + "index": "100644 bf8ca629c8f370921858724f3b7bba7c94ee4ae1 0\tsrc/internal/server/oidc/token_status_discovery_test.go" + }, + "src/internal/server/oidc/token_status_http.go": { + "sha256": "sha256:a7202d3176454f8ab42c090426e2debcb5cc2c1fc089e79746bb78e5c455af97", + "index": "100644 5bd916116fda33a576faa685eaa84240da570094 0\tsrc/internal/server/oidc/token_status_http.go" + }, + "src/internal/server/oidc/token_status_internal_test.go": { + "sha256": "sha256:3d3ab41987c7586bd53af8b5c36ff6667b5b2a32d59789915eb9a36b7ceeba53", + "index": "100644 3fe725cdc637883c5ead5d699e00661b0a14fe4f 0\tsrc/internal/server/oidc/token_status_internal_test.go" + }, + "src/internal/server/oidc/token_status_test.go": { + "sha256": "sha256:e2613d44deefcbfbd0ce1db5ce2588849fb4be9b8bed33cb538171cc29f63e90", + "index": "100644 deb3f5298b2881e01c55e4d4594fc40893341897 0\tsrc/internal/server/oidc/token_status_test.go" + }, + "src/internal/server/oidc/token_status_transport_test.go": { + "sha256": "sha256:3a9945f0292125e86d0014b5245a20c0475d6c518eccff0f9b936356d8e0b347", + "index": "100644 8bd0a163e497f59c90b54e0d65239fa1492ba5bd 0\tsrc/internal/server/oidc/token_status_transport_test.go" + }, + "src/internal/server/oidc/token_test.go": { + "sha256": "sha256:5721617c6e5eb79a3b5e86efa63e9278a8d81a0d7c01bf7b184255c102848e33", + "index": "100644 42314ec0fe6c254c3b29c4f859e090f18b316f21 0\tsrc/internal/server/oidc/token_test.go" + }, + "src/internal/server/oidc/userinfo.go": { + "sha256": "sha256:f9c986f7a2c79f27a9970a296e6b493014fed77af2f22ba96c4a457d049c916f", + "index": "100644 4e469561910e5a08882f99f95e77c8b51777910e 0\tsrc/internal/server/oidc/userinfo.go" + }, + "src/internal/server/oidc/userinfo_test.go": { + "sha256": "sha256:e88c42c7cdf50d5953c9f594f0b99b4f87f5e223ba1cb44b70d696972016da80", + "index": "100644 5a12f5e898c8f4526d505404eed14e6f466ca7d7 0\tsrc/internal/server/oidc/userinfo_test.go" + }, + "src/internal/server/policy/policy.go": { + "sha256": "sha256:015d0b42419c501a46171d09a8f7d588dd517d4c98ad14344ff52113294e0fe7", + "index": "100644 29167da1dbb2b3a9d2e74f5f0319e0902d4173a3 0\tsrc/internal/server/policy/policy.go" + }, + "src/internal/server/policy/policy_test.go": { + "sha256": "sha256:25644557ca532b608dff4e02b202c5c3b7c423fb31e98ad0609febf3660183a2", + "index": "100644 4becee709136b31735eeeab3f1b6b1875de4407e 0\tsrc/internal/server/policy/policy_test.go" + }, + "src/internal/server/readiness/readiness.go": { + "sha256": "sha256:ffe22b99633b1aa50fc299371398ec0f3fc090c9c8a5f4957c6bfa76b001d073", + "index": "100644 e0cfefbf7c014370890470fc42850c3b3a879daa 0\tsrc/internal/server/readiness/readiness.go" + }, + "src/internal/server/readiness/readiness_test.go": { + "sha256": "sha256:10163e0b1d2f41f336d61782c3bfffdd1116a8459247cc933ffb40be645184c6", + "index": "100644 02cf96ed77554ce25eb4f62e54c00b02cc0089a5 0\tsrc/internal/server/readiness/readiness_test.go" + }, + "src/internal/server/telemetry/emitter.go": { + "sha256": "sha256:e92f008b6a487a47b8ee2b98011a3a5b821838a61be9c4db4d56cda600e6fda0", + "index": "100644 ff11c05a76db4692e1de6d9ba19f5dc5d45ed2e8 0\tsrc/internal/server/telemetry/emitter.go" + }, + "src/internal/server/telemetry/emitter_test.go": { + "sha256": "sha256:29fae2460deb7219eb8edc725b3701a02d2b341fee62bffb2661a520f5a7381a", + "index": "100644 3d64e3d148536f96bddecd228c7eba6711194780 0\tsrc/internal/server/telemetry/emitter_test.go" + }, + "src/internal/server/telemetry/events.go": { + "sha256": "sha256:3f9df9822649ae2701c3bbf475c8e6d600bc60b7ccdea4d0e54193162d5b0167", + "index": "100644 793b79bcef80638f2c182645cba9773c17c1550c 0\tsrc/internal/server/telemetry/events.go" + }, + "src/internal/validator/report.go": { + "sha256": "sha256:6bc4d31f932ea9a32020cf33203978906730dfe3601350ded0206ff6c8c297a8", + "index": "100644 87baa854418f0a6617579e6566aa84217134c6e2 0\tsrc/internal/validator/report.go" + }, + "src/internal/validator/validator.go": { + "sha256": "sha256:3d0a8bf8ebbe54e21e162c8f7df6e4a4d69ab997a01969b74dcbd53decdf559f", + "index": "100644 78eb866cef192174b0a29f151eac64f4adc85472 0\tsrc/internal/validator/validator.go" + }, + "src/internal/validator/validator_test.go": { + "sha256": "sha256:8216027a464eab4167d8e87b4d27d130854d7b9cd4cc8a1b6f1a47ff1f9a2276", + "index": "100644 a86eff31eb55d9cda811adc3508b44e82f6b2eba 0\tsrc/internal/validator/validator_test.go" + }, + "src/tests/conformance/external_test.go": { + "sha256": "sha256:b26bd465e31086f957c9e374b6bee1f0f077b7481eda9daa29cf63816bb87fdb", + "index": "100644 75cddf3602a0dbb1d29162db1df187e43e3d4568 0\tsrc/tests/conformance/external_test.go" + }, + "src/tests/migration/fixtures_test.go": { + "sha256": "sha256:3fbcb8f531fa206225f719a67b744b2ecb908095fbae0538432796697971e6de", + "index": "100644 208e903a6377e3b894595de8c97248ba96e3dbb3 0\tsrc/tests/migration/fixtures_test.go" + }, + "src/tests/migration/scenario_b_test.go": { + "sha256": "sha256:40ae7239d116f3e284c767570d39e1f32d44fc29b6fa37ea8835987027942ac0", + "index": "100644 8a49ddec84f156a2ef0badf8f78d292243b7a5dd 0\tsrc/tests/migration/scenario_b_test.go" + }, + "src/tests/migration/scenario_c_test.go": { + "sha256": "sha256:9722146ac224768aff85476acbd83f3d478c1e060e5a3c6f99b1786858879b80", + "index": "100644 bf0a61a1c7e00fd6f3e919529603c5c7461f4a69 0\tsrc/tests/migration/scenario_c_test.go" + }, + "src/tests/negative/negative_test.go": { + "sha256": "sha256:757485bf1967ed95e872d4a1987b7fd985fbffccd05cf41270b9f4061431de3f", + "index": "100644 377b0f33da592cfbc7eeb9bc74025280ce553a6d 0\tsrc/tests/negative/negative_test.go" + }, + "src/tests/profile/profile_test.go": { + "sha256": "sha256:e5ab4568b15f681a13c9295b17907ca3872ee33b702bb56aea749f17758d29e6", + "index": "100644 8b802f71346bf27a58ae73877fa594be0557b396 0\tsrc/tests/profile/profile_test.go" + }, + "tools/export_tokenstatus_client.py": { + "sha256": "sha256:c05cc75de87c9d7bd9d184c012c4ab8d273da36934c8908c05d7c72192db218e", + "index": "100644 d20b25279e5928c0febe63fff9e9f141fc2f1d57 0\ttools/export_tokenstatus_client.py" + }, + "tools/register-informed-decision.py": { + "sha256": "sha256:c606e58d3fd3e305fe8e932907f341447b2d2e41dd1b11f1d008672e9271299d", + "index": "100644 9192fd9cde67896f741cf67dccd48d2250d6ad27 0\ttools/register-informed-decision.py" + }, + "tools/rotate-live-exposed-secret.sh": { + "sha256": "sha256:c9505e529fc7baa5b6aded0ed2d260af13a7238e8059e9c2a759e3bba7a35833", + "index": "100755 0dcb542eeb16827ccb0d0f05b6e302f6af1693e8 0\ttools/rotate-live-exposed-secret.sh" + }, + "wiki/KeyCapeSpecificationPack_v0.1.md": { + "sha256": "sha256:0001a2964627c0d1ba0fe0f4ac3cc18b87a4536e6ac75e9b2539e844cbb716f3", + "index": "100644 4b728fd406c815143f302a76512858d3577e6aca 0\twiki/KeyCapeSpecificationPack_v0.1.md" + }, + "wiki/KeyCapeSpecification_v0.1.md": { + "sha256": "sha256:a76de79a37ac799192af2351d929a85cbf13c62ca37cf8b86c589b773a48259c", + "index": "100644 c803cabd2342689c3123e71b8773edb8a972125d 0\twiki/KeyCapeSpecification_v0.1.md" + }, + "workplans/ADHOC-2026-09-05.md": { + "sha256": "sha256:76123d22d0c1efc51212f8914e386f078b3c6d908959af6978ae73874e492b04", + "index": "100644 f7e78675df62c9b48e29f882fa99298d6d8ce7f1 0\tworkplans/ADHOC-2026-09-05.md" + }, + "workplans/ADHOC-2026-09-07.md": { + "sha256": "sha256:c335ebfe91dad291277e8f17034ac8f785b3bc767f281f205c446c08f03d7978", + "index": "100644 17401073c053c9710e6e680243bbd313b08d1fc1 0\tworkplans/ADHOC-2026-09-07.md" + }, + "workplans/ADHOC-2026-09-27.md": { + "sha256": "sha256:f6220f17fc5b6e7300d0a55ac29f78f385ad89db276ccaa21693428fffa5919b", + "index": "100644 a2068333f7964360e0e0b99cffc03bd3eb644a67 0\tworkplans/ADHOC-2026-09-27.md" + }, + "workplans/KEY-WP-0001-keycape-implementation.md": { + "sha256": "sha256:29a2bf4892b7185e28e9126a3d8311d0fed34a876f416a3e75c605915fde0969", + "index": "100644 74334411cd056e7c7253e84f1c4b40c42eb13de3 0\tworkplans/KEY-WP-0001-keycape-implementation.md" + }, + "workplans/KEY-WP-0002-container-image-gitea.md": { + "sha256": "sha256:76fee187185b30219bc257ccc9b587661df4489574a2bb57703a365a5d803cec", + "index": "100644 418f477c0ede13d7c003d744abf234347f5d5e31 0\tworkplans/KEY-WP-0002-container-image-gitea.md" + }, + "workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md": { + "sha256": "sha256:5e949c696e587540d305b682eb1f8390ec544bbec6a566be8d04e73fb1b254ca", + "index": "100644 9896c67d78f0efdd03325535eb41295250be3a19 0\tworkplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md" + }, + "workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md": { + "sha256": "sha256:260ba7d3116db3bc5a72e5cd8b9984137e7e372c8128d21073614dbd948c10c2", + "index": "100644 a50e910558ee43073c92cb27865a1aceac990dd5 0\tworkplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md" + }, + "workplans/KEY-WP-0005-iam-profile-core-claims.md": { + "sha256": "sha256:c6702b644cdd046c0d3bba8ba8837050826e4dc3d855bd73327ae94218ba5b57", + "index": "100644 648d2405699dcf25b3121df6c46d871597100d7b 0\tworkplans/KEY-WP-0005-iam-profile-core-claims.md" + }, + "workplans/KEY-WP-0006-client-credentials-service-tokens.md": { + "sha256": "sha256:b3227849978c95cad89e02afb74bf2217b6188ae65c5b0af6a21703d65477701", + "index": "100644 632c4c2cad39cbde55c2ae1f2ba5ecf2f445b1a0 0\tworkplans/KEY-WP-0006-client-credentials-service-tokens.md" + }, + "workplans/KEY-WP-0007-user-engine-portal-oidc-client.md": { + "sha256": "sha256:5408ff6dfeb58a8a7756b48fe4f54f7c7b98d7940cb9aaa5c7864f1247e58150", + "index": "100644 f1b04e1a61b398426c23d8d9ca655b3937d7bd10 0\tworkplans/KEY-WP-0007-user-engine-portal-oidc-client.md" + }, + "workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md": { + "sha256": "sha256:bfc9b2118f0712e92a86bbb0f14a2857fafc3a42a3c14c0e2535002aaa57a2f5", + "index": "100644 438ab5480de3bd66d75b6ec7e09639d1b93e3e5f 0\tworkplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md" + }, + "workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md": { + "sha256": "sha256:d1daac9815930104a392ea96c14922e34f947720a31d1b0ac45a770997e0f476", + "index": "100644 c9e585db65424c7c4e3b5adf37a68de2bdfbdc1c 0\tworkplans/KEY-WP-0009-provider-capabilities-and-service-identities.md" + }, + "workplans/KEY-WP-0010-openbao-operator-loopback-callback.md": { + "sha256": "sha256:41d28a16bef9313b776c5c6305316a9e7d4f5528b7fb7427b8384a0ed0ad35c4", + "index": "100644 81614eeb8c98205d6e5eb3201da10e36b76a21e9 0\tworkplans/KEY-WP-0010-openbao-operator-loopback-callback.md" + }, + "workplans/KEY-WP-0011-live-secret-exposure-recovery.md": { + "sha256": "sha256:3c5458180fe81a04e357f8db737e4287f79640b5ab02682bcadc595b73f846cd", + "index": "100644 f7b906f552f6e3279895a90afbe216b6e78ee5ff 0\tworkplans/KEY-WP-0011-live-secret-exposure-recovery.md" + }, + "workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md": { + "sha256": "sha256:68d34d75c914e7d2d8177000e800d6372cccda2b850c03ab85da42b90a66b91c", + "index": "100644 0f3deb626e5de9a9f898754ef81d3f2ee5282792 0\tworkplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md" + }, + "workplans/KEY-WP-0013-approval-engine-resource-audience.md": { + "sha256": "sha256:55c88bf4ed9a456db59b319bbaf960dfe6f4147437e339f950e0583d7582057a", + "index": "100644 7d77aee3caf3d79fe6d6c1369249c6d94e0ae123 0\tworkplans/KEY-WP-0013-approval-engine-resource-audience.md" + }, + "workplans/KEY-WP-0014-native-credential-lane-handoff.md": { + "sha256": "sha256:22aac43ae5039aebd11f9f0aa57a882ad009ad6ed119ec08eb85b32a5af48cd7", + "index": "100644 bacf04c07f59125a90c519d3c306a7414cb9a1a3 0\tworkplans/KEY-WP-0014-native-credential-lane-handoff.md" + }, + "workplans/KEY-WP-0015-scope-intent-assessment.md": { + "sha256": "sha256:60b9f2265eff880d916c3ee8dba36aec9984ec310804de776cebf89cc98fdb95", + "index": "100644 82b952a216346ffb7f5cab413623fe4a88f7700e 0\tworkplans/KEY-WP-0015-scope-intent-assessment.md" + }, + "workplans/KEY-WP-0016-authorization-code-protocol-hardening.md": { + "sha256": "sha256:ed48128a1cb51cbe3d154727bafd5a5ffb3b5b618c20649b2a0e7db154cf3a0c", + "index": "100644 52839bd0f83d97656c8ad97a8ffc338d9019239a 0\tworkplans/KEY-WP-0016-authorization-code-protocol-hardening.md" + }, + "workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md": { + "sha256": "sha256:8700e0e5aa07dcd7f651e792cca12a0330b7ee9d2f6064b4cc3fcf4c7d509340", + "index": "100644 00eb03971aae75724afbf7b8a4946ce6b7eda3af 0\tworkplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md" + }, + "workplans/KEY-WP-0018-export-completeness-evidence.md": { + "sha256": "sha256:15026b708d116f803b0b2fa43f30a4dbced76e4d8137b5fcb5b4275e593d7c7b", + "index": "100644 325fc483d62dbad53b92b986de56112168a92b4a 0\tworkplans/KEY-WP-0018-export-completeness-evidence.md" + }, + "workplans/KEY-WP-0019-upstream-provider-token-verification.md": { + "sha256": "sha256:0d2d8b5bda1e0d333935812d8d3749cb7b0c5523a3987d1b26185f9f6d0f0fa2", + "index": "100644 dfeb92296f46d4ce2ac7df1fedcc61e9ccc5d6b3 0\tworkplans/KEY-WP-0019-upstream-provider-token-verification.md" + }, + "workplans/KEY-WP-0020-migration-contract-preservation.md": { + "sha256": "sha256:cc842d15bf42ddc4d0f4056bc19b3176cab2c5f3c1a2fe6d648e5dbd077be8b3", + "index": "100644 7b6f3be976293469dee2180c10e16f313876d640 0\tworkplans/KEY-WP-0020-migration-contract-preservation.md" + }, + "workplans/KEY-WP-0021-snapshot-attribute-validation.md": { + "sha256": "sha256:b603248693073a9b9b25b4d0a4147d8d88c16a07dc9936e48fa1f3c76fe8bab6", + "index": "100644 1f6efeb32a6eb8fcbc52f4d3b591e2fc6b9e006d 0\tworkplans/KEY-WP-0021-snapshot-attribute-validation.md" + }, + "workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md": { + "sha256": "sha256:8c135e84be81de31b4949f52ac28dccd404f2e4c3eaa576d733bd50160427a53", + "index": "100644 7c69629ecd20d0158aa1332d9d1442b796f6a7af 0\tworkplans/KEY-WP-0022-replacement-harness-and-external-conformance.md" + }, + "workplans/KEY-WP-0023-live-migration-proof.md": { + "sha256": "sha256:e581cd11f3905805b5e8ba8e2ede85092577c7d086e1761f2a2d033fdead4e47", + "index": "100644 3e7c83cb12e7fc31e682cf3c27f4c4767ded2905 0\tworkplans/KEY-WP-0023-live-migration-proof.md" + }, + "workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md": { + "sha256": "sha256:af7842fa97263bfd46a4b5ae84c5c1ecddb06ab9623586e0292dcc93099fea35", + "index": "100644 baa0bbd195a92708f2befd027b938fcd1812ced7 0\tworkplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md" + }, + "workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md": { + "sha256": "sha256:0addb34e6d85e376c6a5db7afba597b6f268afa98b86c8c60add9be174dd1b26", + "index": "100644 a53e646761178748e8c4b00dcde888698447a948 0\tworkplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md" + }, + "workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md": { + "sha256": "sha256:c1bc0de47511ae49102009a172c84d9d5d64e829a18c8d40564fe817935563b3", + "index": "100644 1f96a2ac3ac939c4e6e0f66172477cf73db04e51 0\tworkplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md" + }, + "workplans/KEY-WP-0027-rollout-readiness-and-live-state.md": { + "sha256": "sha256:f559eae61d433d451f80ea575254bb14a47f2485267b412e42d524b434bb1b59", + "index": "100644 57e01b2db033847cc786504b8795e37112d988a7 0\tworkplans/KEY-WP-0027-rollout-readiness-and-live-state.md" + }, + "workplans/KEY-WP-0028-browser-client-field-validation.md": { + "sha256": "sha256:fbd51422fa5e6449000e4520e6639f6135c7393165a5ae02b1e92892edba0480", + "index": "100644 46b0672fea90cd7cb672f7d119706c240474f8ca 0\tworkplans/KEY-WP-0028-browser-client-field-validation.md" + }, + "workplans/KEY-WP-0029-scope-reassessment.md": { + "sha256": "sha256:3241f3b94db9cad5e3770cf1fedc5c211288357e4f69b5ba9da57065094bdf0e", + "index": "100644 392f97750f6cb8b12868a6fd016c7d396b58477e 0\tworkplans/KEY-WP-0029-scope-reassessment.md" + }, + "workplans/KEY-WP-0030-tenant-precondition-guard.md": { + "sha256": "sha256:c94c3afc7fb4270dfc18f3fe8a32946c524e4a6ba2d02a3d8fda69c9b8441af0", + "index": "100644 0f74e0d5a037eec64b11b57c67b02057a3b0bfef 0\tworkplans/KEY-WP-0030-tenant-precondition-guard.md" + }, + "workplans/KEY-WP-0031-gate-house-tenant-ruling.md": { + "sha256": "sha256:0abb135367f0366aa071769c4bd76fdeb321d810ec75ad3b58d718734f78382b", + "index": "100644 d2ede9d494927976ccb9ba6a5aeaf1ed21c30837 0\tworkplans/KEY-WP-0031-gate-house-tenant-ruling.md" + }, + "workplans/KEY-WP-0032-principal-type-provenance-guard.md": { + "sha256": "sha256:6a5cd483a40b9477227b02156c42b3469094dac145b33727b336118898aa782a", + "index": "100644 a04f52f817a51efc1d0d0ecb99efacea8dc53a17 0\tworkplans/KEY-WP-0032-principal-type-provenance-guard.md" + }, + "workplans/KEY-WP-0033-vergabe-fresh-login.md": { + "sha256": "sha256:c01bb51cf2dcad06ea846040dddef09845041fa7271cd7015e5a34a49e60bb8f", + "index": "100644 5b478f953890339aec796c11a536af0ec3238789 0\tworkplans/KEY-WP-0033-vergabe-fresh-login.md" + }, + "workplans/KEY-WP-0034-account-recovery.md": { + "sha256": "sha256:7db9adcd418ccabfbce672aec283249a6e374212492f0349e8c47a568f130eda", + "index": "100644 eb58f99bc26e3c3ac33230dfe432c8b1fabe47ce 0\tworkplans/KEY-WP-0034-account-recovery.md" + }, + "workplans/KEY-WP-0035-optional-mfa.md": { + "sha256": "sha256:c60ea8d0c195686c0d2317f657aad2de27c9b9432d311627c0e1d06124cabb49", + "index": "100644 29eb711f656c91808e91f3981a9168c3a0ebc253 0\tworkplans/KEY-WP-0035-optional-mfa.md" + }, + "workplans/KEY-WP-0036-platform-factor-recovery.md": { + "sha256": "sha256:5ceb08fe5789b4f02550bb04fcaf8eeb25a43ac3f506dfc62d60a513bcd0013f", + "index": "100644 fd296bc05a6e565b0ef6e88a9ae3daa7c9f81786 0\tworkplans/KEY-WP-0036-platform-factor-recovery.md" + }, + "workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md": { + "sha256": "sha256:3a90a0c460fc439570820b96d1ddc3b7f8646c557ca3a8aa27c6d546bb1a845a", + "index": "100644 ad7fed77a27aa8487693ad6fcf342502f418427a 0\tworkplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md" + }, + "workplans/KEY-WP-0038-forgejo-oidc-client.md": { + "sha256": "sha256:dc8d88d462799e7e6e44da759a973d52e44102a271969a5daaa9d30ec015b064", + "index": "100644 8cd5bc66f7b0115eec7813d6eec994a1bb618668 0\tworkplans/KEY-WP-0038-forgejo-oidc-client.md" + }, + "workplans/KEY-WP-0039-openbao-negative-probe-tokens.md": { + "sha256": "sha256:517f9526d574ce3faafad18837e0039db8f3f7990eac3e34a1678cdd7307a9e1", + "index": "100644 4398517afe04e3b0723722af37b434fa8d2209ab 0\tworkplans/KEY-WP-0039-openbao-negative-probe-tokens.md" + }, + "workplans/KEY-WP-0040-mfa-attended-run-findings.md": { + "sha256": "sha256:98b23d8810bff047067169232213cb313ecc14ff79751224842723afe808fbd2", + "index": "100644 8e8730c8e7733b13d6a9f42689a9d8e407769e81 0\tworkplans/KEY-WP-0040-mfa-attended-run-findings.md" + }, + "workplans/KEY-WP-0041-sign-in-diagnosis-page.md": { + "sha256": "sha256:7e44f46acd6b3942c1852b49e0d64b205dfd7d9bb378aed5241b1bf22d7ce88a", + "index": "100644 56fd05819e3acd37b8e6cb468ec3d62307f1ae7a 0\tworkplans/KEY-WP-0041-sign-in-diagnosis-page.md" + } +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/.custodian-brief.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/.custodian-brief.md.worktree new file mode 100644 index 00000000..d3b36c3b --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/.custodian-brief.md.worktree @@ -0,0 +1,37 @@ + +# Custodian Brief — key-cape + +**Domain:** infotech +**Last synced:** 2026-10-17 02:16 UTC +**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* + +## Active Workstreams + +### Negative-check tokens for the secrets-engine OpenBao JWT role +Progress: 2/3 done | workplan_id: `09c3bddf-6058-5603-8488-cccdb7be4f86` + +**Open tasks:** +- ! T01 — Define the probe registrations `03da4c38` + *(wait: Ordered identity gate: Forgejo first SecurityCase registration/claims proof, then NetKingdom registry session and attended human/coding-agent custody; registration authorization already resolved.)* + +### Forgejo as a NetKingdom OIDC client, so the forge can close +Progress: 2/4 done | workplan_id: `098e3e2c-a138-560e-b2d3-3a15eb49d8a9` + +**Open tasks:** +- ! T01 — Define what Forgejo receives `ddcfb482` + *(wait: Registration runs as the first KnownSecurityCase of type oidc-browser-relying-party (NK-WP-0048-T06), not as a hand-built rollout.)* +- ! T02 — Register the client and hand over its secret `40ddaa29` + *(wait: Claims are verified against the registered client.)* + +## Inbox Hygiene + +**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start. +**Missing thread_id:** 2 unread message(s) lack supersession chains. + +--- +## MCP Orientation (when available) + +If the state-hub MCP server is reachable, call: +`get_domain_summary("infotech")` +This provides richer cross-domain context. +If the MCP call fails, use this file as your orientation source. diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..d86b29bb --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,224 @@ +# Work Records — key-cape + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | ADHOC-2026-09-05 | finished | — | workplans/ADHOC-2026-09-05.md | +| workplan | ADHOC-2026-09-07 | finished | — | workplans/ADHOC-2026-09-07.md | +| workplan | ADHOC-2026-09-27 | finished | — | workplans/ADHOC-2026-09-27.md | +| workplan | KEY-WP-0001 | finished | — | workplans/KEY-WP-0001-keycape-implementation.md | +| workplan | KEY-WP-0002 | finished | — | workplans/KEY-WP-0002-container-image-gitea.md | +| workplan | KEY-WP-0003 | finished | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| workplan | KEY-WP-0004 | finished | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| workplan | KEY-WP-0005 | finished | — | workplans/KEY-WP-0005-iam-profile-core-claims.md | +| workplan | KEY-WP-0006 | finished | — | workplans/KEY-WP-0006-client-credentials-service-tokens.md | +| workplan | KEY-WP-0007 | finished | — | workplans/KEY-WP-0007-user-engine-portal-oidc-client.md | +| workplan | KEY-WP-0008 | finished | — | workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md | +| workplan | KEY-WP-0009 | finished | — | workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md | +| workplan | KEY-WP-0010 | finished | — | workplans/KEY-WP-0010-openbao-operator-loopback-callback.md | +| workplan | KEY-WP-0011 | finished | — | workplans/KEY-WP-0011-live-secret-exposure-recovery.md | +| workplan | KEY-WP-0012 | finished | — | workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md | +| workplan | KEY-WP-0013 | finished | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| workplan | KEY-WP-0014 | finished | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md | +| workplan | KEY-WP-0015 | finished | — | workplans/KEY-WP-0015-scope-intent-assessment.md | +| workplan | KEY-WP-0016 | finished | — | workplans/KEY-WP-0016-authorization-code-protocol-hardening.md | +| workplan | KEY-WP-0017 | finished | — | workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md | +| workplan | KEY-WP-0018 | finished | — | workplans/KEY-WP-0018-export-completeness-evidence.md | +| workplan | KEY-WP-0019 | finished | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md | +| workplan | KEY-WP-0020 | finished | — | workplans/KEY-WP-0020-migration-contract-preservation.md | +| workplan | KEY-WP-0021 | finished | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md | +| workplan | KEY-WP-0022 | finished | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md | +| workplan | KEY-WP-0023 | finished | — | workplans/KEY-WP-0023-live-migration-proof.md | +| workplan | KEY-WP-0024 | finished | — | workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md | +| workplan | KEY-WP-0025 | finished | — | workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md | +| workplan | KEY-WP-0026 | finished | — | workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md | +| workplan | KEY-WP-0027 | finished | — | workplans/KEY-WP-0027-rollout-readiness-and-live-state.md | +| workplan | KEY-WP-0028 | finished | — | workplans/KEY-WP-0028-browser-client-field-validation.md | +| workplan | KEY-WP-0029 | finished | — | workplans/KEY-WP-0029-scope-reassessment.md | +| workplan | KEY-WP-0030 | finished | — | workplans/KEY-WP-0030-tenant-precondition-guard.md | +| workplan | KEY-WP-0031 | finished | — | workplans/KEY-WP-0031-gate-house-tenant-ruling.md | +| workplan | KEY-WP-0032 | finished | — | workplans/KEY-WP-0032-principal-type-provenance-guard.md | +| workplan | KEY-WP-0033 | finished | — | workplans/KEY-WP-0033-vergabe-fresh-login.md | +| workplan | KEY-WP-0034 | finished | — | workplans/KEY-WP-0034-account-recovery.md | +| workplan | KEY-WP-0035 | finished | — | workplans/KEY-WP-0035-optional-mfa.md | +| workplan | KEY-WP-0036 | finished | — | workplans/KEY-WP-0036-platform-factor-recovery.md | +| workplan | KEY-WP-0037 | finished | — | workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md | +| workplan | KEY-WP-0038 | active | — | workplans/KEY-WP-0038-forgejo-oidc-client.md | +| workplan | KEY-WP-0039 | active | — | workplans/KEY-WP-0039-openbao-negative-probe-tokens.md | +| workplan | KEY-WP-0040 | finished | — | workplans/KEY-WP-0040-mfa-attended-run-findings.md | +| workplan | KEY-WP-0041 | finished | — | workplans/KEY-WP-0041-sign-in-diagnosis-page.md | +| task | ADHOC-2026-09-05-T01 | done | — | workplans/ADHOC-2026-09-05.md | +| task | ADHOC-2026-09-07-T01 | done | — | workplans/ADHOC-2026-09-07.md | +| task | ADHOC-2026-09-27-T01 | done | — | workplans/ADHOC-2026-09-27.md | +| task | ADHOC-2026-09-27-T02 | done | — | workplans/ADHOC-2026-09-27.md | +| task | KEY-WP-0001-T01 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T02 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T03 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T04 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T05 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T06 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T07 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T08 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T09 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T10 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T11 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T12 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T13 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T14 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T15 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T16 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T17 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T18 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T19 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T20 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T21 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T22 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0001-T23 | done | — | workplans/KEY-WP-0001-keycape-implementation.md | +| task | KEY-WP-0002-T01 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T02 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T03 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T04 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T05 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0002-T06 | done | — | workplans/KEY-WP-0002-container-image-gitea.md | +| task | KEY-WP-0003-T01 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T02 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T03 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T04 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0003-T05 | done | — | workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md | +| task | KEY-WP-0004-T01 | done | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T02 | done | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T03 | done | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T04 | done | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T05 | done | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T06 | cancel | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0004-T07 | done | — | workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md | +| task | KEY-WP-0005-T01 | done | — | workplans/KEY-WP-0005-iam-profile-core-claims.md | +| task | KEY-WP-0005-T02 | done | — | workplans/KEY-WP-0005-iam-profile-core-claims.md | +| task | KEY-WP-0005-T03 | done | — | workplans/KEY-WP-0005-iam-profile-core-claims.md | +| task | KEY-WP-0006-T01 | done | — | workplans/KEY-WP-0006-client-credentials-service-tokens.md | +| task | KEY-WP-0006-T02 | done | — | workplans/KEY-WP-0006-client-credentials-service-tokens.md | +| task | KEY-WP-0006-T03 | done | — | workplans/KEY-WP-0006-client-credentials-service-tokens.md | +| task | KEY-WP-0006-T04 | done | — | workplans/KEY-WP-0006-client-credentials-service-tokens.md | +| task | KEY-WP-0006-T05 | done | — | workplans/KEY-WP-0006-client-credentials-service-tokens.md | +| task | KEY-WP-0007-T01 | done | — | workplans/KEY-WP-0007-user-engine-portal-oidc-client.md | +| task | KEY-WP-0007-T02 | done | — | workplans/KEY-WP-0007-user-engine-portal-oidc-client.md | +| task | KEY-WP-0007-T03 | done | — | workplans/KEY-WP-0007-user-engine-portal-oidc-client.md | +| task | KEY-WP-0008-T01 | done | — | workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md | +| task | KEY-WP-0008-T02 | done | — | workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md | +| task | KEY-WP-0008-T03 | done | — | workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md | +| task | KEY-WP-0008-T04 | done | — | workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md | +| task | KEY-WP-0009-T01 | done | — | workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md | +| task | KEY-WP-0009-T02 | done | — | workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md | +| task | KEY-WP-0009-T03 | done | — | workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md | +| task | KEY-WP-0009-T04 | done | — | workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md | +| task | KEY-WP-0010-T01 | done | — | workplans/KEY-WP-0010-openbao-operator-loopback-callback.md | +| task | KEY-WP-0011-T01 | done | — | workplans/KEY-WP-0011-live-secret-exposure-recovery.md | +| task | KEY-WP-0011-T02 | done | — | workplans/KEY-WP-0011-live-secret-exposure-recovery.md | +| task | KEY-WP-0011-T03 | done | — | workplans/KEY-WP-0011-live-secret-exposure-recovery.md | +| task | KEY-WP-0012-T01 | done | — | workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md | +| task | KEY-WP-0012-T02 | done | — | workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md | +| task | KEY-WP-0012-T03 | done | — | workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md | +| task | KEY-WP-0013-T01 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| task | KEY-WP-0013-T02 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| task | KEY-WP-0013-T03 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| task | KEY-WP-0013-T04 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| task | KEY-WP-0013-T05 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| task | KEY-WP-0013-T06 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| task | KEY-WP-0013-T07 | done | — | workplans/KEY-WP-0013-approval-engine-resource-audience.md | +| task | KEY-WP-0014-T01 | done | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md | +| task | KEY-WP-0014-T02 | done | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md | +| task | KEY-WP-0014-T03 | done | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md | +| task | KEY-WP-0014-T04 | done | — | workplans/KEY-WP-0014-native-credential-lane-handoff.md | +| task | KEY-WP-0015-T01 | done | — | workplans/KEY-WP-0015-scope-intent-assessment.md | +| task | KEY-WP-0016-T01 | done | — | workplans/KEY-WP-0016-authorization-code-protocol-hardening.md | +| task | KEY-WP-0016-T02 | done | — | workplans/KEY-WP-0016-authorization-code-protocol-hardening.md | +| task | KEY-WP-0016-T03 | done | — | workplans/KEY-WP-0016-authorization-code-protocol-hardening.md | +| task | KEY-WP-0016-T04 | done | — | workplans/KEY-WP-0016-authorization-code-protocol-hardening.md | +| task | KEY-WP-0017-T01 | done | — | workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md | +| task | KEY-WP-0017-T02 | done | — | workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md | +| task | KEY-WP-0017-T03 | done | — | workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md | +| task | KEY-WP-0017-T04 | done | — | workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md | +| task | KEY-WP-0018-T01 | done | — | workplans/KEY-WP-0018-export-completeness-evidence.md | +| task | KEY-WP-0018-T02 | done | — | workplans/KEY-WP-0018-export-completeness-evidence.md | +| task | KEY-WP-0018-T03 | done | — | workplans/KEY-WP-0018-export-completeness-evidence.md | +| task | KEY-WP-0019-T01 | done | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md | +| task | KEY-WP-0019-T02 | done | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md | +| task | KEY-WP-0019-T03 | done | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md | +| task | KEY-WP-0019-T04 | done | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md | +| task | KEY-WP-0019-T05 | done | — | workplans/KEY-WP-0019-upstream-provider-token-verification.md | +| task | KEY-WP-0020-T01 | done | — | workplans/KEY-WP-0020-migration-contract-preservation.md | +| task | KEY-WP-0020-T02 | done | — | workplans/KEY-WP-0020-migration-contract-preservation.md | +| task | KEY-WP-0020-T03 | done | — | workplans/KEY-WP-0020-migration-contract-preservation.md | +| task | KEY-WP-0021-T01 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md | +| task | KEY-WP-0021-T02 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md | +| task | KEY-WP-0021-T03 | done | — | workplans/KEY-WP-0021-snapshot-attribute-validation.md | +| task | KEY-WP-0022-T01 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md | +| task | KEY-WP-0022-T02 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md | +| task | KEY-WP-0022-T03 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md | +| task | KEY-WP-0022-T04 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md | +| task | KEY-WP-0022-T05 | done | — | workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md | +| task | KEY-WP-0023-T01 | done | — | workplans/KEY-WP-0023-live-migration-proof.md | +| task | KEY-WP-0023-T02 | done | — | workplans/KEY-WP-0023-live-migration-proof.md | +| task | KEY-WP-0023-T03 | done | — | workplans/KEY-WP-0023-live-migration-proof.md | +| task | KEY-WP-0023-T04 | done | — | workplans/KEY-WP-0023-live-migration-proof.md | +| task | KEY-WP-0023-T05 | done | — | workplans/KEY-WP-0023-live-migration-proof.md | +| task | KEY-WP-0024-T01 | done | — | workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md | +| task | KEY-WP-0024-T02 | done | — | workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md | +| task | KEY-WP-0025-T01 | done | — | workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md | +| task | KEY-WP-0025-T02 | done | — | workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md | +| task | KEY-WP-0025-T03 | done | — | workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md | +| task | KEY-WP-0025-T04 | done | — | workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md | +| task | KEY-WP-0026-T01 | done | — | workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md | +| task | KEY-WP-0026-T02 | done | — | workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md | +| task | KEY-WP-0026-T03 | done | — | workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md | +| task | KEY-WP-0026-T04 | done | — | workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md | +| task | KEY-WP-0026-T05 | done | — | workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md | +| task | KEY-WP-0026-T06 | done | — | workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md | +| task | KEY-WP-0027-T01 | done | — | workplans/KEY-WP-0027-rollout-readiness-and-live-state.md | +| task | KEY-WP-0027-T02 | done | — | workplans/KEY-WP-0027-rollout-readiness-and-live-state.md | +| task | KEY-WP-0027-T03 | done | — | workplans/KEY-WP-0027-rollout-readiness-and-live-state.md | +| task | KEY-WP-0027-T04 | done | — | workplans/KEY-WP-0027-rollout-readiness-and-live-state.md | +| task | KEY-WP-0028-T01 | done | — | workplans/KEY-WP-0028-browser-client-field-validation.md | +| task | KEY-WP-0028-T02 | done | — | workplans/KEY-WP-0028-browser-client-field-validation.md | +| task | KEY-WP-0029-T01 | done | — | workplans/KEY-WP-0029-scope-reassessment.md | +| task | KEY-WP-0029-T02 | done | — | workplans/KEY-WP-0029-scope-reassessment.md | +| task | KEY-WP-0029-T03 | done | — | workplans/KEY-WP-0029-scope-reassessment.md | +| task | KEY-WP-0030-T01 | done | — | workplans/KEY-WP-0030-tenant-precondition-guard.md | +| task | KEY-WP-0030-T02 | done | — | workplans/KEY-WP-0030-tenant-precondition-guard.md | +| task | KEY-WP-0031-T01 | done | — | workplans/KEY-WP-0031-gate-house-tenant-ruling.md | +| task | KEY-WP-0031-T02 | done | — | workplans/KEY-WP-0031-gate-house-tenant-ruling.md | +| task | KEY-WP-0032-T01 | done | — | workplans/KEY-WP-0032-principal-type-provenance-guard.md | +| task | KEY-WP-0032-T02 | done | — | workplans/KEY-WP-0032-principal-type-provenance-guard.md | +| task | KEY-WP-0033-T01 | done | — | workplans/KEY-WP-0033-vergabe-fresh-login.md | +| task | KEY-WP-0033-T02 | done | — | workplans/KEY-WP-0033-vergabe-fresh-login.md | +| task | KEY-WP-0034-T01 | done | — | workplans/KEY-WP-0034-account-recovery.md | +| task | KEY-WP-0034-T02 | done | — | workplans/KEY-WP-0034-account-recovery.md | +| task | KEY-WP-0035-T01 | done | — | workplans/KEY-WP-0035-optional-mfa.md | +| task | KEY-WP-0035-T02 | done | — | workplans/KEY-WP-0035-optional-mfa.md | +| task | KEY-WP-0035-T03 | done | — | workplans/KEY-WP-0035-optional-mfa.md | +| task | KEY-WP-0035-T04 | done | — | workplans/KEY-WP-0035-optional-mfa.md | +| task | KEY-WP-0035-T05 | done | — | workplans/KEY-WP-0035-optional-mfa.md | +| task | KEY-WP-0036-T01 | done | — | workplans/KEY-WP-0036-platform-factor-recovery.md | +| task | KEY-WP-0036-T02 | cancel | — | workplans/KEY-WP-0036-platform-factor-recovery.md | +| task | KEY-WP-0036-T03 | done | — | workplans/KEY-WP-0036-platform-factor-recovery.md | +| task | KEY-WP-0037-T01 | done | — | workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md | +| task | KEY-WP-0037-T02 | done | — | workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md | +| task | KEY-WP-0037-T03 | done | — | workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md | +| task | KEY-WP-0037-T04 | done | — | workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md | +| task | KEY-WP-0038-T01 | done | — | workplans/KEY-WP-0038-forgejo-oidc-client.md | +| task | KEY-WP-0038-T02 | wait | — | workplans/KEY-WP-0038-forgejo-oidc-client.md | +| task | KEY-WP-0038-T03 | wait | — | workplans/KEY-WP-0038-forgejo-oidc-client.md | +| task | KEY-WP-0038-T04 | cancel | — | workplans/KEY-WP-0038-forgejo-oidc-client.md | +| task | KEY-WP-0039-T01 | done | — | workplans/KEY-WP-0039-openbao-negative-probe-tokens.md | +| task | KEY-WP-0039-T02 | wait | — | workplans/KEY-WP-0039-openbao-negative-probe-tokens.md | +| task | KEY-WP-0039-T03 | done | — | workplans/KEY-WP-0039-openbao-negative-probe-tokens.md | +| task | KEY-WP-0040-T01 | done | — | workplans/KEY-WP-0040-mfa-attended-run-findings.md | +| task | KEY-WP-0040-T02 | done | — | workplans/KEY-WP-0040-mfa-attended-run-findings.md | +| task | KEY-WP-0041-T01 | done | — | workplans/KEY-WP-0041-sign-in-diagnosis-page.md | +| task | KEY-WP-0041-T02 | done | — | workplans/KEY-WP-0041-sign-in-diagnosis-page.md | +| intake | KEY-IN-0001 | closed | — | intakes/intakes.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/originals.json new file mode 100644 index 00000000..0e7e20f1 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 d3b36c3bffbeb922769a2a788e35b4113fccaa3f 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 d86b29bbc480acfa6d12d5052039578d7d4e380c 0\tWORK-RECORDS.md" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-commit.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-commit.json new file mode 100644 index 00000000..ec2d3793 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-commit.json @@ -0,0 +1,33 @@ +{ + "exit_code": 0, + "commit": "e2c5a947829568baf837543a6708fd0c3f6a863b", + "base": "08c083bae9ff35fbaf028c36d72a95b57d2541b7", + "files": [ + { + "path": "docs/current-token-client.md", + "sha256": "68a67cd465185513ce1c5cc3110c7bbada2fc85f2e2df2e09f64049c40ee9966" + }, + { + "path": "docs/online-token-status.md", + "sha256": "123e3de853782aeb78a0c7b385f884955fc804f4fb7183d40706b34193a43396" + }, + { + "path": "src/internal/authclient/forgejo_current_fixture_test.go", + "sha256": "5456d007ad2a3288e871a8d1ebbc6d533ee374bd3c76d5df3829b893b814bf32" + }, + { + "path": "src/internal/server/oidc/token.go", + "sha256": "e6905bfa0474dde6122a83a6627d6b75a4c3a7730fb26106546e7a34eef8302b" + }, + { + "path": "src/internal/server/oidc/token_pair_test.go", + "sha256": "efeb929becf61d62111286ead4d3635c1a59bfd34423280084ccfec2169a2b1d" + }, + { + "path": "workplans/KEY-WP-0042-online-access-token-status.md", + "sha256": "ae722ff4fbd8e701c3280d31584ee207f51da7e3f719986e6ce2a052c00f93a3" + } + ], + "stdout": "[main e2c5a94] Bind online human ID tokens to the exact current access grant\n 6 files changed, 270 insertions(+), 6 deletions(-)\n create mode 100644 src/internal/authclient/forgejo_current_fixture_test.go\n create mode 100644 src/internal/server/oidc/token_pair_test.go\n", + "stderr": "{\"blocked_blob_ids\": [], \"scanned_blobs\": 6, \"scanner_sha256\": \"88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509\", \"scanner_version\": \"8.30.1\", \"scope\": \"changed-staged-blobs\", \"status\": \"clean\"}\n" +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-inputs.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-inputs.json new file mode 100644 index 00000000..456875ff --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/key-cape-publication/publication-inputs.json @@ -0,0 +1,31 @@ +{ + "owner": "key-cape", + "base_revision": "08c083bae9ff35fbaf028c36d72a95b57d2541b7", + "message": "Bind online human ID tokens to the exact current access grant", + "files": [ + { + "path": "docs/current-token-client.md", + "sha256": "68a67cd465185513ce1c5cc3110c7bbada2fc85f2e2df2e09f64049c40ee9966" + }, + { + "path": "docs/online-token-status.md", + "sha256": "123e3de853782aeb78a0c7b385f884955fc804f4fb7183d40706b34193a43396" + }, + { + "path": "src/internal/authclient/forgejo_current_fixture_test.go", + "sha256": "5456d007ad2a3288e871a8d1ebbc6d533ee374bd3c76d5df3829b893b814bf32" + }, + { + "path": "src/internal/server/oidc/token.go", + "sha256": "e6905bfa0474dde6122a83a6627d6b75a4c3a7730fb26106546e7a34eef8302b" + }, + { + "path": "src/internal/server/oidc/token_pair_test.go", + "sha256": "efeb929becf61d62111286ead4d3635c1a59bfd34423280084ccfec2169a2b1d" + }, + { + "path": "workplans/KEY-WP-0042-online-access-token-status.md", + "sha256": "ae722ff4fbd8e701c3280d31584ee207f51da7e3f719986e6ce2a052c00f93a3" + } + ] +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.json new file mode 100644 index 00000000..86df6691 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.json @@ -0,0 +1,393 @@ +{ + "repo_slug": "railiance-apps", + "repo_path": "/home/worsch/railiance-apps", + "source_revision": "ab3cf5cdc56d085d040256e2e84633b0289ab0af", + "source_revision_reason": null, + "issues": [ + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager warning: .repo-classification.yaml: category is project but slug is not prj-*; not every category:project is a prj- repo", + "file_path": ".repo-classification.yaml", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager missing: README.md: README.md is required for flavor project", + "file_path": "README.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager warning: workplans/: repository uses more than one workplan prefix: ['RAILIANCE-WP', 'RAPPS-WP']", + "file_path": "workplans/", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-1: task id 'RAILIANCE-WP-0004-I01' is not accepted by the canon kind registry", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-1", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-2: task id 'RAILIANCE-WP-0004-I02' is not accepted by the canon kind registry", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-2", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-3: task id 'RAILIANCE-WP-0004-I03' is not accepted by the canon kind registry", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-3", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-4: task id 'RAILIANCE-WP-0004-I04' is not accepted by the canon kind registry", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-4", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-5: task id 'RAILIANCE-WP-0004-I05' is not accepted by the canon kind registry", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-5", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-6: task id 'RAILIANCE-WP-0004-I06' is not accepted by the canon kind registry", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-6", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-7: task id 'RAILIANCE-WP-0004-I07' is not accepted by the canon kind registry", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-7", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-31", + "message": "[workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md] id 'RAILIANCE-WP-0004-I01' matches no kind in the canon work-record type registry \u2014 unregistered species become sidetracks needing manual reintegration (work-record-types_v0.1)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-31", + "message": "[workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md] id 'RAILIANCE-WP-0004-I02' matches no kind in the canon work-record type registry \u2014 unregistered species become sidetracks needing manual reintegration (work-record-types_v0.1)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-31", + "message": "[workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md] id 'RAILIANCE-WP-0004-I03' matches no kind in the canon work-record type registry \u2014 unregistered species become sidetracks needing manual reintegration (work-record-types_v0.1)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-31", + "message": "[workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md] id 'RAILIANCE-WP-0004-I04' matches no kind in the canon work-record type registry \u2014 unregistered species become sidetracks needing manual reintegration (work-record-types_v0.1)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-31", + "message": "[workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md] id 'RAILIANCE-WP-0004-I05' matches no kind in the canon work-record type registry \u2014 unregistered species become sidetracks needing manual reintegration (work-record-types_v0.1)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-31", + "message": "[workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md] id 'RAILIANCE-WP-0004-I06' matches no kind in the canon work-record type registry \u2014 unregistered species become sidetracks needing manual reintegration (work-record-types_v0.1)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-31", + "message": "[workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md] id 'RAILIANCE-WP-0004-I07' matches no kind in the canon work-record type registry \u2014 unregistered species become sidetracks needing manual reintegration (work-record-types_v0.1)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-33", + "message": "WORK-RECORDS.md is missing or stale \u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)", + "file_path": "WORK-RECORDS.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-39", + "message": "Wait task 'RAPPS-WP-0015-T04' in workplan 'RAPPS-WP-0015' has neither depends_on, needs_human: true, blocked_on: message-from:\u2026 nor wait_until \u2014 unqualified wait", + "file_path": "workplans/RAPPS-WP-0015-coulomb-personal-content-release.md#RAPPS-WP-0015-T04", + "db_id": "", + "file_value": "wait", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'KEY-WP-0038' is not linked to State Hub", + "file_path": "workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md", + "db_id": "", + "file_value": "KEY-WP-0038", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-39", + "message": "Human wait task 'RAPPS-WP-0016-T04' in workplan 'RAPPS-WP-0016' has needs_human: true without decision_id \u2014 unrouted human gate", + "file_path": "workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md#RAPPS-WP-0016-T04", + "db_id": "", + "file_value": "needs_human: true", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-22", + "message": "Task description drift 'RAPPS-WP-0016-T09': file content differs from DB (file wins)", + "file_path": "workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md#RAPPS-WP-0016-T09", + "db_id": "d3804638-c73d-5b9f-a456-4262f62f9e6b", + "file_value": "Use the producer-owned decision format/canonical bytes and independently admitted\nsigner/policy/request pins. Forgejo mu", + "db_value": "Use the producer-owned decision format/canonical bytes and independently admitted\nsigner/policy/request pins. Forgejo mu", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RPF-WP-0058' is not linked to State Hub", + "file_path": "workplans/RAPPS-WP-0017-reuse-private-reader-release.md", + "db_id": "", + "file_value": "RPF-WP-0058", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'REUSE-WP-0025' is not linked to State Hub", + "file_path": "workplans/RAPPS-WP-0017-reuse-private-reader-release.md", + "db_id": "", + "file_value": "REUSE-WP-0025", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0006@retired-20260826' (id=1960b22b\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "1960b22b-82ae-4b67-9fff-397bd38bdd65", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0005@retired-20260826' (id=685f1c18\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "685f1c18-33c0-400d-a2b1-e1dae0f27c3e", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0009@retired-20260826' (id=21c3fcdc\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "21c3fcdc-f014-4858-8028-0ac3038212b7", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0011@retired-20260826' (id=98cf42ae\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "98cf42ae-9b64-4736-97e1-bae325ded1f9", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0008@retired-20260826' (id=41b9deea\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "41b9deea-a935-4372-8916-b3981336f597", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0018@retired-20260826' (id=1b9af4e8\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "1b9af4e8-7579-5141-837b-c736b85204a0", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0007@retired-20260826' (id=7da18dd8\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "7da18dd8-76b9-4a70-b9d7-de541afc65c0", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Retired DB workstream 'railiance-wp-0010@retired-20260826' (id=a4f301bb\u2026, status=finished) has no backing workplan file \u2014 projection tombstone, not live work", + "file_path": "", + "db_id": "a4f301bb-3f49-450a-8dbd-5cf6a16b8e0f", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread inbox message(s) older than 3 day(s): the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread message(s) lack thread_id for supersession tracking: the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-26", + "message": "Workplan id 'RAIL-AP-WP-0001' uses prefix 'RAIL-AP-WP' but repo canonical prefix is 'RAPPS-WP' \u2014 new plans must conform", + "file_path": "workplans/archived/260605-RAIL-AP-WP-0001-gitea-container-registry.md", + "db_id": "", + "file_value": "RAIL-AP-WP-0001", + "db_value": "RAPPS-WP", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-26", + "message": "Workplan id 'RAILIANCE-WP-0002' uses prefix 'RAILIANCE-WP' but repo canonical prefix is 'RAPPS-WP' \u2014 new plans must conform", + "file_path": "workplans/archived/260702-railiance-apps-WP-0002-vergabe-teilnahme-on-railiance01.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0002", + "db_value": "RAPPS-WP", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-26", + "message": "Workplan id 'RAILIANCE-WP-0004' uses prefix 'RAILIANCE-WP' but repo canonical prefix is 'RAPPS-WP' \u2014 new plans must conform", + "file_path": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0004", + "db_value": "RAPPS-WP", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 20/20", + "C-17 cleared: pushed 2 backlogged commit(s)", + "C-33 fixed: regenerated WORK-RECORDS.md", + "C-22 fixed: task d3804638\u2026 description updated", + "brief: .custodian-brief.md updated", + "push: pushed" + ], + "summary": { + "fail": 0, + "automation_error": 0, + "warn": 29, + "info": 8 + }, + "result": "warn" +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.stderr.txt new file mode 100644 index 00000000..3345563f --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/consistency.stderr.txt @@ -0,0 +1 @@ +WARN: git commit failed for writeback: Generated-only commits rejected: staged diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/projection.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/projection.json new file mode 100644 index 00000000..59c799a2 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/projection.json @@ -0,0 +1,172 @@ +{ + "ok": true, + "status": "applied", + "repo_slug": "railiance-apps", + "commit": "ab3cf5cdc56d085d040256e2e84633b0289ab0af", + "requests": 2, + "elapsed_ms": 2017.7, + "git": { + "upstream": "origin/main", + "behind": 0, + "ahead": 0 + }, + "identifiers": { + "schema": "repo-manager.identifier-assignment.v1", + "ok": true, + "executed": true, + "repo": "railiance-apps", + "namespace": "helixforge", + "assignments": [], + "historical_invalid_identifiers": [ + { + "kind": "task", + "id": "RAILIANCE-WP-0004-I01", + "source": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-1" + }, + { + "kind": "task", + "id": "RAILIANCE-WP-0004-I02", + "source": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-2" + }, + { + "kind": "task", + "id": "RAILIANCE-WP-0004-I03", + "source": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-3" + }, + { + "kind": "task", + "id": "RAILIANCE-WP-0004-I04", + "source": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-4" + }, + { + "kind": "task", + "id": "RAILIANCE-WP-0004-I05", + "source": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-5" + }, + { + "kind": "task", + "id": "RAILIANCE-WP-0004-I06", + "source": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-6" + }, + { + "kind": "task", + "id": "RAILIANCE-WP-0004-I07", + "source": "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md#task-block-7" + } + ], + "historical_identity_collisions": [], + "files_changed": [] + }, + "receipt": { + "schema": "state-hub.repository-projection-reconcile.v1", + "instance_role": "primary", + "instance_label": "railiance01", + "expected_commit": "ab3cf5cdc56d085d040256e2e84633b0289ab0af", + "derived_commit": "ab3cf5cdc56d085d040256e2e84633b0289ab0af", + "outcome": { + "schema": "state-hub.projection-reset.v1", + "repo_slug": "railiance-apps", + "commit": "ab3cf5cdc56d085d040256e2e84633b0289ab0af", + "status": "applied", + "counts": { + "created": 0, + "updated": 20, + "retired": 0, + "refused": 0, + "released": 0, + "created_tasks": 0, + "updated_tasks": 0, + "cancelled_tasks": 0, + "created_edges": 0, + "removed_edges": 0, + "unresolved_edges": 0, + "external_edges": 5 + }, + "created": [], + "updated": [ + "RAIL-AP-WP-0001", + "RAILIANCE-WP-0002", + "RAILIANCE-WP-0004", + "RAPPS-WP-0001", + "RAPPS-WP-0002", + "RAPPS-WP-0003", + "RAPPS-WP-0004", + "RAPPS-WP-0005", + "RAPPS-WP-0006", + "RAPPS-WP-0007", + "RAPPS-WP-0008", + "RAPPS-WP-0009", + "RAPPS-WP-0010", + "RAPPS-WP-0011", + "RAPPS-WP-0012", + "RAPPS-WP-0013", + "RAPPS-WP-0014", + "RAPPS-WP-0015", + "RAPPS-WP-0016", + "RAPPS-WP-0017" + ], + "retired": [], + "released": [], + "created_tasks": [], + "updated_tasks": [], + "cancelled_tasks": [], + "created_edges": [], + "removed_edges": [], + "unresolved_edges": [], + "external_edges": [ + { + "workplan": "RAPPS-WP-0016", + "from": "RAPPS-WP-0016-T02", + "target": "RAPPS-WP-0016-T01", + "relationship_type": "starts_after", + "from_workplan_id": "f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b", + "from_task_id": "13cd3aec-c87d-5d3f-a421-39d8ff131edd", + "to_workplan_id": null, + "to_task_id": "98004ed0-83e6-5f6e-9b18-15b8b2aec2e7" + }, + { + "workplan": "RAPPS-WP-0016", + "from": "RAPPS-WP-0016-T02", + "target": "KEY-WP-0038-T02", + "relationship_type": "starts_after", + "from_workplan_id": "f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b", + "from_task_id": "13cd3aec-c87d-5d3f-a421-39d8ff131edd", + "to_workplan_id": null, + "to_task_id": "ddcfb482-8f33-5c81-9ce8-84be8fa5dc30" + }, + { + "workplan": "RAPPS-WP-0016", + "from": "RAPPS-WP-0016-T04", + "target": "RAPPS-WP-0016-T03", + "relationship_type": "starts_after", + "from_workplan_id": "f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b", + "from_task_id": "32c54737-c40f-5fde-9b91-163f8dcb0068", + "to_workplan_id": null, + "to_task_id": "81f072aa-c316-511e-a2cd-21dd1b1d0a00" + }, + { + "workplan": "RAPPS-WP-0016", + "from": "RAPPS-WP-0016-T05", + "target": "RAPPS-WP-0016-T02", + "relationship_type": "starts_after", + "from_workplan_id": "f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b", + "from_task_id": "728786c9-f1f9-5983-a6a4-dea21faf67f5", + "to_workplan_id": null, + "to_task_id": "13cd3aec-c87d-5d3f-a421-39d8ff131edd" + }, + { + "workplan": "RAPPS-WP-0016", + "from": "RAPPS-WP-0016-T03", + "target": "RAPPS-WP-0016-T02", + "relationship_type": "starts_after", + "from_workplan_id": "f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b", + "from_task_id": "81f072aa-c316-511e-a2cd-21dd1b1d0a00", + "to_workplan_id": null, + "to_task_id": "13cd3aec-c87d-5d3f-a421-39d8ff131edd" + } + ], + "refused": [], + "notes": [] + } + } +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/projection.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/projection.stderr.txt new file mode 100644 index 00000000..e69de29b diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/.custodian-brief.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/.custodian-brief.md.worktree new file mode 100644 index 00000000..1f9b6fae --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/.custodian-brief.md.worktree @@ -0,0 +1,47 @@ + +# Custodian Brief — railiance-apps + +**Domain:** financials +**Last synced:** 2026-10-17 10:13 UTC +**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* + +## Active Workstreams + +### Forgejo sign-in through NetKingdom, before the forge closes +Progress: 1/5 done | workplan_id: `f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b` + +**Open tasks:** +- ! T01 — Make the local administrator a sealed break-glass `13cd3aec` + *(wait: Break-glass done (T01); needs the NetKingdom client registered with its secret in custody (KEY-WP-0038-T02).)* +- ! T02 — Add the NetKingdom authentication source `81f072aa` + *(wait: Linking and team mapping follow a working authentication source.)* +- ! T03 — Link accounts and map groups to teams `32c54737` + *(wait: Restricting local password sign-in is a founder decision once NetKingdom sign-in is proven.)* +- ! T04 — Decide on local password sign-in `728786c9` + *(wait: Waits for net-kingdom's answer to the Apps 1.3 needs-change record (the-custodian docs/changes/netkingdom-target-2026-10-17/nk48-1.3-owner-review/owner-review-railiance-apps.json: RAPPS-1.3-C1..C3) and the re-frozen 1.3 candidate.)* + +### Coulomb-social persistent personal workspace release +Progress: 3/4 done | workplan_id: `79abacf8-361e-51ab-829d-40dec8e142d1` + +**Open tasks:** +- ! T04 — Personal sign-in and content acceptance `8bc4962a` + +### Deploy and recover the first invited Vergabe company pilot +Progress: 2/3 done | workplan_id: `c7fdaa7e-cab8-5d1d-86c2-f1aad7927c57` + +**Open tasks:** +- ! Demonstrate restart, isolated restore, rollback and operating ownership `dd069c6d` + *(wait: Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery point, isolated restored workflow, rollback evidence and support ownership. September 25 proves database restore and restart only.)* + +## Inbox Hygiene + +**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start. +**Missing thread_id:** 2 unread message(s) lack supersession chains. + +--- +## MCP Orientation (when available) + +If the state-hub MCP server is reachable, call: +`get_domain_summary("financials")` +This provides richer cross-domain context. +If the MCP call fails, use this file as your orientation source. diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..89c6d25c --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,48 @@ +# Work Records — railiance-apps + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | RAPPS-WP-0001 | finished | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| workplan | RAPPS-WP-0002 | finished | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| workplan | RAPPS-WP-0003 | finished | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| workplan | RAPPS-WP-0014 | blocked | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| workplan | RAPPS-WP-0015 | active | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| workplan | RAPPS-WP-0016 | active | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| workplan | RAPPS-WP-0017 | finished | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0001-T01 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T02 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T03 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T04 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T05 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0002-T01 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T02 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T03 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T04 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T05 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T06 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T07 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0003-T01 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T02 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T03 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T04 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0014-T01 | done | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0014-T02 | done | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0014-T03 | wait | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0015-T01 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T02 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T03 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T04 | wait | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0016-T01 | done | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T02 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T03 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T04 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T05 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0017-T01 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0017-T02 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0017-T03 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/originals.json new file mode 100644 index 00000000..415362e8 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 1f9b6fae4362945f96aa9a2a9647be9c83d8296a 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 89c6d25cfe29035a2e0ad71113c31b89338b0cc3 0\tWORK-RECORDS.md" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-commit.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-commit.json new file mode 100644 index 00000000..422dd5d8 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-commit.json @@ -0,0 +1,18 @@ +{ + "exit_code": 0, + "commit": "ab3cf5cdc56d085d040256e2e84633b0289ab0af", + "base": "a927ec8cc821a93688ca939e5a06eb0379f8d9c3", + "files": [ + { + "path": "build/forgejo/README.md", + "sha256": "bce802e2d57f699da4911a53b8a1e424bbc1bbd995eff4f1fd1011d1c6527f70" + }, + { + "path": "workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md", + "sha256": "3341dedc6b01d6b6755c55bafdd81a316d02369b209f7d760434d3bb15f70a4a" + } + ], + "verification": "normal direct git commit terminal exit 0; exact parent/two-file diff and preserved original metadata/index", + "source_commit_retained": "git:a927ec8cc821a93688ca939e5a06eb0379f8d9c3", + "runtime_changed": false +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-inputs.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-inputs.json new file mode 100644 index 00000000..48f344c0 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication-r2/publication-inputs.json @@ -0,0 +1,15 @@ +{ + "owner": "railiance-apps", + "base_revision": "a927ec8cc821a93688ca939e5a06eb0379f8d9c3", + "message": "Correct composed validation scope and retain the initial fixture skip", + "files": [ + { + "path": "build/forgejo/README.md", + "sha256": "bce802e2d57f699da4911a53b8a1e424bbc1bbd995eff4f1fd1011d1c6527f70" + }, + { + "path": "workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md", + "sha256": "3341dedc6b01d6b6755c55bafdd81a316d02369b209f7d760434d3bb15f70a4a" + } + ] +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/application.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/application.json new file mode 100644 index 00000000..2b60d593 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/application.json @@ -0,0 +1,7 @@ +{ + "owner": "railiance-apps", + "files": 4, + "existing_task_blocks_preserved": 9, + "unrelated_worktree_and_index_preserved": true, + "native_admission": false +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/protected.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/protected.json new file mode 100644 index 00000000..4292f9c0 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/protected.json @@ -0,0 +1,898 @@ +{ + ".claude/rules/agents.md": { + "sha256": "sha256:55ad7da95751de483e42e08d3ccae7d6b04daf8ad5f7457047eff06778b05fa5", + "index": "100644 0e8a5d95b6d263fbaeae4261a7051112fb27ee18 0\t.claude/rules/agents.md" + }, + ".claude/rules/architecture.md": { + "sha256": "sha256:21314c8ac9329a2ab6f554807a7fe131a7417923b7e9faf5782ad25c70a4ff93", + "index": "100644 7c2a64580a2fb55d6586e154ee70d801430faa3e 0\t.claude/rules/architecture.md" + }, + ".claude/rules/credential-routing.md": { + "sha256": "sha256:35cf3e7c5bd228db8ef266091f65f72c8dee99c415f6f80e341c757ad319abb7", + "index": "100644 092434f9ec3774d84f285aefe3fd9d26a3901824 0\t.claude/rules/credential-routing.md" + }, + ".claude/rules/first-session.md": { + "sha256": "sha256:5be8bb8e7d6157cc1f1c05e2e55d77f57d91699661cbbf95123dd1b140ebd7ec", + "index": "100644 3b87a8e50519e79be9471daf0aa4d62aa095b668 0\t.claude/rules/first-session.md" + }, + ".claude/rules/repo-boundary.md": { + "sha256": "sha256:ab65136889abfb3e458c12784a9999c0b748c5f8f9bd14511436ca5a55112b32", + "index": "100644 690d5e75d33a6cf61bc7ceef28db5455f4896aca 0\t.claude/rules/repo-boundary.md" + }, + ".claude/rules/repo-identity.md": { + "sha256": "sha256:61bec6280e429c99bccef1d3c6c531813416a2b88bc280cd376fb1ae6cbecfc6", + "index": "100644 2d60f8e93da7c517ddd78ca5f2df916a6778c792 0\t.claude/rules/repo-identity.md" + }, + ".claude/rules/session-protocol.md": { + "sha256": "sha256:4e76b45c8d918cb6913241b117b8e9f31065e2a945a7a1619927443a4457d738", + "index": "100644 72c3e2f1100ad72fee60f488fb171a03179a0c98 0\t.claude/rules/session-protocol.md" + }, + ".claude/rules/stack-and-commands.md": { + "sha256": "sha256:dbf298755c2b47b39d6283031262c439d6f85457d477b58c951009e438aa3a38", + "index": "100644 1166d781b388ffccfa7f5fa64d7f341b1e69f0d4 0\t.claude/rules/stack-and-commands.md" + }, + ".claude/rules/workplan-convention.md": { + "sha256": "sha256:1cb10caa2885386d39fbba33237b9895bbcd2c8d2119b971b48398a817286c4c", + "index": "100644 ee2a0c16131885f93420773399f7251ee66ca32e 0\t.claude/rules/workplan-convention.md" + }, + ".custodian-brief.md": { + "sha256": "sha256:07f96d4120b25a046a5a82a89d2d1d1c77cad380a80772a6fc0d024da2f0c4d4", + "index": "100644 1f9b6fae4362945f96aa9a2a9647be9c83d8296a 0\t.custodian-brief.md" + }, + ".forgejo/workflows/ci-smoke.yaml": { + "sha256": "sha256:c17729b2144648fa92871e1c94bcb6bd8f64a4b533577ede9457593758e2b7ab", + "index": "100644 bd44c56a4f8a6c12bdab40257e450c2a676f751a 0\t.forgejo/workflows/ci-smoke.yaml" + }, + ".gitea/workflows/inter-hub-production-deploy.yaml": { + "sha256": "sha256:b8d7a8c7de94d449a9d1846f5336f606dc72cc0d3c64136be0e7e5feb48d61b9", + "index": "100644 39edf9eb0ed43285875beb35630629f586724c77 0\t.gitea/workflows/inter-hub-production-deploy.yaml" + }, + ".gitea/workflows/manifest-server-dry-run.yaml": { + "sha256": "sha256:2b0f0a536c8aec797705b4d7329eb748734597d8593a697e628a5cae693fe3fa", + "index": "100644 f4d181ed7df17d0d029b305d2b35c286544044c0 0\t.gitea/workflows/manifest-server-dry-run.yaml" + }, + ".repo-classification.yaml": { + "sha256": "sha256:9813a6b720f33005c900e7a198a3e8f2eeda40faf636c2b28839ff59a63fef1f", + "index": "100644 34833e54fc69369cfeef8cbca71f2a416032d027 0\t.repo-classification.yaml" + }, + ".sops.yaml": { + "sha256": "sha256:f66ff36461fa4c28b3a29ca0b2901e9aab0c9875ad43b73abcf7e9a2d6948fa2", + "index": "100644 7713fd6f1dae12b847163f522e559b4d22eda553 0\t.sops.yaml" + }, + "AGENTS.md": { + "sha256": "sha256:2a366a5fbb69ba235df97ee117153cbfa1af11ab579372751b4fb5dbb30c31a7", + "index": "100644 fd7c5cf3f5a9d4ae8526c51504f046626d7f2fbf 0\tAGENTS.md" + }, + "CLAUDE.md": { + "sha256": "sha256:6dda7f4e0fe7add452171bc7d2b2945067fdf3dd42d374bf213ddd657376b6ce", + "index": "100644 9a9599303b24cfc19ab88e98c610972d19bab497 0\tCLAUDE.md" + }, + "INTENT.md": { + "sha256": "sha256:31060dc1738aa4540f78735019359a276ece39dad8afbf1be740713bebbe65e5", + "index": "100644 1e69361dd604498ff1c8b308a0e559b20d4b3fd3 0\tINTENT.md" + }, + "LICENSE": { + "sha256": "sha256:ff413f361a3b3bf44cf50f110fbcc4837064d57eefbcef89df2b43997c6262b6", + "index": "100644 7e08e28d5f32bdea3a9e1c828ae9f1e21d9edae7 0\tLICENSE" + }, + "Makefile": { + "sha256": "sha256:572d36e2dd3dee6321a5f6c4726f83991031672be5eb3480ae6173f8ce50ccdd", + "index": "100644 d08e729f1268c6a00f12b9d7b67d3e1871826842 0\tMakefile" + }, + "SCOPE.md": { + "sha256": "sha256:8243098d979d4258c9e7f9e39b5de24ce78b521cd82a7e199028df30bc130b14", + "index": "100644 e75d84c3cac91503c9885475c7bc2a391fde9086 0\tSCOPE.md" + }, + "STATE.md": { + "sha256": "sha256:071b00a8f3f016309455a1a000cbf5e78da7289bebc397ff8ae3c7b8036ae171", + "index": "100644 8b954df18070de4106cd3b5ba179d536267da9eb 0\tSTATE.md" + }, + "WORK-RECORDS.md": { + "sha256": "sha256:5a426a12d26721d4839461cf3c0285b198aafe332c3152d0744e06f0ed15e010", + "index": "100644 89c6d25cfe29035a2e0ad71113c31b89338b0cc3 0\tWORK-RECORDS.md" + }, + "bindings/policy-nexus-production-candidate.json": { + "sha256": "sha256:d6d34636e289949d1fd3debb5e2a002b9c9de485e1b462660f0818a7d1d73d22", + "index": "100644 13ec38478df5774bf6f7f21fddb9b220c42b42e2 0\tbindings/policy-nexus-production-candidate.json" + }, + "bindings/policy-nexus-production.json": { + "sha256": "sha256:65b8c1a339ed1e75cbf72d0f6ac474d72bad1be9c381ebbeea700c7a9455f33e", + "index": "100644 3fddec0d9d574c2a0e1b4474dbfdba51df8320b4 0\tbindings/policy-nexus-production.json" + }, + "build/forgejo/required-claim-values.patch": { + "sha256": "sha256:f2788b3f2bf84dbc0f94e232b6c9614a864b8123c09f9e44703d50d5e1b53257", + "index": "100644 90d5131e6e7a13eea38c7c9601c670df84340578 0\tbuild/forgejo/required-claim-values.patch" + }, + "build/forgejo/runtime-base-config.json": { + "sha256": "sha256:bc5a3df111729582faadebd01d126ba769e2b65d0c62f306f6bc79f4e562452b", + "index": "100644 e2ad4cd23ae733aa2267143f4857728f2205ea19 0\tbuild/forgejo/runtime-base-config.json" + }, + "charts/core-hub/Chart.yaml": { + "sha256": "sha256:5f1e497b515262040954463214e2c0fcc52e9107f5ba656383bb139874a7ed8e", + "index": "100644 c6414bb21bbc3d183a535cabcf73125fc05a6908 0\tcharts/core-hub/Chart.yaml" + }, + "charts/core-hub/templates/_helpers.tpl": { + "sha256": "sha256:5c0f8475e4f8ad4dbaa34aca027855d2113d9fa26decc25022c7515affeca730", + "index": "100644 470b039d8b9d88f39af0784d7ab40e3a3e0830eb 0\tcharts/core-hub/templates/_helpers.tpl" + }, + "charts/core-hub/templates/configmap.yaml": { + "sha256": "sha256:37137bcd8949f10b97544c74344cdb23d65535f560a760b4074f1e5321e493e9", + "index": "100644 af31cb394585cc4417188cbd33cac7430a1bb19a 0\tcharts/core-hub/templates/configmap.yaml" + }, + "charts/core-hub/templates/deployment.yaml": { + "sha256": "sha256:9ed11861887d8b21c445c3121f592449a47cf69a05b75ffd2288cde94a38a0a8", + "index": "100644 afcad8becce4d2e692a28e06189be4c61642f48e 0\tcharts/core-hub/templates/deployment.yaml" + }, + "charts/core-hub/templates/ingress.yaml": { + "sha256": "sha256:1372e6a512b93cf4a78952fd6edc968d28e9eda04b1cbe0bcaaa64b93839dfb5", + "index": "100644 9cc86ca01bb6d5e0f2a82499d8d9a977da2fc691 0\tcharts/core-hub/templates/ingress.yaml" + }, + "charts/core-hub/templates/migrate-job.yaml": { + "sha256": "sha256:d30a3dc8f41a552cf4dd3852129faa37beffb363179b636352e9ddead67889e4", + "index": "100644 77ccd419f23296a52570dfae3db64bfefa1915d8 0\tcharts/core-hub/templates/migrate-job.yaml" + }, + "charts/core-hub/templates/service.yaml": { + "sha256": "sha256:eb0da04cd9ab997f40cee7025b2d8fb57d97fa4b072f1f4c0068df11ee9f6f57", + "index": "100644 37bc8ed69c2c8db497259e6a27af38cc20bc12af 0\tcharts/core-hub/templates/service.yaml" + }, + "charts/core-hub/values.yaml": { + "sha256": "sha256:3a626396daa67f771e111d80617ee5c164d351e2aa3bb276440e1e43fb96d10e", + "index": "100644 fa47dd2099d2b057693b509cf961eaf74046e0bd 0\tcharts/core-hub/values.yaml" + }, + "charts/coulomb-social/Chart.yaml": { + "sha256": "sha256:663d6c23c57457a03bc376ebafb8107ee7f150e150f4d4fb6a3a949fb21006aa", + "index": "100644 13bf18f4062fee5758c67050eb7168099f704805 0\tcharts/coulomb-social/Chart.yaml" + }, + "charts/coulomb-social/templates/_helpers.tpl": { + "sha256": "sha256:65379818d484959e7221d3f538b59ffd6b8b7d3c9493250e47520576aee1fc68", + "index": "100644 1e8328751adf4e9a0ebf017c992c0e49c38d6418 0\tcharts/coulomb-social/templates/_helpers.tpl" + }, + "charts/coulomb-social/templates/content-pvc.yaml": { + "sha256": "sha256:5c4ddcaee2b3dcdf17da061b1a7a2cb1e0398d2f56f4ef31790cfaaf648b0fee", + "index": "100644 88120b3184f3d53aa29039fcbee4345698921fd3 0\tcharts/coulomb-social/templates/content-pvc.yaml" + }, + "charts/coulomb-social/templates/deployment.yaml": { + "sha256": "sha256:f90b7517959ec8785f578f917fec222287931e4f8a27f6f9e8fc0a28385f7df8", + "index": "100644 d9ad6f0677fc8074ef0142a3c3e555c9e12dcc2c 0\tcharts/coulomb-social/templates/deployment.yaml" + }, + "charts/coulomb-social/templates/service.yaml": { + "sha256": "sha256:78ce0ec6990c5ad57703c7a8d5d2c88c8eb9302d325cb2ba9d2df34e5f90ebdd", + "index": "100644 fcd783c6ecff1993f77debbddd76a7906c3b0211 0\tcharts/coulomb-social/templates/service.yaml" + }, + "charts/coulomb-social/values.yaml": { + "sha256": "sha256:af48d133f7fe45f0d762b40878f306ef48262f6cbbca61808ffac5dd9fc9d241", + "index": "100644 034e4351f4b9bdf5ef8d6e2d0a75a7f96b29e553 0\tcharts/coulomb-social/values.yaml" + }, + "charts/inter-hub/Chart.yaml": { + "sha256": "sha256:6e4965e269fb069df0fd8d6f2706edb7aadc6c7305dd3b96cca94c1e3887040d", + "index": "100644 23104d30f1c8e58f79cee7a4ba29c2f1d8e8fb9d 0\tcharts/inter-hub/Chart.yaml" + }, + "charts/inter-hub/templates/_helpers.tpl": { + "sha256": "sha256:b2825bc4a9ddd5e60a1c7c47577512a8d212fa7cb28b1c4c1d4bac2d54335410", + "index": "100644 f7fa4f1a5773f7f5086094b3f8abbcf67e2da5d0 0\tcharts/inter-hub/templates/_helpers.tpl" + }, + "charts/inter-hub/templates/deployment.yaml": { + "sha256": "sha256:752a63c26f7934f30eebfeda3bd13b844fb0ddc22576d9a4150f31bfad7947dc", + "index": "100644 0646509e1b650dfa168a6a71b5b04aaed8b4f70c 0\tcharts/inter-hub/templates/deployment.yaml" + }, + "charts/inter-hub/templates/ingress.yaml": { + "sha256": "sha256:1ea6d9bd9bf3221fbd4ea89d0f1ef4f4b06463fa6518505dcb1c5d898af714e2", + "index": "100644 959b42e6df4106b5d70ba4fe914dca9a48617e50 0\tcharts/inter-hub/templates/ingress.yaml" + }, + "charts/inter-hub/templates/service.yaml": { + "sha256": "sha256:13d7de5817d6e08771ff7c28fe83b83cad3643988e2763183c20840ec8fc2b3f", + "index": "100644 dd8eac4a01112933fbf94ffc8eba508f7100f102 0\tcharts/inter-hub/templates/service.yaml" + }, + "charts/inter-hub/values.yaml": { + "sha256": "sha256:dd890d78c9e24ef083c28b4b20a4e5aaae26997e227d457b05f3054122bba630", + "index": "100644 2af740e8d38223ce835e284f5c8e8e2d2cc86959 0\tcharts/inter-hub/values.yaml" + }, + "charts/reuse-surface/Chart.yaml": { + "sha256": "sha256:72e27cbc735061d806d038828de18b9ccfa5905f9dce6aeadcd3ab66cdea090f", + "index": "100644 f4b9e2d44bfef5619c4d79cd7cf040377f542e45 0\tcharts/reuse-surface/Chart.yaml" + }, + "charts/reuse-surface/templates/_helpers.tpl": { + "sha256": "sha256:789606a31ac8da6dfb7a5f6ace6a77269e3be3867d2e9a11e52b19aadf6977df", + "index": "100644 cdcae93585a722a5de7986f69d0746b9aa22e46f 0\tcharts/reuse-surface/templates/_helpers.tpl" + }, + "charts/reuse-surface/templates/deployment.yaml": { + "sha256": "sha256:2ec0be6d9aa24ed026b0c6629ab8ba003669eb0460d722fe413cd4934111540c", + "index": "100644 06b815d6538c14d2fd0e0d9bd224ccb9cd72dfa8 0\tcharts/reuse-surface/templates/deployment.yaml" + }, + "charts/reuse-surface/templates/ingress.yaml": { + "sha256": "sha256:4b3a4f96acf5ef99fa6bfa29c9bcd60785cfa2f0ed0d2eb266d5af6e8fdcf311", + "index": "100644 5e58f13aa06d59991da3036c4c9f5597daba554f 0\tcharts/reuse-surface/templates/ingress.yaml" + }, + "charts/reuse-surface/templates/landing-configmap.yaml": { + "sha256": "sha256:0263b9b7005216f32eca01d08946b8e1d5078d035a84d48d51bc663f7882ff99", + "index": "100644 84a7298660b4c3e928968120a08458a7e1495485 0\tcharts/reuse-surface/templates/landing-configmap.yaml" + }, + "charts/reuse-surface/templates/landing-deployment.yaml": { + "sha256": "sha256:1bfd0241977ed071f4097aa1716a69c6d54b6f5619e41565fe7bd242f4f4e177", + "index": "100644 a8bdb6fceb670900719353b251b95c679fa11b43 0\tcharts/reuse-surface/templates/landing-deployment.yaml" + }, + "charts/reuse-surface/templates/landing-ingress.yaml": { + "sha256": "sha256:3e3ede04606df3cdb9a5e1d426f641c872617822b5d93a762b6da51300ed1195", + "index": "100644 872860b9745db1a5e7c4a56ec89fe371039e6c73 0\tcharts/reuse-surface/templates/landing-ingress.yaml" + }, + "charts/reuse-surface/templates/landing-service.yaml": { + "sha256": "sha256:aae2047bb6bbaefc59e6424bcaee4bae89622ad209c796310486712b0814f32d", + "index": "100644 927e33153cfa901bee1462be1a3ca726da159a6f 0\tcharts/reuse-surface/templates/landing-service.yaml" + }, + "charts/reuse-surface/templates/pvc.yaml": { + "sha256": "sha256:c9db596f3f83e168ae37947a1f963fdd25e1f95b39cba1ad21d36fcf10d63469", + "index": "100644 bf4e1be94b857e2337829ee047559d3b3762f96a 0\tcharts/reuse-surface/templates/pvc.yaml" + }, + "charts/reuse-surface/templates/redirect-ingress.yaml": { + "sha256": "sha256:3255eb4552841d5a0c15b5831cf66b7d44991882aeafb0d85aa56ca3dbe27417", + "index": "100644 9aa05edd715c56a2a2d8d56a30ddf6346aca0d58 0\tcharts/reuse-surface/templates/redirect-ingress.yaml" + }, + "charts/reuse-surface/templates/redirect-middleware.yaml": { + "sha256": "sha256:16ce0733ed5a39eb9247ba360e804896ece97a71c08dfa786b22f6ed80219f9d", + "index": "100644 42bd2a7ded0be7688c1b9020b405836038df2f9d 0\tcharts/reuse-surface/templates/redirect-middleware.yaml" + }, + "charts/reuse-surface/templates/service.yaml": { + "sha256": "sha256:c34f8917954e9c393acf16be2e756895314fb31eced55f64fd8574371a09ef4e", + "index": "100644 906e3fbda3216cd68bb91bb16ed201960ea6a801 0\tcharts/reuse-surface/templates/service.yaml" + }, + "charts/reuse-surface/values.schema.json": { + "sha256": "sha256:ea73e027e4dcd832cc0bd48fc7ccfa29158153033ca02a8dc7b25b7df0d6c2b5", + "index": "100644 7367c10a588b0e311ab6f2afaea2fbcff8abb368 0\tcharts/reuse-surface/values.schema.json" + }, + "charts/reuse-surface/values.yaml": { + "sha256": "sha256:d1aeff71df0c53e4ecb3f4ebaac50ced7691b52c673fe9b49fbaeee6ca02c226", + "index": "100644 0e520d265ff8d5744dce43e9dd566ed79afda2c4 0\tcharts/reuse-surface/values.yaml" + }, + "charts/vergabe-teilnahme/Chart.yaml": { + "sha256": "sha256:06c80127814be1df677463d9bba7b9ec1c758191b02ef994c1925079323cb528", + "index": "100644 a198d8525c774ceca1a3c3697ecdba6550f7eaca 0\tcharts/vergabe-teilnahme/Chart.yaml" + }, + "charts/vergabe-teilnahme/templates/_helpers.tpl": { + "sha256": "sha256:50fcde44f2b5a4df35ee1683558be188cc49d717b05552276bfa9c81d663aedb", + "index": "100644 22b97744e22eeaaa0ed3dd5b2be0248ae16967b6 0\tcharts/vergabe-teilnahme/templates/_helpers.tpl" + }, + "charts/vergabe-teilnahme/templates/deployment.yaml": { + "sha256": "sha256:1b8f6120011945b0f3b40e28fa66776aa50f361d2b8776c171f2fef626351dc0", + "index": "100644 b9c6ea208d1ecd6fa8253f9a723fefac59ce76ef 0\tcharts/vergabe-teilnahme/templates/deployment.yaml" + }, + "charts/vergabe-teilnahme/templates/service.yaml": { + "sha256": "sha256:43f88db517ede189bc3aa2e20121a4df1ae29522b28f594c850f637781738f77", + "index": "100644 5797b476d151cb79505912a550d86a72103ccdf6 0\tcharts/vergabe-teilnahme/templates/service.yaml" + }, + "charts/vergabe-teilnahme/values.yaml": { + "sha256": "sha256:1c15618f609ae8ece6f7f0f124995da73211b500ec282b0d4c69a439efcfe809", + "index": "100644 aafa818adf38aded5903eab542d359f6cd970c10 0\tcharts/vergabe-teilnahme/values.yaml" + }, + "docs/app-data-backup-restore-handoff.md": { + "sha256": "sha256:1ccc0ca65b80b8f26fe47eab021402a3c66198ab1abb8047f3280fc2417aa4b8", + "index": "100644 2ad6bbc033b29e28fb9a34a8931da40eb6f66b75 0\tdocs/app-data-backup-restore-handoff.md" + }, + "docs/assessments/cust81-private-reader/apps-owner-review-r2.md": { + "sha256": "sha256:a3a2f2db6f0a8461a0d8299825c842c8ce427f59c86238884609d463837b3b75", + "index": "100644 a7f7b1b90b5cef0f796036b56c6b3a2e107ec23c 0\tdocs/assessments/cust81-private-reader/apps-owner-review-r2.md" + }, + "docs/assessments/cust81-private-reader/local-verification-r2.json": { + "sha256": "sha256:d723561845a05a76be9554596011c267fc67dd24953160f3bd7bd26a85c4812c", + "index": "100644 dbd136623f66c0e31b885c3e439c941b709e3679 0\tdocs/assessments/cust81-private-reader/local-verification-r2.json" + }, + "docs/assessments/cust81-private-reader/owner-review-receipt-r2.json": { + "sha256": "sha256:4f8db5c84e16c33ca3f228604f2ae6225fa2a5ffcd2dbcbd03201eb1302d7c8e", + "index": "100644 c81c89bf34a0b3059a95b46c36a684703790538c 0\tdocs/assessments/cust81-private-reader/owner-review-receipt-r2.json" + }, + "docs/assessments/cust81-private-reader/phase-a-local-image-r1/apps-owner-release-review.md": { + "sha256": "sha256:a74e96986798a727fc87c0d3c578601579778dfd8521796d0bb81df8451c751b", + "index": "100644 0079fe5f2307cd0f83d448d74625cd98bde68ca5 0\tdocs/assessments/cust81-private-reader/phase-a-local-image-r1/apps-owner-release-review.md" + }, + "docs/assessments/cust81-private-reader/phase-a-local-image-r1/manifest.json": { + "sha256": "sha256:dc80183e28b561309100bde0ef25a211695866ce90a7b6168873e6ba6c410aae", + "index": "100644 15cc47781d677279933b23ca540c29e78fdc5f0f 0\tdocs/assessments/cust81-private-reader/phase-a-local-image-r1/manifest.json" + }, + "docs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-full-chart.proposed.yaml": { + "sha256": "sha256:36c20c3e16757d3e888a3db02853032b33e791aa04a6055fe001121254345b81", + "index": "100644 4059c3ad4689add96852920d7b58fad50edadeee 0\tdocs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-full-chart.proposed.yaml" + }, + "docs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-preparation-receipt.json": { + "sha256": "sha256:3282a17ae3724619e40dd1f34846d83b2297d9ae00030618dbd269e8e2fd7d39", + "index": "100644 c58f4b43a254bc158dd966b8a767aee603cdd621 0\tdocs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-preparation-receipt.json" + }, + "docs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-supplement.patch": { + "sha256": "sha256:639e4a62a048d8af673fb3028a2b05096871ee38fa115fa5040432064e6de944", + "index": "100644 bdedf68baf8f355f258e114bdbe038f115b8630a 0\tdocs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-supplement.patch" + }, + "docs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-values.proposed.yaml": { + "sha256": "sha256:35284857ec987fc7a929f5c2eecdb44c7d3367f7835904692947de09918ab8f1", + "index": "100644 6e6f81e788e722a111902c54c570786492aa3006 0\tdocs/assessments/cust81-private-reader/phase-a-local-image-r1/phase-a-values.proposed.yaml" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/apps-owner-phase-b-review.md": { + "sha256": "sha256:496c842f4a284d6b2904c027dfd1e8aab85567f19fa74a228f27c4cc578ce026", + "index": "100644 bb0ae37b2b2a1b3890da16f031d92143f7287f60 0\tdocs/assessments/cust81-private-reader/phase-b-r1/apps-owner-phase-b-review.md" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/command-parser-check-r2.json": { + "sha256": "sha256:5080bdd2ece186200aec1a37b4450c99a50d435444f0f850277b82252516d6e1", + "index": "100644 54dfab453823bb8aaa71e93e301d0f7312af9646 0\tdocs/assessments/cust81-private-reader/phase-b-r1/command-parser-check-r2.json" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/eso-preflight-r1.json": { + "sha256": "sha256:e39f07427af80fd036e6eec21202efe194fff2db67b8523bb07052e1388d8fab", + "index": "100644 db58a9df80dcec3a15d35dcea63ae9bde26a7cd4 0\tdocs/assessments/cust81-private-reader/phase-b-r1/eso-preflight-r1.json" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/manifest.json": { + "sha256": "sha256:52ec35f1e150c1e2aca21bc138b523bf74423dd391e62daca8182d1b8924ed34", + "index": "100644 3cbd15d6017edd67f33fb34cd1b0def4dcf8f3fa 0\tdocs/assessments/cust81-private-reader/phase-b-r1/manifest.json" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/native-proof-wrapper-local-checks-r1.json": { + "sha256": "sha256:c5fcee128f7b4653ecfc0c455aab57a7efa8f6a9de382af69d447d8065091bab", + "index": "100644 43cd703ccab48386da7f379973bf1ce869ae0015 0\tdocs/assessments/cust81-private-reader/phase-b-r1/native-proof-wrapper-local-checks-r1.json" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/native_runtime_proof_stdin.py": { + "sha256": "sha256:1edc317e8563a120b62a6830eebb2875c144b45c57a491eb7da849095c5d1933", + "index": "100644 8b76d09e1f76daa1a62f393530590106f97f97cf 0\tdocs/assessments/cust81-private-reader/phase-b-r1/native_runtime_proof_stdin.py" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/phase-b-execution-proposal-r1.json": { + "sha256": "sha256:13f19158e09b0693a64ff400ecbc3e5ec09d28673731e87733d1e2fad9bd3222", + "index": "100644 34d390a4f3691cee77d533426a6eb9dff848cb9c 0\tdocs/assessments/cust81-private-reader/phase-b-r1/phase-b-execution-proposal-r1.json" + }, + "docs/assessments/cust81-private-reader/phase-b-r1/run_eso_preflight.py": { + "sha256": "sha256:fd42789518e9a6c1305fc3828bf1afb8c9a4e8238b4eeed30f7e7ec05656f09b", + "index": "100644 a1640b6362ffd66c8f865f1152b94d38dff50628 0\tdocs/assessments/cust81-private-reader/phase-b-r1/run_eso_preflight.py" + }, + "docs/assessments/cust81-private-reader/preparation-manifest-r2.json": { + "sha256": "sha256:324757f27a36090e34101adf9a68feb8f19530463303e53fec46abe2092943b8", + "index": "100644 e60e14cce09e797ae34e63ef1fdea7cb172891db 0\tdocs/assessments/cust81-private-reader/preparation-manifest-r2.json" + }, + "docs/assessments/cust81-private-reader/private-reader-values.r1.yaml": { + "sha256": "sha256:e02a319aca9c4860cdb8338009e60af6723bdb1fc17a591db0824273206eff83", + "index": "100644 70dc9325628fa5ac9833f1ac7d5f7cd1e0140bfe 0\tdocs/assessments/cust81-private-reader/private-reader-values.r1.yaml" + }, + "docs/assessments/cust81-private-reader/reuse-surface-runtime-externalsecret.r1.yaml": { + "sha256": "sha256:adfb34c0ee4d01bc602f57cd2320f1658465fb8f8660978828fffa05a5b604b5", + "index": "100644 3822799306fbf1f8bb752509c5cd8a951a2deed1 0\tdocs/assessments/cust81-private-reader/reuse-surface-runtime-externalsecret.r1.yaml" + }, + "docs/assessments/cust81-private-reader/runtime-auth-source-allowlist-r1.json": { + "sha256": "sha256:e1948c537e206b30fc72b9e4732a3f600d92e131813e6f7ecfd4bfbb18c27286", + "index": "100644 edb5f744a2febb4fcca882a09db0616a7a86b103 0\tdocs/assessments/cust81-private-reader/runtime-auth-source-allowlist-r1.json" + }, + "docs/assessments/cust81-private-reader/source-repair-owner-refinement-r3.json": { + "sha256": "sha256:8e21775bbddafdf2f658819449efd043b67f454f68bd3217009e95a1e36b6653", + "index": "100644 9198919c85f959ce651cbdcbb3f916961d402da6 0\tdocs/assessments/cust81-private-reader/source-repair-owner-refinement-r3.json" + }, + "docs/assessments/cust81-private-reader/supervision-preparation-r1.json": { + "sha256": "sha256:232f195026d704164b5973b5098002205445ff3ed6b0d2dd0c4a3c92c6ad9ca5", + "index": "100644 722694be444bb062d7bf22bf900b1bedf5b9309f 0\tdocs/assessments/cust81-private-reader/supervision-preparation-r1.json" + }, + "docs/assessments/cust81-private-reader/verify_preparation.py": { + "sha256": "sha256:c07921ea3fcd7c646aa6f28f34f7cdcb552e893341fe53dc7102ee376541d04d", + "index": "100644 df57199946e7beb489d9c70b0d6c5156d52c0339 0\tdocs/assessments/cust81-private-reader/verify_preparation.py" + }, + "docs/cnpg-backup-topology-inventory.md": { + "sha256": "sha256:d50389e460fe96ae86646122d7070276da33e1f3804af27f349a1311afb81fea", + "index": "100644 37f7bfd94b88aa622f687e08f9ffea0ba03c215d 0\tdocs/cnpg-backup-topology-inventory.md" + }, + "docs/core-hub-on-railiance01.md": { + "sha256": "sha256:0f1cf0725674d88ad1b271128118ae9fabd27a0d49bd7c3cd85e19f995a4378f", + "index": "100644 898afada634ef02f06d159a5ed09ea81cfd3a0c4 0\tdocs/core-hub-on-railiance01.md" + }, + "docs/coulomb-social.md": { + "sha256": "sha256:f457c2b61065967fb2e285b2715872badf60b04c877b8fc6fabed79c9cf3ab3c", + "index": "100644 3521af6c825d7da7d188f633db87e805fb485a4a 0\tdocs/coulomb-social.md" + }, + "docs/credential-routing-railiance-apps.md": { + "sha256": "sha256:61fbacc8a6389c77c16b81cd9b8e189e471d987f5e5f77e1a3b5aa1af18e0767", + "index": "100644 8fe4f40b30cb8a133b6e35bb69357c9d03b64ca1 0\tdocs/credential-routing-railiance-apps.md" + }, + "docs/django-on-railiance.md": { + "sha256": "sha256:ff531fd07d521d5edf791eaa547a333f9a68173a7e5ba6d3076592870520549d", + "index": "100644 8633f005cb0c2ccd0e5b5923b4e783ebe7f32f13 0\tdocs/django-on-railiance.md" + }, + "docs/evidence/2026-09-11-invited-pilot-release.json": { + "sha256": "sha256:f54b17a76c991ff728c141887b5611f3b1bab897fcfea01c5cc79e0d7e8c7cde", + "index": "100644 6e1657c375ed85672875863116c09c78e417c6e1 0\tdocs/evidence/2026-09-11-invited-pilot-release.json" + }, + "docs/evidence/2026-09-11-vergabe-pilot-60m.json": { + "sha256": "sha256:b134bd47873bc1ef78c74b11e5e78d28ec14208823ab36d134109855c877b194", + "index": "100644 41a49db5a4433ddabe4ab2f6591395e755773574 0\tdocs/evidence/2026-09-11-vergabe-pilot-60m.json" + }, + "docs/evidence/2026-09-11-vergabe-pilot-inventory.json": { + "sha256": "sha256:c0d4af0b33e834b9f9274afe46c79c98fc9dab062dcb2fe25d7564c1d27ebb66", + "index": "100644 10bdb04e1a7513d0e8b575e6339a38cf5b43a703 0\tdocs/evidence/2026-09-11-vergabe-pilot-inventory.json" + }, + "docs/evidence/2026-09-12-account-recovery-live.md": { + "sha256": "sha256:28a33eaac2796ab01a4176f03796a1063732623b0fd5b075cb338b426582b33e", + "index": "100644 b2564b1860d390e8254e631a1e570e77b8da1eab 0\tdocs/evidence/2026-09-12-account-recovery-live.md" + }, + "docs/evidence/2026-09-12-demo-company-deployment.md": { + "sha256": "sha256:74bde474146381859af09f89a47f3a6f623a507f08213c41a47129b9e5aa7a2d", + "index": "100644 096640a338bed52f5f234598f1fae110b217a42c 0\tdocs/evidence/2026-09-12-demo-company-deployment.md" + }, + "docs/evidence/2026-09-12-demo-company-sso-live.md": { + "sha256": "sha256:2c2da72f7341f4cac6400aa6bb179c5b7d5a8cd094092abb1cd6424c18346949", + "index": "100644 1ac81c1e092a0082545d636de9895315cf59a826 0\tdocs/evidence/2026-09-12-demo-company-sso-live.md" + }, + "docs/evidence/2026-09-25-vergabe-demo-company-restore.md": { + "sha256": "sha256:8b1e1a4805d8134598c4adb2d64d8c4d003d04ff9e2078b28e232d65713c7ca1", + "index": "100644 97ffa5cc90e23513e5ff170c355cfa6bb80a7107 0\tdocs/evidence/2026-09-25-vergabe-demo-company-restore.md" + }, + "docs/evidence/2026-09-27-vergabe-binding-review.md": { + "sha256": "sha256:710f5a6e57187cec6e41759e920f691700cafd76b5df3a7313c32f8fefc68c1c", + "index": "100644 2f8a1843583957dcfa283d30956a1e55381b1cb4 0\tdocs/evidence/2026-09-27-vergabe-binding-review.md" + }, + "docs/evidence/2026-10-11-forgejo-reference-migration-source-design-approval.json": { + "sha256": "sha256:e219574d931cbc3667bf928477c809f6259c4ee7814bf1afbe753dad3b39ecb9", + "index": "100644 575ac39ae6f6162bd3054808aa7481983ceb01b7 0\tdocs/evidence/2026-10-11-forgejo-reference-migration-source-design-approval.json" + }, + "docs/evidence/2026-10-17-forgejo-breakglass-signin.json": { + "sha256": "sha256:5563c4b4d4353b327bcb931c6ad878fb9135e2ef413b541c1e330616126ebfac", + "index": "100644 8a208f40bbe40572ac04ed62c3325f61106e36d0 0\tdocs/evidence/2026-10-17-forgejo-breakglass-signin.json" + }, + "docs/evidence/apps-pg-backup-lane-20260711.json": { + "sha256": "sha256:0b14915f1c654e487b5169593d116157a579ce1a47363a73d3a13937d99d397d", + "index": "100644 9901dcf5f59f6e8f8ea14d1b538951b9a1a69053 0\tdocs/evidence/apps-pg-backup-lane-20260711.json" + }, + "docs/evidence/apps-pg-restore-drill-20260711T230725Z.json": { + "sha256": "sha256:fa20aa614c4c2ef3da40d7b843697116d85059e2c6f15ac60672f8f2fe60096d", + "index": "100644 adcc0ef6c6955f450e3c10afe564bce0e934ad9e 0\tdocs/evidence/apps-pg-restore-drill-20260711T230725Z.json" + }, + "docs/evidence/apps-pg-restore-drill-20260722T155951Z.json": { + "sha256": "sha256:2dddd4fccf29c57353f036a3b24c632413ce3645de7460c142a3b58710a7dc16", + "index": "100644 e2ff601bce1305591d7392cc4a9bead7cc12c190 0\tdocs/evidence/apps-pg-restore-drill-20260722T155951Z.json" + }, + "docs/evidence/cnpg-option-a-backup-20260722.json": { + "sha256": "sha256:5391f400fd34b405b57635bb63d8f383a5cdccae9ddeb73fc47697367878edb7", + "index": "100644 7516dd8f707fc3b2a1ad3feac083f401fb65b0b9 0\tdocs/evidence/cnpg-option-a-backup-20260722.json" + }, + "docs/evidence/cnpg-option-a-unattended-20260722.json": { + "sha256": "sha256:5a97b3351780c9bca18e5d2381ee5a4f5c1445c88801613e7faddbad872d5a87", + "index": "100644 684d3058e26057ba41072f6ef50833ece0b3db34 0\tdocs/evidence/cnpg-option-a-unattended-20260722.json" + }, + "docs/evidence/nk48-t16-owner-review/owner-review-railiance-apps.json": { + "sha256": "sha256:67e9ded8d37462ba04a0a224bac03a840d0c94326235474e1d3371c8ff61865d", + "index": "100644 b1ae7546a935f62f30771bfe222b4bd95232a27f 0\tdocs/evidence/nk48-t16-owner-review/owner-review-railiance-apps.json" + }, + "docs/forge-source-of-truth-decision.md": { + "sha256": "sha256:934138c258c56a0211858a52c9db866d895810e27979c1b46a0627eaf9ca4f18", + "index": "100644 74bde4bb4dce547f2c96ae1824a15b3c24dc3a33 0\tdocs/forge-source-of-truth-decision.md" + }, + "docs/forgejo-on-railiance01.md": { + "sha256": "sha256:a71670f0241d4bb76ea457f2120a332d3a53ec3f3098859982fb0b283f97370e", + "index": "100644 aa5c7952067041aaf87939aa60515c66a7ddd5e8 0\tdocs/forgejo-on-railiance01.md" + }, + "docs/forgejo-package-registry.md": { + "sha256": "sha256:63d39672e9acd21825e9aa5205178d75973a48c1920122d159a760143fd2b502", + "index": "100644 99440adb89e7daf9293a2d3cf3c19d27b999e338 0\tdocs/forgejo-package-registry.md" + }, + "docs/informed-decision-origin.md": { + "sha256": "sha256:d76aa6ba8811fe72cd8fc53bac635c797fcc03dd11acc2d5452f4755d772ee90", + "index": "100644 6d62535099d46cd2e54a801f35318ced68543ba4 0\tdocs/informed-decision-origin.md" + }, + "docs/inter-hub-on-railiance01.md": { + "sha256": "sha256:c2125e768956d7085a705b98be25628ed70323949182905254e19820e4787e9c", + "index": "100644 482d96dffe5daa17db2b382309efb7d054e500fe 0\tdocs/inter-hub-on-railiance01.md" + }, + "docs/manifest-server-dry-run.md": { + "sha256": "sha256:6175af9ed51484f59f3b3c9397cb2c589f9d7ab31933163de1de2007845b23a6", + "index": "100644 6acdce223918c4c853ec4e3846fd7930fcf7befd 0\tdocs/manifest-server-dry-run.md" + }, + "docs/operator-recipes.md": { + "sha256": "sha256:d0c8c4b4ea0ea4d148153724e11e8396249d14609dc3095bdab3adec0132694e", + "index": "100644 842914dfe466879eb3666ad5311e5d7ec2062723 0\tdocs/operator-recipes.md" + }, + "docs/operator-setup.md": { + "sha256": "sha256:f903f9b493be1b30addc40e353176fb0a9b7aed6701a91f2f4ca70ac05b93a80", + "index": "100644 687e8bc218234a5264d23682808f218d29c8b58e 0\tdocs/operator-setup.md" + }, + "docs/policy-nexus-production.md": { + "sha256": "sha256:ac2e694e0b73e51b11f4123d79d19ec87baf6cbe76dffc0cedc8fc4ea9ab5b4b", + "index": "100644 e5deac734a4a4c647987549d7e599af8237b6701 0\tdocs/policy-nexus-production.md" + }, + "docs/proposals/2026-10-11-forgejo-consumer-eso/consumer-delivery.yaml": { + "sha256": "sha256:56478a83d799c08dc1e5159983b1e843a46b16dfeee7e84c31401d1f92430df2", + "index": "100644 01e2a9858fc4eaae73bfac23f2543bd5c94fc1d9 0\tdocs/proposals/2026-10-11-forgejo-consumer-eso/consumer-delivery.yaml" + }, + "docs/proposals/2026-10-11-forgejo-consumer-eso/native-metadata.json": { + "sha256": "sha256:4e2993f5920215f41e4a235743023f22b78b8f597d3d70ed279991b2fc3204b5", + "index": "100644 298d885d8216a03065e83f93b5d829b2f8e53542 0\tdocs/proposals/2026-10-11-forgejo-consumer-eso/native-metadata.json" + }, + "docs/proposals/2026-10-11-forgejo-consumer-eso/observe-native-metadata.py": { + "sha256": "sha256:3732aa0ff45b5197ac7837cbc5814f59ea3d694d4a157d19d00711f29da76913", + "index": "100644 eb1cd78e57f7a0671840ae3280e4dd04c1fa76c8 0\tdocs/proposals/2026-10-11-forgejo-consumer-eso/observe-native-metadata.py" + }, + "docs/proposals/2026-10-11-forgejo-consumer-eso/owner-design.md": { + "sha256": "sha256:c523949454e4c6eb58e8caee382380a561f561704136de62bf5783c592f962f2", + "index": "100644 a267302b568e38ca8721964e5d8a0c1e085701df 0\tdocs/proposals/2026-10-11-forgejo-consumer-eso/owner-design.md" + }, + "docs/proposals/2026-10-11-forgejo-consumer-eso/owner-source-pins.json": { + "sha256": "sha256:775971a60db57f7334f68b0916a27760e28f02c62f2c653e963237925a1c2711", + "index": "100644 d64136bcdd939ae9933fd9838421440c61c01692 0\tdocs/proposals/2026-10-11-forgejo-consumer-eso/owner-source-pins.json" + }, + "docs/proposals/2026-10-11-forgejo-consumer-eso/primary-source-provenance.json": { + "sha256": "sha256:c3d5ce5c6a5e89f19be5e293034c8d633183d19666fc61d837537527246d9a42", + "index": "100644 58952b4e9b5b06d4fe6fd808122d44cc49200c57 0\tdocs/proposals/2026-10-11-forgejo-consumer-eso/primary-source-provenance.json" + }, + "docs/proposals/2026-10-11-forgejo-consumer-eso/validation.json": { + "sha256": "sha256:95318f54942871a125a5200ec05d6f9dc80077918f26ebe671b9ab4d150b112d", + "index": "100644 156d4ed1958776aafdc0e26bb0550380db4a4025 0\tdocs/proposals/2026-10-11-forgejo-consumer-eso/validation.json" + }, + "docs/reuse-surface-on-railiance01.md": { + "sha256": "sha256:9665a0378ebf95107bf3aa6711a1a21c9a7b3cae7026fa81bdaf9cb9a18dba4e", + "index": "100644 8264dd0dab0a4b02c1659da47456f92d980ca7cb 0\tdocs/reuse-surface-on-railiance01.md" + }, + "docs/s5-app-onboarding-checklist.md": { + "sha256": "sha256:25508786bf7f41cf731ad65b46f2f509a3bfb3e919be6aa5de85b235bcc4c79c", + "index": "100644 eb054e55d0668e1e42204c0c8c9150cab683e9b6 0\tdocs/s5-app-onboarding-checklist.md" + }, + "docs/vergabe-demo-company-binding.md": { + "sha256": "sha256:c0f46fa20e6476cdc3540ba93e92b6c59542f7ea24b7bf897eccdc977974100e", + "index": "100644 a3f0027f5e20f5924e74a3f2bd7445dab6505b5a 0\tdocs/vergabe-demo-company-binding.md" + }, + "docs/vergabe-demo-company-sso-rollout.md": { + "sha256": "sha256:20d71f5c76a195a8c325af163d5634f96fff3663bd746c953e9cd93fb88387b0", + "index": "100644 4c90f12f4ce06728ecc871c133878a1cbd851fff 0\tdocs/vergabe-demo-company-sso-rollout.md" + }, + "docs/vergabe-teilnahme-pilot.md": { + "sha256": "sha256:470fddc153160a57612d79687a36061790f4d5d20ea25d8caa0f7ba861a1eb65", + "index": "100644 abe8632c90a36c9b3547c5612f35120fc66e5950 0\tdocs/vergabe-teilnahme-pilot.md" + }, + "docs/vergabe-teilnahme.md": { + "sha256": "sha256:4539b63bff652553fae22df15e0f89d9b8653cd0bb032649a9087dd66dd78224", + "index": "100644 d85e9fa4407d66737786aca5147a2a5aca7e76e2 0\tdocs/vergabe-teilnahme.md" + }, + "helm/core-hub-staging-values.yaml": { + "sha256": "sha256:f3fab6041cab1e5c50a96104b91491fd0594eb6565dd720ab754d856bb4ed4b1", + "index": "100644 12c6553af99814ac11cfa020f8dad475e6165af4 0\thelm/core-hub-staging-values.yaml" + }, + "helm/core-hub-values.yaml": { + "sha256": "sha256:b82bc1f8d0bfaed11a4728542fda791568645ae2916200dba047911ac9527ab2", + "index": "100644 e89aa307a2e8157497bc56d0d035e4e2202d23c7 0\thelm/core-hub-values.yaml" + }, + "helm/coulomb-social-values.yaml": { + "sha256": "sha256:2c2d084f32c77650533834b801eb5b8bb17649d21429720e626bebad7eecb2aa", + "index": "100644 f0a6ceab10ee383251999fba7deeadea235bf10b 0\thelm/coulomb-social-values.yaml" + }, + "helm/forgejo-registry-values.yaml": { + "sha256": "sha256:a38f551734843c6367448f267c7376b1aeee010927a49690fdd7c1471e0ae450", + "index": "100644 c4d27c1ad41223148d1612574ab21ec79e149980 0\thelm/forgejo-registry-values.yaml" + }, + "helm/forgejo-runner-registration.sops.yaml": { + "sha256": "sha256:2b88c14b5e113859dcda096b49dac3d2fce05a6bc6633fcc048fd3d79d1e7a63", + "index": "100644 89e80e8e805ff6508214aeabd9948816e9004bb8 0\thelm/forgejo-runner-registration.sops.yaml" + }, + "helm/forgejo-runner-registration.sops.yaml.template": { + "sha256": "sha256:c9adfe099b702c9882385f377e9a45ad4da7215e2603661b7514878a475f369f", + "index": "100644 261f1bcfc9884afc55cbc317c0078ad7be6fbd0c 0\thelm/forgejo-runner-registration.sops.yaml.template" + }, + "helm/forgejo-secrets.sops.yaml": { + "sha256": "sha256:0885559a5034b041b491fff468a536a7562204415313e7bd592395d0a2fe3bbb", + "index": "100644 3eb20b31b88504ac294633116d269e497bddd940 0\thelm/forgejo-secrets.sops.yaml" + }, + "helm/forgejo-secrets.sops.yaml.template": { + "sha256": "sha256:75560c2d40d01003a2ddccb2a31834a2bf0735c3ccbc2c6ff228303e19bcd1e3", + "index": "100644 e2c508b74a1d16ef22ee45729968e45d0e0ba220 0\thelm/forgejo-secrets.sops.yaml.template" + }, + "helm/forgejo-values.yaml": { + "sha256": "sha256:cf87a3dccd666bf8870619755afac4af64fc0bee77b0f0ea54718d6384b70d4f", + "index": "100644 8d3b8ee7558de09eb1e342c9a74ea2b3f979988c 0\thelm/forgejo-values.yaml" + }, + "helm/inter-hub-values.yaml": { + "sha256": "sha256:51af81ce90335cf76d6d50beffb8a98865dcac57dc9147cf341647ed5a03977f", + "index": "100644 160f6af4b45f8008db75555bdf305f4c8e26869e 0\thelm/inter-hub-values.yaml" + }, + "helm/reuse-surface-values.yaml": { + "sha256": "sha256:56c776b6f9c371c252f788058c16c678c47c5d1ef9e8666601897a22a91b272f", + "index": "100644 db6781c2e2155ab7065ef6f00e4602746e4f136f 0\thelm/reuse-surface-values.yaml" + }, + "helm/vergabe-demo-company-foundation.yaml": { + "sha256": "sha256:28069dcb471fa522bb301820ebcb77870b51a4a61170daa902f0e52ad4221dc2", + "index": "100644 c314dfd25a1b50e01f29d5aef30b1ec7696535af 0\thelm/vergabe-demo-company-foundation.yaml" + }, + "helm/vergabe-demo-company-ingress.yaml": { + "sha256": "sha256:81c802653237c7c40a33d23ad60815b6f7c1007e17ae3344d9b783c7d7ae3b92", + "index": "100644 f7e7d0aed2b1672a967bcce8927a939d6c8086d3 0\thelm/vergabe-demo-company-ingress.yaml" + }, + "helm/vergabe-demo-company-oidc-egress.proposed.yaml": { + "sha256": "sha256:a5170c7919cd4db4dbd4d4ac755c79f20dfc8a92bd6aabf73709af7e31af8001", + "index": "100644 57be83efe1e1ec6d662b4cc002fc4691e45b855e 0\thelm/vergabe-demo-company-oidc-egress.proposed.yaml" + }, + "helm/vergabe-demo-company-sso.proposed.yaml": { + "sha256": "sha256:e25b82d5fa67e6e4c55b215bdde7a231778f6ca01a30b1bdffdb6b362554e535", + "index": "100644 75a2e45eb2ae0a8599da85be8e7b1387aedc0374 0\thelm/vergabe-demo-company-sso.proposed.yaml" + }, + "helm/vergabe-demo-company-values.proposed.yaml": { + "sha256": "sha256:064778e81f5d9db84ebd2cdf625a891239a94fe88107186aca8032e927356eb6", + "index": "100644 6693145d1cec4d1f8c3182b731e4733a86ad0d28 0\thelm/vergabe-demo-company-values.proposed.yaml" + }, + "helm/vergabe-teilnahme-pilot-values.example.yaml": { + "sha256": "sha256:9e65f62c4463a19ec8c1a5196d950fc9139937dc090d9f69cc6fd223330c2f8b", + "index": "100644 0133ce0e5d458d6af023c3d3a2752e66472cc87b 0\thelm/vergabe-teilnahme-pilot-values.example.yaml" + }, + "helm/vergabe-teilnahme-values.yaml": { + "sha256": "sha256:6bb607ebca7ee79654d53b610ff1212bcc3576dda9079aa34e084efb03e97074", + "index": "100644 9b62ba0be8a99bdabddaea6751c6ccf7a2d28ecb 0\thelm/vergabe-teilnahme-values.yaml" + }, + "manifests/cnpg-backup-readiness.yaml": { + "sha256": "sha256:23e071906d6775ab731c84e4552958b2965dad6935ac11d5e1827c6de11e3476", + "index": "100644 da7be185b232515dcbe333d0ba083a456c3c5739 0\tmanifests/cnpg-backup-readiness.yaml" + }, + "manifests/cnpg-option-a-backup.yaml": { + "sha256": "sha256:6cb1bd741483140b05f0233657769fec56d6330147796e711428b418b8a967e3", + "index": "100644 b13dbae5ae232fe4e5971301d6128deff58bd1eb 0\tmanifests/cnpg-option-a-backup.yaml" + }, + "manifests/cnpg-option-a-netpol.yaml": { + "sha256": "sha256:0de2a76e5c6cc1823ee0f9641f7713ca5f0dd68d07569f5fc63a0ace1bab49d4", + "index": "100644 d66f526c4ad71ef2ac922e01cb3e7506b9712557 0\tmanifests/cnpg-option-a-netpol.yaml" + }, + "manifests/coulomb-social-ingress.yaml": { + "sha256": "sha256:f5aa256ff7178d6e98f50db02a827e3a34814a617def43c7af3c9002ffffb52a", + "index": "100644 3b9cb46acef9df48717e48ba14999fd03b9b1e64 0\tmanifests/coulomb-social-ingress.yaml" + }, + "manifests/forgejo-ingress.yaml": { + "sha256": "sha256:7ae44e578d8c1dbe600b759894bfd78837f51bebb8aa1825827e5cecdf0a8680", + "index": "100644 8d2a52c89083555d392d2d3b1d628703bd847074 0\tmanifests/forgejo-ingress.yaml" + }, + "manifests/forgejo-mailer-externalsecret.yaml": { + "sha256": "sha256:fc315008a41e01bec5b6b34dc68d31d0896f2e40501792f97b3e09b1d4b19974", + "index": "100644 9d00922bba2bf56f5cdb1939c29763817eb80042 0\tmanifests/forgejo-mailer-externalsecret.yaml" + }, + "manifests/forgejo-runner.yaml": { + "sha256": "sha256:704a186cf1fff29c84299b5fe4c3da9747602ac0aac7f58334e83d6d71874cec", + "index": "100644 ccbb94b95449f10964aeb691e28f269d7cfff3eb 0\tmanifests/forgejo-runner.yaml" + }, + "manifests/forgejo-secret-scan-template.yaml": { + "sha256": "sha256:8fad71aff5a25d8e31289072b9c06c6ec74ac74fedafc54dde7177bfe187c96a", + "index": "100644 7142fecfe3c1f3d44826b68eedc60a4ac5dc06c2 0\tmanifests/forgejo-secret-scan-template.yaml" + }, + "manifests/forgejo-ssh-nodeport.yaml": { + "sha256": "sha256:551d04cfdafeca1da0755c836cf2ddcebccd8c73843d36fa44c31cea0125b4d7", + "index": "100644 42998e201c347cf14401da990c074c2cb552afc5 0\tmanifests/forgejo-ssh-nodeport.yaml" + }, + "manifests/informed-decision-http-redirect.yaml": { + "sha256": "sha256:9657c37ea6a83ac41c48486b88b91a35b02f452d81fa72153d394b9b8e7f1418", + "index": "100644 02734a2a969e63e200ea3dd9ac4b2b2894211635 0\tmanifests/informed-decision-http-redirect.yaml" + }, + "manifests/informed-decision-ingress.yaml": { + "sha256": "sha256:9de87997d17c27bb6902f459b90c9f582e2aac9fa40ef770da83345bb71d2b72", + "index": "100644 c5c8ae0bdee68d366337e37d7eab8199d0131634 0\tmanifests/informed-decision-ingress.yaml" + }, + "manifests/informed-decision-origin.yaml": { + "sha256": "sha256:661b02ca2e4ee80b6da6022a2cab7add789d2de407fb5d96f65c0b17810970bf", + "index": "100644 6dca5a63323f7b6722bf91a8c07b78477c61b7b1 0\tmanifests/informed-decision-origin.yaml" + }, + "manifests/reuse-surface-runtime-externalsecret.yaml": { + "sha256": "sha256:adfb34c0ee4d01bc602f57cd2320f1658465fb8f8660978828fffa05a5b604b5", + "index": "100644 3822799306fbf1f8bb752509c5cd8a951a2deed1 0\tmanifests/reuse-surface-runtime-externalsecret.yaml" + }, + "manifests/vergabe-teilnahme-ingress.yaml": { + "sha256": "sha256:80e816704e88baf61fdf6cccdf92df87080946a7c7bc615960b191a4492ebee3", + "index": "100644 c0d67124800a4c180cfbb7960756f4a1c93cf242 0\tmanifests/vergabe-teilnahme-ingress.yaml" + }, + "registry/README.md": { + "sha256": "sha256:921c03c506d3e1c12b4796c18ac1cb74010e4f0bbada679f68edf55bda2518bb", + "index": "100644 569abe99c95e163d39048f4b02ccb47165751c7e 0\tregistry/README.md" + }, + "registry/capabilities/.gitkeep": { + "sha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "index": "100644 e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 0\tregistry/capabilities/.gitkeep" + }, + "registry/capabilities/capability.railiance.workload-deployment-tooling.md": { + "sha256": "sha256:ad24b7656512f93698af3182a3187c2e32efd5e74ae69007cb86eb7cd889528f", + "index": "100644 063141cac32b16feda2d8864875955fef5b5c679 0\tregistry/capabilities/capability.railiance.workload-deployment-tooling.md" + }, + "registry/indexes/capabilities.yaml": { + "sha256": "sha256:2a550acf8545e95bd81842bb1b00f4db46c4dbb42b522823f043e948667ddf2c", + "index": "100644 a311af53644a0ae066646d62de78c5b9686995e2 0\tregistry/indexes/capabilities.yaml" + }, + "scripts/reuse_authenticated_source_inventory.py": { + "sha256": "sha256:42eed5513db090d338daec39258b89a4ce2e9369d175c3c8312904ed68867ee1", + "index": "100644 aea33a5a9d379fec870e9790fa70c544e2bc985a 0\tscripts/reuse_authenticated_source_inventory.py" + }, + "tests/test_vergabe_pilot_chart.py": { + "sha256": "sha256:f8be22ad3d5d8d005a60d29378fd79cc2fea861b7ea417d03557bcaf2661a722", + "index": "100644 4089fcca2b03ebe69e3ff678aab7177f609283b5 0\ttests/test_vergabe_pilot_chart.py" + }, + "tools/apps-pg-backup-dry-run.sh": { + "sha256": "sha256:a468d6c80fb13e4bc5e67acbd51f11ae08d2543fe1366e846e940e7356674160", + "index": "100755 7dfdf9cd09fe76bb90046a2abdf473254568dbf6 0\ttools/apps-pg-backup-dry-run.sh" + }, + "tools/apps-pg-restore-drill.sh": { + "sha256": "sha256:ba94c3f56c54e6c899718ed3b89dc18308d2e334cfa68c04828df9f616ce9c3d", + "index": "100755 0dc09f112d8cf2d133c6f2423848e147425c8974 0\ttools/apps-pg-restore-drill.sh" + }, + "tools/build-database-url-secret.sh": { + "sha256": "sha256:5d11320093170dbf77d0d4a390714a04491126f85703d701374c797f686ea2bd", + "index": "100755 5091199e63162dccc0a19669626cd14610e4d775 0\ttools/build-database-url-secret.sh" + }, + "tools/check-backup-lane-auth.sh": { + "sha256": "sha256:1a0ee0d0d4646e92c654567a9c7304a80d4b33b4aadd513a326af0d8a2a68266", + "index": "100755 b049b67623a3691e6df14c8d7400570fbadc27ad 0\ttools/check-backup-lane-auth.sh" + }, + "tools/check-oci-image.sh": { + "sha256": "sha256:064b2a84fb3adfb45bbd704c718e8f0cf2fe48965d78b08c7b8be629eefeb5fe", + "index": "100755 090e0e3a7b1c681d5ebb62251b6b3afc0268b286 0\ttools/check-oci-image.sh" + }, + "tools/check-policy-nexus-binding.py": { + "sha256": "sha256:0db04d2d88038bc8079c559c8406d825fc6966968e27a801feefefb263bcc244", + "index": "100644 325d075213939a19a4a32a3fba831b6ceeae1a44 0\ttools/check-policy-nexus-binding.py" + }, + "tools/check-sops.sh": { + "sha256": "sha256:e6ddd6c4ef78a7608d94e5ca3b36a4d25816f6e0c04cd34bb9e08eee441f4d74", + "index": "100755 fa32be5fe448d316d174e31c262d96db284eccc6 0\ttools/check-sops.sh" + }, + "tools/check-tools.sh": { + "sha256": "sha256:50a94cd27c694731407e3ee10f44e64d20b5d44d9af21163eb00c8d685f1542d", + "index": "100755 c75123ba398a8ae731db7fe239f07b4afa8745fb 0\ttools/check-tools.sh" + }, + "tools/cnpg-backup-offsite-secret-apply.sh": { + "sha256": "sha256:18a24ea2206a0775a4764779c96c7f93a2c36130790721a78c1806b8b6ac510a", + "index": "100755 eff539953850ddbd1e889f1ebc7162809047b254 0\ttools/cnpg-backup-offsite-secret-apply.sh" + }, + "tools/cnpg-backup-status.sh": { + "sha256": "sha256:3e5b474fc81a394b6cf4e91434194f1df88e1958d15326bbfb1160a60c67bc8b", + "index": "100755 658cd594822c898c4bbbe2b843e986d1c2f3e9a8 0\ttools/cnpg-backup-status.sh" + }, + "tools/cnpg-logical-backup.sh": { + "sha256": "sha256:1ccbb608827af036fbbd5c132284227fe8a651e75e3a1abf66eb54382599cb25", + "index": "100755 722f803e0b0308fe1e6bf3001eb1ee220d25db1a 0\ttools/cnpg-logical-backup.sh" + }, + "tools/core-hub-helm-adopt.sh": { + "sha256": "sha256:047d793b9e763b62980df4ab0d2cef5aa1b115a3d6510bac6d96cf6adf5856e8", + "index": "100755 f581de98c932167e884c5a2cf55f05b28f4618ee 0\ttools/core-hub-helm-adopt.sh" + }, + "tools/core-hub-smoke.sh": { + "sha256": "sha256:5492aa72c6ecf5e3c22ac6c2b57385c594f52b216c525c531aec18a870e2c84f", + "index": "100755 b9c917ed234b7b0f9adda8117042f9aa999ccada 0\ttools/core-hub-smoke.sh" + }, + "tools/create-coulomb-social-env-secret.sh": { + "sha256": "sha256:a741de560918b54166e818a8302338546dbcd93572624436c779cb0518003bc8", + "index": "100755 b405c7d110b4e79d80ea6d4dc5beffb79c0d5a86 0\ttools/create-coulomb-social-env-secret.sh" + }, + "tools/forgejo-breakglass-seal.sh": { + "sha256": "sha256:aef89b19f1f82acfbd565e07580295dd66037af27f0f3c4703327a2fe77fac33", + "index": "100755 5adce66050b69a3f909fbe36a47f826fc0b9aa5d 0\ttools/forgejo-breakglass-seal.sh" + }, + "tools/forgejo-breakglass-verify.sh": { + "sha256": "sha256:e0144114468015730c415a503e906154313ee79acaeeba5c5ddf0a0b79f9b599", + "index": "100755 d7bd9d718494fd0475c8d8ceaafa95e584c919d6 0\ttools/forgejo-breakglass-verify.sh" + }, + "tools/forgejo-helm-secrets.sh": { + "sha256": "sha256:ebc5425af168763923db9b120c4ac59e2b15f6aae4c3481946d8ccbc9c62412e", + "index": "100755 f5c1f7f4e8fa4b6b7068356c65cd115b075f7b50 0\ttools/forgejo-helm-secrets.sh" + }, + "tools/forgejo-npm-smoke.sh": { + "sha256": "sha256:eb13107d933d109302916c4663bf95f5f49e9d2d1cc7272f96e229e179b92f66", + "index": "100755 ac6451e8be019f70232b3d9d64a877d6c9eff0e1 0\ttools/forgejo-npm-smoke.sh" + }, + "tools/forgejo-openbao-eso-token-apply.sh": { + "sha256": "sha256:2e37b355631ef1d0f8a5741276f7c17f8c99e2d2dcf855e4e4273b1105d2309a", + "index": "100755 a02249e42aa85b08e60a6976f1b9840a0844ddd4 0\ttools/forgejo-openbao-eso-token-apply.sh" + }, + "tools/forgejo-operator-bootstrap.sh": { + "sha256": "sha256:77f27b016fd772d112c9f4ab1ff7dce569d28bb60291ad6ef04f5896c0465960", + "index": "100755 f31db6cda8e31e513d71df7f1df8e601ecbf5a34 0\ttools/forgejo-operator-bootstrap.sh" + }, + "tools/forgejo-release-build.py": { + "sha256": "sha256:bd5b15ff2ca1e5694903aed3cd47c4fd1fb8baa43c49dd291029a9c9739cc96c", + "index": "100644 491f710fba95444d8fe365b84ca4d4826d9ad265 0\ttools/forgejo-release-build.py" + }, + "tools/forgejo-runner-registration-sops-bootstrap.sh": { + "sha256": "sha256:3b5242696616dbb169e6315e9a70c7fd942724427fa24a60d820b556425782e5", + "index": "100755 2a40d8306b238e45a40786000fe4f2e06be39284 0\ttools/forgejo-runner-registration-sops-bootstrap.sh" + }, + "tools/forgejo-smoke.sh": { + "sha256": "sha256:f6146412cbe29f4abba9d81b3bc7a0652cf281b30a56fd7054e72f1574553869", + "index": "100755 582680e03b53cc9e3fe87808d96548120800b0a5 0\ttools/forgejo-smoke.sh" + }, + "tools/forgejo-verify.sh": { + "sha256": "sha256:799571da79db58be2e6eee533ec20765aa9961bb74ea3865d69f48273a86f242", + "index": "100755 d17791e7677934aa4d9366e28bd36c5d0c7997b3 0\ttools/forgejo-verify.sh" + }, + "tools/inter-hub-smoke.sh": { + "sha256": "sha256:068fa77a76bb3047e581398560d02d0bb517614abbb935655fe849082b4666ee", + "index": "100755 a939be079720301949fb762eac006a656597a15c 0\ttools/inter-hub-smoke.sh" + }, + "tools/k8s-server-dry-run.sh": { + "sha256": "sha256:a6ff8018a777fd4a95a34609ca3efa22e5af314710522ca6fc02e852be5bb439", + "index": "100755 1b228a21b03d39ecc27767dcb5b20ab4f77982a8 0\ttools/k8s-server-dry-run.sh" + }, + "tools/reuse-forgejo-webhook.sh": { + "sha256": "sha256:bf9dfe0be5ca3033e20495dbd8914e59cedc7092254c544c1436f6f4f850a041", + "index": "100755 2ce77cb2ec119183f0e7c045949b09c53c3292d8 0\ttools/reuse-forgejo-webhook.sh" + }, + "tools/reuse-openbao-eso-token-apply.sh": { + "sha256": "sha256:0ea9cf2b3767dac5cd43d51e15af86bfee366cbd55a2f9bf0e8e8b71714052d2", + "index": "100755 ad5bc11f83ac9e21c6a5f324ddcb92fd1c552372 0\ttools/reuse-openbao-eso-token-apply.sh" + }, + "tools/reuse-webhook-smoke.sh": { + "sha256": "sha256:be7b076970d02e357f2216935d257b44a880dec8005860003448ea8c69270a51", + "index": "100755 e406267212c5de0f96b32bb6fe50381ae62ee12c 0\ttools/reuse-webhook-smoke.sh" + }, + "tools/smoke-service.sh": { + "sha256": "sha256:0de60ff9e32d820ea60e3b197715a4a99167f929b69516e0b632019c046ea1a4", + "index": "100755 858ab8d317bd2872d949783a28eb0ab36d094659 0\ttools/smoke-service.sh" + }, + "values/policy-nexus-production-candidate.yaml": { + "sha256": "sha256:6e0f5a529b450f6b8f00f6fc59c50a7e5b652520f0a370b199a49cb416fac062", + "index": "100644 7261bcc1134c15b34d53536d8fe6df5b99ffcdf7 0\tvalues/policy-nexus-production-candidate.yaml" + }, + "values/policy-nexus-production.yaml": { + "sha256": "sha256:6e0f5a529b450f6b8f00f6fc59c50a7e5b652520f0a370b199a49cb416fac062", + "index": "100644 7261bcc1134c15b34d53536d8fe6df5b99ffcdf7 0\tvalues/policy-nexus-production.yaml" + }, + "workplans/.gitkeep": { + "sha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "index": "100644 e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 0\tworkplans/.gitkeep" + }, + "workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md": { + "sha256": "sha256:40c82f0ec6a403fc134b1d146e7a4b0cd3d73ae764a2893642c2743351391cbc", + "index": "100644 7c7f536c6c178c834ea7cf4d40efc4612392dc4a 0\tworkplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md" + }, + "workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md": { + "sha256": "sha256:ecbc8e16680045004336497f5711c225791aeea309ab394627df198512a3f60d", + "index": "100644 262e10f4c75050df0d196346899118057e912e3a 0\tworkplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md" + }, + "workplans/RAPPS-WP-0003-policy-nexus-production-binding.md": { + "sha256": "sha256:f4f4096ad7e0dbefcbe81a77c5e9260f920a67d4080a2717d0cda603030fea04", + "index": "100644 eb68d7b3402f699564f7562fbccaf4e7bfe86b5a 0\tworkplans/RAPPS-WP-0003-policy-nexus-production-binding.md" + }, + "workplans/RAPPS-WP-0014-vergabe-invited-pilot.md": { + "sha256": "sha256:0160a3660a2ac5e4f7caadf8c0db341770e2e2e9bf73e97a51408e8c61d2e411", + "index": "100644 377f27b9f7b06587ca9fd3941c94168ffe03362b 0\tworkplans/RAPPS-WP-0014-vergabe-invited-pilot.md" + }, + "workplans/RAPPS-WP-0015-coulomb-personal-content-release.md": { + "sha256": "sha256:9b88c059cbef47ded58d42bc998301191128d708a7872c9a7351314e6622b998", + "index": "100644 fd4cac8f2f54e263776319bf79cc3dce53feba1f 0\tworkplans/RAPPS-WP-0015-coulomb-personal-content-release.md" + }, + "workplans/RAPPS-WP-0017-reuse-private-reader-release.md": { + "sha256": "sha256:d681feebc1a90c5e5e838298d9777ca89ed95bf243792ec7e0fb6330dd3785bf", + "index": "100644 50a6e2525188623ecd963fee44ac08c541742e26 0\tworkplans/RAPPS-WP-0017-reuse-private-reader-release.md" + }, + "workplans/archived/260605-RAIL-AP-WP-0001-gitea-container-registry.md": { + "sha256": "sha256:e40dc51141ce492aa1af0990bbac5f1090cf312722639a588f8a7129e7e0d729", + "index": "100644 c786103e36eb6b77cf50c6a9ff7eb036929d101b 0\tworkplans/archived/260605-RAIL-AP-WP-0001-gitea-container-registry.md" + }, + "workplans/archived/260702-RAPPS-WP-0004-s5-app-release-readiness.md": { + "sha256": "sha256:29730ffb1016f2580901d766008fde3ffcb732201fd10514eaef1cfac695861f", + "index": "100644 a650e73be22c54a6e658d72cfe42e773cbbbe917 0\tworkplans/archived/260702-RAPPS-WP-0004-s5-app-release-readiness.md" + }, + "workplans/archived/260702-RAPPS-WP-0005-railiance-forge-extraction.md": { + "sha256": "sha256:c8bb0ee71e365c856385b695145d9d27e1a6c1e8e02cf72128559ec257c2247f", + "index": "100644 5600db72844885fa1e7576c6fd4fdfe0f3aee3bc 0\tworkplans/archived/260702-RAPPS-WP-0005-railiance-forge-extraction.md" + }, + "workplans/archived/260702-RAPPS-WP-0006-reuse-surface-hub-on-railiance01.md": { + "sha256": "sha256:9853b6b35cb31731fda12aaff5774ab74f9f45f98436c37b0c2871fccb9f0390", + "index": "100644 4292d047af68c863cc2099b9c3710e58d4464f82 0\tworkplans/archived/260702-RAPPS-WP-0006-reuse-surface-hub-on-railiance01.md" + }, + "workplans/archived/260702-RAPPS-WP-0007-service-landing-pages.md": { + "sha256": "sha256:a3ba9967f6baf139e01caa2c167c0f9aed81962aa21a4f0319e5e2caf62a2aaa", + "index": "100644 e839c0a4067b013dfec045079b157d8cf2f6eb10 0\tworkplans/archived/260702-RAPPS-WP-0007-service-landing-pages.md" + }, + "workplans/archived/260702-RAPPS-WP-0008-inter-hub-chart-handoff.md": { + "sha256": "sha256:04a1d3cfefc44d112f25218c8d3a508de6d30b2b81f32313f0c3496c6850dcaf", + "index": "100644 19a6729b414717d3aecd16b40d93e36cfa51903a 0\tworkplans/archived/260702-RAPPS-WP-0008-inter-hub-chart-handoff.md" + }, + "workplans/archived/260702-RAPPS-WP-0009-inbox-suggestion-guardrails.md": { + "sha256": "sha256:2faf420e157c41d864a910e3df182744a3dd7c05c1f21edab41a7755e12d5e45", + "index": "100644 75b07f34d7da940a473a0293e3512d0447d1f79a 0\tworkplans/archived/260702-RAPPS-WP-0009-inbox-suggestion-guardrails.md" + }, + "workplans/archived/260702-RAPPS-WP-0010-inter-hub-production-trigger-hardening.md": { + "sha256": "sha256:3c2a773592c70112efe6309b52c5953a9f5d889ca46a49afc2dcef219c37914a", + "index": "100644 d81cc1a0c8fde58c3ccfaa81ac6593f5b0342eb5 0\tworkplans/archived/260702-RAPPS-WP-0010-inter-hub-production-trigger-hardening.md" + }, + "workplans/archived/260702-railiance-apps-WP-0002-vergabe-teilnahme-on-railiance01.md": { + "sha256": "sha256:d95f3e2a8b4b652c8ce8c5e09656a6287e117e2df86c203b78f932250c6ace29", + "index": "100644 cf8855758c625006f9cb0e5fd25baed0106986ed 0\tworkplans/archived/260702-railiance-apps-WP-0002-vergabe-teilnahme-on-railiance01.md" + }, + "workplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md": { + "sha256": "sha256:178b768b2cd4a11483fcbddf3915ab3236aad99cbb9688bad8636c563afb678d", + "index": "100644 eec8aa54b70050133c95c416b4bbef0d7b98cc94 0\tworkplans/archived/260702-railiance-apps-WP-0004-app-deployment-improvements.md" + }, + "workplans/archived/260710-RAPPS-WP-0011-inbox-suggestions-core-hub-cnpg-backup.md": { + "sha256": "sha256:ba8fb46ae2f0db08287dc8fd3177138d754c58726c7c4f587853312d14967f40", + "index": "100644 6d736ffc75d995263a9dbaf6c762f6c5f11ea496 0\tworkplans/archived/260710-RAPPS-WP-0011-inbox-suggestions-core-hub-cnpg-backup.md" + }, + "workplans/archived/260712-RAPPS-WP-0012-cnpg-backup-wiring-restore-drill.md": { + "sha256": "sha256:a93d39a00199702f0c20365a3a44b088a573acddfc6e32c0c897b19456f4e752", + "index": "100644 f703981f8c6065f451fbfd6ad5ec9ecc70cd4c71 0\tworkplans/archived/260712-RAPPS-WP-0012-cnpg-backup-wiring-restore-drill.md" + }, + "workplans/archived/260712-RAPPS-WP-0013-core-hub-helm-cutover-vergabe-refresh.md": { + "sha256": "sha256:5d831040bf223b0ec14fe6d3a5152f99361f0be8f81b6e607826878e919c7fcb", + "index": "100644 b098c2d1027cddddb2b9afe594052f1000add241 0\tworkplans/archived/260712-RAPPS-WP-0013-core-hub-helm-cutover-vergabe-refresh.md" + } +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/.custodian-brief.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/.custodian-brief.md.worktree new file mode 100644 index 00000000..1f9b6fae --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/.custodian-brief.md.worktree @@ -0,0 +1,47 @@ + +# Custodian Brief — railiance-apps + +**Domain:** financials +**Last synced:** 2026-10-17 10:13 UTC +**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* + +## Active Workstreams + +### Forgejo sign-in through NetKingdom, before the forge closes +Progress: 1/5 done | workplan_id: `f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b` + +**Open tasks:** +- ! T01 — Make the local administrator a sealed break-glass `13cd3aec` + *(wait: Break-glass done (T01); needs the NetKingdom client registered with its secret in custody (KEY-WP-0038-T02).)* +- ! T02 — Add the NetKingdom authentication source `81f072aa` + *(wait: Linking and team mapping follow a working authentication source.)* +- ! T03 — Link accounts and map groups to teams `32c54737` + *(wait: Restricting local password sign-in is a founder decision once NetKingdom sign-in is proven.)* +- ! T04 — Decide on local password sign-in `728786c9` + *(wait: Waits for net-kingdom's answer to the Apps 1.3 needs-change record (the-custodian docs/changes/netkingdom-target-2026-10-17/nk48-1.3-owner-review/owner-review-railiance-apps.json: RAPPS-1.3-C1..C3) and the re-frozen 1.3 candidate.)* + +### Coulomb-social persistent personal workspace release +Progress: 3/4 done | workplan_id: `79abacf8-361e-51ab-829d-40dec8e142d1` + +**Open tasks:** +- ! T04 — Personal sign-in and content acceptance `8bc4962a` + +### Deploy and recover the first invited Vergabe company pilot +Progress: 2/3 done | workplan_id: `c7fdaa7e-cab8-5d1d-86c2-f1aad7927c57` + +**Open tasks:** +- ! Demonstrate restart, isolated restore, rollback and operating ownership `dd069c6d` + *(wait: Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery point, isolated restored workflow, rollback evidence and support ownership. September 25 proves database restore and restart only.)* + +## Inbox Hygiene + +**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start. +**Missing thread_id:** 2 unread message(s) lack supersession chains. + +--- +## MCP Orientation (when available) + +If the state-hub MCP server is reachable, call: +`get_domain_summary("financials")` +This provides richer cross-domain context. +If the MCP call fails, use this file as your orientation source. diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..89c6d25c --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,48 @@ +# Work Records — railiance-apps + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | RAPPS-WP-0001 | finished | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| workplan | RAPPS-WP-0002 | finished | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| workplan | RAPPS-WP-0003 | finished | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| workplan | RAPPS-WP-0014 | blocked | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| workplan | RAPPS-WP-0015 | active | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| workplan | RAPPS-WP-0016 | active | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| workplan | RAPPS-WP-0017 | finished | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0001-T01 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T02 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T03 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T04 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T05 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0002-T01 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T02 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T03 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T04 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T05 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T06 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T07 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0003-T01 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T02 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T03 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T04 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0014-T01 | done | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0014-T02 | done | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0014-T03 | wait | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0015-T01 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T02 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T03 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T04 | wait | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0016-T01 | done | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T02 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T03 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T04 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T05 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0017-T01 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0017-T02 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0017-T03 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/originals.json new file mode 100644 index 00000000..415362e8 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 1f9b6fae4362945f96aa9a2a9647be9c83d8296a 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 89c6d25cfe29035a2e0ad71113c31b89338b0cc3 0\tWORK-RECORDS.md" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-commit.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-commit.json new file mode 100644 index 00000000..5d0e41eb --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-commit.json @@ -0,0 +1,25 @@ +{ + "exit_code": 0, + "commit": "a927ec8cc821a93688ca939e5a06eb0379f8d9c3", + "base": "308e83fcfbf9ec98dbe6b0286cbe8ec7be8899b3", + "files": [ + { + "path": "build/forgejo/forgejo-security-extension.patch", + "sha256": "9fe3d7baa648c9347964a177befab5070e00151d1ec5ddff16c41890db84e62a" + }, + { + "path": "build/forgejo/inputs.lock.json", + "sha256": "ac38cc1f9d49f9474b5ee0977c75f449d32112d54a1599f1f22cf0e2d7fa2b44" + }, + { + "path": "build/forgejo/README.md", + "sha256": "3cd9ea9e0078ebe76b49337df92b00b48600524e664afe419306fe931cdb651c" + }, + { + "path": "workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md", + "sha256": "48eae582342a4c62ba38140ed2f4326102c5ca627636afe36432eb2fc692f74a" + } + ], + "stdout": "[main a927ec8] Join Forgejo callback identity to the issuer-owned current access grant\n 4 files changed, 1245 insertions(+), 42 deletions(-)\n", + "stderr": "" +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-inputs.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-inputs.json new file mode 100644 index 00000000..c4fbe7e1 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/railiance-apps-publication/publication-inputs.json @@ -0,0 +1,23 @@ +{ + "owner": "railiance-apps", + "base_revision": "308e83fcfbf9ec98dbe6b0286cbe8ec7be8899b3", + "message": "Join Forgejo callback identity to the issuer-owned current access grant", + "files": [ + { + "path": "build/forgejo/forgejo-security-extension.patch", + "sha256": "9fe3d7baa648c9347964a177befab5070e00151d1ec5ddff16c41890db84e62a" + }, + { + "path": "build/forgejo/inputs.lock.json", + "sha256": "ac38cc1f9d49f9474b5ee0977c75f449d32112d54a1599f1f22cf0e2d7fa2b44" + }, + { + "path": "build/forgejo/README.md", + "sha256": "3cd9ea9e0078ebe76b49337df92b00b48600524e664afe419306fe931cdb651c" + }, + { + "path": "workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md", + "sha256": "48eae582342a4c62ba38140ed2f4326102c5ca627636afe36432eb2fc692f74a" + } + ] +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/consistency.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/consistency.stderr.txt new file mode 100644 index 00000000..3345563f --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/consistency.stderr.txt @@ -0,0 +1 @@ +WARN: git commit failed for writeback: Generated-only commits rejected: staged diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/projection.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/projection.stderr.txt new file mode 100644 index 00000000..e69de29b diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/.custodian-brief.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/.custodian-brief.md.worktree new file mode 100644 index 00000000..ccdbe126 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/.custodian-brief.md.worktree @@ -0,0 +1,91 @@ + +# Custodian Brief — net-kingdom + +**Domain:** infotech +**Last synced:** 2026-10-17 09:16 UTC +**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* + +## Active Workstreams + +### Publish the NetKingdom emission-cadence security profile +Progress: 5/6 done | workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc` + +**Open tasks:** +- ► Bind and hand off the published contract `e3fbc8b8` + +### Register Playwright human and agent consumers through governed identity delivery +Progress: 1/3 done | workplan_id: `06ba98d5-609e-5aaa-9bf7-4c4f4460e377` + +**Open tasks:** +- ! Verify issuer and real consumer acceptance `5a3aaf57` + *(wait: Await owner-scoped registry/custody activation, native cluster authentication and individual transport, then real human and agent acceptance under CUST-WP-0080-T05.)* +- ► Deliver custody integration and guarded registration activation `a9dadd07` + +### Remove bootstrap secret output and verify separated recovery custody +Progress: 26/38 done | workplan_id: `17d315f0-829e-57c7-85cc-3a7914152804` + +**Open tasks:** +- ! Accept remaining recovery and caller evidence and close the G08 handoff `d68cd4d3` + *(wait: Await the separately tracked native service proofs, current/legacy caller dispositions and residual-scope decisions; archive recovery, backup activation, independent outage retrieval and guide publication are complete.)* +- ! Resolve historical credential and configuration-preserving rotation dispositions `3ea6bf00` + *(wait: Await the caller/consumer ledger, current replacement-lane acceptance and explicit credential-owner dispositions; existing exposure-rotation deferral is unchanged.)* +- ! Verify current caller and provider admission at their actual boundaries `77aa42be` + *(wait: Await the current-caller ledger and exact per-caller owner admission/test inputs; the backup credential grants do not admit unrelated callers.)* +- ! Prove retained privacyIDEA token decryption and existing-token MFA `6f8af1a7` + *(wait: LLDAP T16, token-material T31 and audit T20 passed; await the exact isolated MFA adapter and owner-selected retained-token/factor inputs.)* +- ! Prove restored KeyCape issuer, policy and consumer continuity `141dd773` + *(wait: Source and synthetic KeyCape lifecycle proof are delivered in T32; await exact owner-held recovery attempt preparation T33, selected consumer acceptance and retained-token MFA for the selected flow.)* +- ! Prove restored Authelia storage and OIDC continuity `b47f9975` + *(wait: LLDAP recovery T16 passed; await the exact isolated Authelia adapter/procedure and private authentication-flow inputs from T15.)* +- ! Prepare the exact owner-held KeyCape recovery attempt `56c8d469` + *(wait: Source custody/preflight preparation is evidenced in T34; await original TLS/trust recovery disposition T35 and selected original registration/private-admission metadata T36 before final reviewed command and existing owner process.)* +- … and 5 more open tasks + +### Establish SecurityCaseTypes so that known security cases are light +Progress: 25/31 done | workplan_id: `e31f3f9d-0748-5137-b0a3-7b3ca46a66eb` + +**Open tasks:** +- ! T05 — Acknowledge the type through informed-decision `d9b26bcf` + *(wait: Type1.2 architecture has a confirmed source-only founder acknowledgment; canonical1.1 remains unchanged/default and the1.2 reference case stays proposed. Needs explicit version selection/reference-source integration without normal admission bypass, closed owner adapters plus global/native receipt verifier (WARDEN-WP-0044-T03), independently verified six-object structural materialization and CCR42 claims/created-only provenance, exact broker/case/source reconciliation, then separately authorized native mint/delivery and attended registry/consumer verification. Source acknowledgment, a bundle or local tests do not prove implemented/materialized/live status.)* +- ! T06 — First KnownSecurityCase: Forgejo `c3c9c3ae` + *(wait: The next types follow once the first one is proven end to end.)* +- ! T15 — Define authenticated recovery for lost registration process state `1b825705` + *(wait: Source candidate 061461e is merged. Waiting on the owner to select the real authenticated original-attempt holder and native readback, and on independent re-review of the changed T13 adapter source.)* +- ► T14 — Admit governed group rollback against native owner boundaries `fce95440` +- · T12 — Prepare NetKingdom-owned attended step adapters `7ce4eee3` +- · T16 — Select and review the actual machine descriptor composition `200bf500` + +### Define an execution-attribution receipt for Railiance runs +Progress: 1/2 done | workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487` + +**Open tasks:** +- ! Agree the evidence holder and schema with audit-core and Railiance `963120c1` + *(wait: Audit-core accepted evidence custody and published field/admission requirements in AUDIT-WP-0014-T01. Still needs Railiance owner confirmation of exact emitter and wire binding before canonical schema/validator implementation, followed by actual emission/readback and attribution/clock/unknown-case acceptance.)* + +### Enterprise Federation & SAML — Expanded-Mode Keycloak Identity Broker +Progress: 1/9 done | workplan_id: `1075448f-d533-5f9e-94b7-c3adfe151a07` + +**Open tasks:** +- ! Admit the database consumer `2fe6f100` + *(wait: ADR-0009 adoption trigger absent; then railiance-platform/rapp-postgres must admit the database consumer and return backup/restore evidence.)* +- ! Package the broker deployment `32d1411b` + *(wait: ADR-0009 adoption trigger and named package/runtime owner absent; requires T02 database admission and governed OpenBao/ESO role plus immutable issuer assignment.)* +- ! Integrate an upstream identity provider `6697a994` + *(wait: Named tenant/upstream IdP owner/federation need absent; requires admitted broker and owner-reviewed tenant-scoped claim mappings plus actual login evidence.)* +- ! Define federated assurance `d845380d` + *(wait: Adoption trigger absent; requires per-IdP assurance trust mapping and reviewed privileged step-up delivery from issuer/package and access-engine owners.)* +- ! Verify IAM conformance and coexistence `9cb7fd93` + *(wait: Requires admitted live broker, canonical tenant issuer selection and dedicated test-client conformance/coexistence evidence; adoption trigger absent.)* +- ! Enforce tenant and platform boundaries `38998c68` + *(wait: Requires tenant-engine tier/issuer ownership and access-engine boundary/freshness enforcement evidence after adoption trigger and broker admission.)* +- ! Prove recovery and audit delivery `e5f44ddc` + *(wait: Requires admitted database/broker, named recovery and audit owners, off-host restore and observed audit/break-glass receipts; adoption trigger absent.)* +- … and 1 more open tasks + +--- +## MCP Orientation (when available) + +If the state-hub MCP server is reachable, call: +`get_domain_summary("infotech")` +This provides richer cross-domain context. +If the MCP call fails, use this file as your orientation source. diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..4eda3538 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,289 @@ +# Work Records — net-kingdom + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | NK-WP-ADHOC-2026-07-02 | finished | — | workplans/ADHOC-2026-07-02.md | +| workplan | NK-WP-ADHOC-2026-08-14 | finished | — | workplans/ADHOC-2026-08-14.md | +| workplan | NK-WP-ADHOC-2026-08-23 | finished | — | workplans/ADHOC-2026-08-23.md | +| workplan | NK-WP-ADHOC-2026-10-03 | finished | — | workplans/ADHOC-2026-10-03.md | +| workplan | NK-WP-ADHOC-2026-10-10 | finished | — | workplans/ADHOC-2026-10-10.md | +| workplan | NK-WP-ADHOC-2026-10-11 | finished | — | workplans/ADHOC-2026-10-11.md | +| workplan | NK-WP-ADHOC-2026-10-16 | finished | — | workplans/ADHOC-2026-10-16.md | +| workplan | NET-WP-0020 | finished | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | +| workplan | NK-WP-0009 | finished | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | +| workplan | NK-WP-0011 | active | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| workplan | NK-WP-0021 | finished | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| workplan | NK-WP-0022 | finished | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| workplan | NK-WP-0023 | finished | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| workplan | NK-WP-0024 | finished | — | workplans/NK-WP-0024-user-engine-portal-integration-expansion.md | +| workplan | NK-WP-0025 | finished | — | workplans/NK-WP-0025-public-self-registration-and-application-jit.md | +| workplan | NK-WP-0026 | finished | — | workplans/NK-WP-0026-flex-auth-caller-identity-rollout.md | +| workplan | NK-WP-0027 | backlog | — | workplans/NK-WP-0027-reef-placement-reconciliation.md | +| workplan | NK-WP-0028 | finished | — | workplans/NK-WP-0028-canon-publication-and-grouping-semantics.md | +| workplan | NK-WP-0029 | finished | — | workplans/NK-WP-0029-scope-and-intent-reconciliation.md | +| workplan | NK-WP-0030 | finished | — | workplans/NK-WP-0030-deterministic-security-scenario-composition.md | +| workplan | NK-WP-0031 | finished | — | workplans/NK-WP-0031-deterministic-posture-feedback.md | +| workplan | NK-WP-0032 | finished | — | workplans/NK-WP-0032-openbao-operator-loopback-callback.md | +| workplan | NK-WP-0033 | finished | — | workplans/NK-WP-0033-keycape-secret-exposure-rotation.md | +| workplan | NK-WP-0034 | finished | — | workplans/NK-WP-0034-verification-that-verifies.md | +| workplan | NK-WP-0035 | active | — | workplans/NK-WP-0035-emission-cadence-security-profile.md | +| workplan | NK-WP-0036 | finished | — | workplans/NK-WP-0036-restore-user-portal-client-registration.md | +| workplan | NK-WP-0037 | finished | — | workplans/NK-WP-0037-vergabe-company-welcome.md | +| workplan | NK-WP-0038 | finished | — | workplans/NK-WP-0038-tenant-scoped-identity-lifecycle.md | +| workplan | NK-WP-0039 | finished | — | workplans/NK-WP-0039-flex-auth-access-engine-coordinate-intake.md | +| workplan | NK-WP-0040 | active | — | workplans/NK-WP-0040-execution-attribution-receipt.md | +| workplan | NK-WP-0041 | finished | — | workplans/NK-WP-0041-onboarding-journey-usability.md | +| workplan | NK-WP-0042 | finished | — | workplans/NK-WP-0042-workload-mfa-step-up.md | +| workplan | NK-WP-0043 | finished | — | workplans/NK-WP-0043-cadence-assessment-and-operating-guidance.md | +| workplan | NK-WP-0044 | finished | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| workplan | NK-WP-0045 | finished | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| workplan | NK-WP-0046 | finished | — | workplans/NK-WP-0046-secrets-engine-openbao-client-registration.md | +| workplan | NK-WP-0047 | finished | — | workplans/NK-WP-0047-platform-password-reset-mail.md | +| workplan | NK-WP-0048 | active | — | workplans/NK-WP-0048-security-case-types.md | +| workplan | NK-WP-0049 | active | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| workplan | NK-WP-0050 | active | — | workplans/NK-WP-0050-playwright-consumer-registration.md | +| workplan | NK-WP-0051 | finished | — | workplans/NK-WP-0051-sign-in-diagnosis.md | +| task | NK-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md | +| task | NK-WP-ADHOC-2026-07-02-T02 | done | — | workplans/ADHOC-2026-07-02.md | +| task | NK-WP-ADHOC-2026-08-14-T01 | done | — | workplans/ADHOC-2026-08-14.md | +| task | NK-WP-ADHOC-2026-08-14-T02 | done | — | workplans/ADHOC-2026-08-14.md | +| task | NK-WP-ADHOC-2026-08-14-T03 | done | — | workplans/ADHOC-2026-08-14.md | +| task | NK-WP-ADHOC-2026-08-23-T01 | done | — | workplans/ADHOC-2026-08-23.md | +| task | NK-WP-ADHOC-2026-10-03-T01 | done | — | workplans/ADHOC-2026-10-03.md | +| task | NK-WP-ADHOC-2026-10-10-T01 | done | — | workplans/ADHOC-2026-10-10.md | +| task | NK-WP-ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md | +| task | NK-WP-ADHOC-2026-10-11-T02 | done | — | workplans/ADHOC-2026-10-11.md | +| task | NK-WP-ADHOC-2026-10-11-T03 | done | — | workplans/ADHOC-2026-10-11.md | +| task | NK-WP-ADHOC-2026-10-11-T04 | done | — | workplans/ADHOC-2026-10-11.md | +| task | NK-WP-ADHOC-2026-10-11-T05 | done | — | workplans/ADHOC-2026-10-11.md | +| task | NK-WP-ADHOC-2026-10-11-T06 | done | — | workplans/ADHOC-2026-10-11.md | +| task | NK-WP-ADHOC-2026-10-11-T07 | done | — | workplans/ADHOC-2026-10-11.md | +| task | NK-WP-ADHOC-2026-10-16-T01 | done | — | workplans/ADHOC-2026-10-16.md | +| task | NET-WP-0020-T01 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | +| task | NET-WP-0020-T02 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | +| task | NET-WP-0020-T03 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | +| task | NET-WP-0020-T04 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | +| task | NET-WP-0020-T05 | done | — | workplans/NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | +| task | NK-WP-0009-T01 | done | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | +| task | NK-WP-0009-T02 | done | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | +| task | NK-WP-0009-T03 | done | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | +| task | NK-WP-0009-T04 | done | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | +| task | NK-WP-0009-T05 | done | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | +| task | NK-WP-0009-T06 | done | — | workplans/NK-WP-0009-netkingdom-security-pattern-tutorials.md | +| task | NK-WP-0011-T01 | done | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T02 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T03 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T04 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T05 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T06 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T07 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T08 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0011-T09 | wait | — | workplans/NK-WP-0011-enterprise-federation-saml.md | +| task | NK-WP-0021-T01 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| task | NK-WP-0021-T02 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| task | NK-WP-0021-T03 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| task | NK-WP-0021-T04 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| task | NK-WP-0021-T05 | done | — | workplans/NK-WP-0021-activity-core-ops-sso-operators.md | +| task | NK-WP-0022-T01 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T02 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T03 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T04 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T05 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T06 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T07 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0022-T08 | done | — | workplans/NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | +| task | NK-WP-0023-T01 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0023-T02 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0023-T03 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0023-T04 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0023-T05 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0023-T06 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0023-T07 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0023-T08 | done | — | workplans/NK-WP-0023-user-engine-portal-platform-integration.md | +| task | NK-WP-0024-T01 | done | — | workplans/NK-WP-0024-user-engine-portal-integration-expansion.md | +| task | NK-WP-0024-T02 | done | — | workplans/NK-WP-0024-user-engine-portal-integration-expansion.md | +| task | NK-WP-0024-T03 | done | — | workplans/NK-WP-0024-user-engine-portal-integration-expansion.md | +| task | NK-WP-0024-T04 | done | — | workplans/NK-WP-0024-user-engine-portal-integration-expansion.md | +| task | NK-WP-0025-T01 | done | — | workplans/NK-WP-0025-public-self-registration-and-application-jit.md | +| task | NK-WP-0025-T02 | done | — | workplans/NK-WP-0025-public-self-registration-and-application-jit.md | +| task | NK-WP-0025-T03 | done | — | workplans/NK-WP-0025-public-self-registration-and-application-jit.md | +| task | NK-WP-0025-T04 | done | — | workplans/NK-WP-0025-public-self-registration-and-application-jit.md | +| task | NK-WP-0025-T05 | done | — | workplans/NK-WP-0025-public-self-registration-and-application-jit.md | +| task | NK-WP-0026-T01 | done | — | workplans/NK-WP-0026-flex-auth-caller-identity-rollout.md | +| task | NK-WP-0026-T02 | done | — | workplans/NK-WP-0026-flex-auth-caller-identity-rollout.md | +| task | NK-WP-0027-T01 | done | — | workplans/NK-WP-0027-reef-placement-reconciliation.md | +| task | NK-WP-0027-T02 | todo | — | workplans/NK-WP-0027-reef-placement-reconciliation.md | +| task | NK-WP-0027-T03 | todo | — | workplans/NK-WP-0027-reef-placement-reconciliation.md | +| task | NK-WP-0027-T04 | done | — | workplans/NK-WP-0027-reef-placement-reconciliation.md | +| task | NK-WP-0027-T05 | done | — | workplans/NK-WP-0027-reef-placement-reconciliation.md | +| task | NK-WP-0027-T06 | todo | — | workplans/NK-WP-0027-reef-placement-reconciliation.md | +| task | NK-WP-0028-T01 | done | — | workplans/NK-WP-0028-canon-publication-and-grouping-semantics.md | +| task | NK-WP-0028-T02 | done | — | workplans/NK-WP-0028-canon-publication-and-grouping-semantics.md | +| task | NK-WP-0028-T03 | done | — | workplans/NK-WP-0028-canon-publication-and-grouping-semantics.md | +| task | NK-WP-0028-T04 | done | — | workplans/NK-WP-0028-canon-publication-and-grouping-semantics.md | +| task | NK-WP-0029-T01 | done | — | workplans/NK-WP-0029-scope-and-intent-reconciliation.md | +| task | NK-WP-0029-T02 | done | — | workplans/NK-WP-0029-scope-and-intent-reconciliation.md | +| task | NK-WP-0029-T03 | done | — | workplans/NK-WP-0029-scope-and-intent-reconciliation.md | +| task | NK-WP-0029-T04 | done | — | workplans/NK-WP-0029-scope-and-intent-reconciliation.md | +| task | NK-WP-0030-T01 | done | — | workplans/NK-WP-0030-deterministic-security-scenario-composition.md | +| task | NK-WP-0030-T02 | done | — | workplans/NK-WP-0030-deterministic-security-scenario-composition.md | +| task | NK-WP-0030-T03 | done | — | workplans/NK-WP-0030-deterministic-security-scenario-composition.md | +| task | NK-WP-0030-T04 | done | — | workplans/NK-WP-0030-deterministic-security-scenario-composition.md | +| task | NK-WP-0030-T05 | done | — | workplans/NK-WP-0030-deterministic-security-scenario-composition.md | +| task | NK-WP-0031-T01 | done | — | workplans/NK-WP-0031-deterministic-posture-feedback.md | +| task | NK-WP-0031-T02 | done | — | workplans/NK-WP-0031-deterministic-posture-feedback.md | +| task | NK-WP-0031-T03 | done | — | workplans/NK-WP-0031-deterministic-posture-feedback.md | +| task | NK-WP-0031-T04 | done | — | workplans/NK-WP-0031-deterministic-posture-feedback.md | +| task | NK-WP-0031-T05 | done | — | workplans/NK-WP-0031-deterministic-posture-feedback.md | +| task | NK-WP-0032-T01 | done | — | workplans/NK-WP-0032-openbao-operator-loopback-callback.md | +| task | NK-WP-0032-T02 | done | — | workplans/NK-WP-0032-openbao-operator-loopback-callback.md | +| task | NK-WP-0032-T03 | done | — | workplans/NK-WP-0032-openbao-operator-loopback-callback.md | +| task | NK-WP-0032-T04 | done | — | workplans/NK-WP-0032-openbao-operator-loopback-callback.md | +| task | NK-WP-0033-T01 | done | — | workplans/NK-WP-0033-keycape-secret-exposure-rotation.md | +| task | NK-WP-0033-T02 | done | — | workplans/NK-WP-0033-keycape-secret-exposure-rotation.md | +| task | NK-WP-0033-T03 | done | — | workplans/NK-WP-0033-keycape-secret-exposure-rotation.md | +| task | NK-WP-0033-T04 | done | — | workplans/NK-WP-0033-keycape-secret-exposure-rotation.md | +| task | NK-WP-0033-T05 | done | — | workplans/NK-WP-0033-keycape-secret-exposure-rotation.md | +| task | NK-WP-0034-T01 | done | — | workplans/NK-WP-0034-verification-that-verifies.md | +| task | NK-WP-0034-T02 | done | — | workplans/NK-WP-0034-verification-that-verifies.md | +| task | NK-WP-0034-T03 | done | — | workplans/NK-WP-0034-verification-that-verifies.md | +| task | NK-WP-0034-T04 | done | — | workplans/NK-WP-0034-verification-that-verifies.md | +| task | NK-WP-0035-T01 | done | — | workplans/NK-WP-0035-emission-cadence-security-profile.md | +| task | NK-WP-0035-T02 | done | — | workplans/NK-WP-0035-emission-cadence-security-profile.md | +| task | NK-WP-0035-T03 | done | — | workplans/NK-WP-0035-emission-cadence-security-profile.md | +| task | NK-WP-0035-T04 | progress | — | workplans/NK-WP-0035-emission-cadence-security-profile.md | +| task | NK-WP-0035-T05 | done | — | workplans/NK-WP-0035-emission-cadence-security-profile.md | +| task | NK-WP-0035-T06 | done | — | workplans/NK-WP-0035-emission-cadence-security-profile.md | +| task | NK-WP-0036-T01 | done | — | workplans/NK-WP-0036-restore-user-portal-client-registration.md | +| task | NK-WP-0036-T02 | done | — | workplans/NK-WP-0036-restore-user-portal-client-registration.md | +| task | NK-WP-0036-T03 | done | — | workplans/NK-WP-0036-restore-user-portal-client-registration.md | +| task | NK-WP-0036-T04 | done | — | workplans/NK-WP-0036-restore-user-portal-client-registration.md | +| task | NK-WP-0036-T05 | done | — | workplans/NK-WP-0036-restore-user-portal-client-registration.md | +| task | NK-WP-0036-T06 | done | — | workplans/NK-WP-0036-restore-user-portal-client-registration.md | +| task | NK-WP-0037-T01 | done | — | workplans/NK-WP-0037-vergabe-company-welcome.md | +| task | NK-WP-0037-T02 | done | — | workplans/NK-WP-0037-vergabe-company-welcome.md | +| task | NK-WP-0038-T01 | done | — | workplans/NK-WP-0038-tenant-scoped-identity-lifecycle.md | +| task | NK-WP-0038-T02 | done | — | workplans/NK-WP-0038-tenant-scoped-identity-lifecycle.md | +| task | NK-WP-0039-T01 | done | — | workplans/NK-WP-0039-flex-auth-access-engine-coordinate-intake.md | +| task | NK-WP-0039-T02 | done | — | workplans/NK-WP-0039-flex-auth-access-engine-coordinate-intake.md | +| task | NK-WP-0039-T03 | done | — | workplans/NK-WP-0039-flex-auth-access-engine-coordinate-intake.md | +| task | NK-WP-0039-T04 | done | — | workplans/NK-WP-0039-flex-auth-access-engine-coordinate-intake.md | +| task | NK-WP-0040-T01 | done | — | workplans/NK-WP-0040-execution-attribution-receipt.md | +| task | NK-WP-0040-T02 | wait | — | workplans/NK-WP-0040-execution-attribution-receipt.md | +| task | NK-WP-0041-T01 | done | — | workplans/NK-WP-0041-onboarding-journey-usability.md | +| task | NK-WP-0041-T02 | done | — | workplans/NK-WP-0041-onboarding-journey-usability.md | +| task | NK-WP-0041-T03 | done | — | workplans/NK-WP-0041-onboarding-journey-usability.md | +| task | NK-WP-0042-T01 | done | — | workplans/NK-WP-0042-workload-mfa-step-up.md | +| task | NK-WP-0042-T02 | cancel | — | workplans/NK-WP-0042-workload-mfa-step-up.md | +| task | NK-WP-0043-T01 | done | — | workplans/NK-WP-0043-cadence-assessment-and-operating-guidance.md | +| task | NK-WP-0043-T02 | done | — | workplans/NK-WP-0043-cadence-assessment-and-operating-guidance.md | +| task | NK-WP-0043-T03 | done | — | workplans/NK-WP-0043-cadence-assessment-and-operating-guidance.md | +| task | NK-WP-0044-T01 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0044-T02 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0044-T03 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0044-T04 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0044-T05 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0044-T06 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0044-T07 | done | — | workplans/NK-WP-0044-runbook-packs-for-runbook-tutorials.md | +| task | NK-WP-0045-T01 | done | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T02 | done | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T03 | done | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T04 | done | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T05 | done | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0045-T06 | done | — | workplans/NK-WP-0045-root-grant-custody-record.md | +| task | NK-WP-0046-T01 | done | — | workplans/NK-WP-0046-secrets-engine-openbao-client-registration.md | +| task | NK-WP-0046-T02 | done | — | workplans/NK-WP-0046-secrets-engine-openbao-client-registration.md | +| task | NK-WP-0046-T03 | done | — | workplans/NK-WP-0046-secrets-engine-openbao-client-registration.md | +| task | NK-WP-0047-T01 | done | — | workplans/NK-WP-0047-platform-password-reset-mail.md | +| task | NK-WP-0047-T02 | done | — | workplans/NK-WP-0047-platform-password-reset-mail.md | +| task | NK-WP-0047-T03 | done | — | workplans/NK-WP-0047-platform-password-reset-mail.md | +| task | NK-WP-0048-T01 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T02 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T03 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T04 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T05 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T06 | wait | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T07 | wait | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T08 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T09 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T10 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T11 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T12 | todo | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T13 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T14 | progress | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T15 | wait | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T16 | todo | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T17 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T18 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T19 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T20 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T21 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T22 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T23 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T24 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T25 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T26 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T27 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T28 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T29 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T30 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0048-T31 | done | — | workplans/NK-WP-0048-security-case-types.md | +| task | NK-WP-0049-T01 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T02 | progress | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T03 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T04 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T05 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T06 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T07 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T08 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T09 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T10 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T11 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T12 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T13 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T14 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T15 | progress | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T16 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T17 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T18 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T19 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T20 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T21 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T22 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T23 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T24 | todo | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T25 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T26 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T27 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T28 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T29 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T30 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T31 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T32 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T33 | wait | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T34 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T35 | progress | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T36 | progress | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T37 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0049-T38 | done | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md | +| task | NK-WP-0050-T01 | done | — | workplans/NK-WP-0050-playwright-consumer-registration.md | +| task | NK-WP-0050-T02 | progress | — | workplans/NK-WP-0050-playwright-consumer-registration.md | +| task | NK-WP-0050-T03 | wait | — | workplans/NK-WP-0050-playwright-consumer-registration.md | +| task | NK-WP-0051-T01 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md | +| task | NK-WP-0051-T02 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md | +| task | NK-WP-0051-T03 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md | +| task | NK-WP-0051-T04 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md | +| task | NK-WP-0051-T05 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md | +| task | NK-WP-0051-T06 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md | +| intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md | +| intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md | +| intake | NET-IN-0001 | open | — | intakes/intakes.md | +| intake | NET-IN-0002 | open | — | intakes/intakes.md | +| intake | NET-IN-0003 | open | — | intakes/intakes.md | +| intake | NET-IN-0004 | open | — | intakes/intakes.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/originals.json new file mode 100644 index 00000000..1e3b06c0 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-net-kingdom/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 f60f8bad019e23e6f7e0e074745da0bb2fcbb870 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 76a6b7fc304c508f1b50010cb72d892826c6a831 0\tWORK-RECORDS.md" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/consistency.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/consistency.stderr.txt new file mode 100644 index 00000000..3345563f --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/consistency.stderr.txt @@ -0,0 +1 @@ +WARN: git commit failed for writeback: Generated-only commits rejected: staged diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/projection.stderr.txt b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/projection.stderr.txt new file mode 100644 index 00000000..e69de29b diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/.custodian-brief.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/.custodian-brief.md.worktree new file mode 100644 index 00000000..1f9b6fae --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/.custodian-brief.md.worktree @@ -0,0 +1,47 @@ + +# Custodian Brief — railiance-apps + +**Domain:** financials +**Last synced:** 2026-10-17 10:13 UTC +**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* + +## Active Workstreams + +### Forgejo sign-in through NetKingdom, before the forge closes +Progress: 1/5 done | workplan_id: `f6b1d6f6-0abb-5774-87b9-bf3cfb640a3b` + +**Open tasks:** +- ! T01 — Make the local administrator a sealed break-glass `13cd3aec` + *(wait: Break-glass done (T01); needs the NetKingdom client registered with its secret in custody (KEY-WP-0038-T02).)* +- ! T02 — Add the NetKingdom authentication source `81f072aa` + *(wait: Linking and team mapping follow a working authentication source.)* +- ! T03 — Link accounts and map groups to teams `32c54737` + *(wait: Restricting local password sign-in is a founder decision once NetKingdom sign-in is proven.)* +- ! T04 — Decide on local password sign-in `728786c9` + *(wait: Waits for net-kingdom's answer to the Apps 1.3 needs-change record (the-custodian docs/changes/netkingdom-target-2026-10-17/nk48-1.3-owner-review/owner-review-railiance-apps.json: RAPPS-1.3-C1..C3) and the re-frozen 1.3 candidate.)* + +### Coulomb-social persistent personal workspace release +Progress: 3/4 done | workplan_id: `79abacf8-361e-51ab-829d-40dec8e142d1` + +**Open tasks:** +- ! T04 — Personal sign-in and content acceptance `8bc4962a` + +### Deploy and recover the first invited Vergabe company pilot +Progress: 2/3 done | workplan_id: `c7fdaa7e-cab8-5d1d-86c2-f1aad7927c57` + +**Open tasks:** +- ! Demonstrate restart, isolated restore, rollback and operating ownership `dd069c6d` + *(wait: Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery point, isolated restored workflow, rollback evidence and support ownership. September 25 proves database restore and restart only.)* + +## Inbox Hygiene + +**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start. +**Missing thread_id:** 2 unread message(s) lack supersession chains. + +--- +## MCP Orientation (when available) + +If the state-hub MCP server is reachable, call: +`get_domain_summary("financials")` +This provides richer cross-domain context. +If the MCP call fails, use this file as your orientation source. diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..89c6d25c --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,48 @@ +# Work Records — railiance-apps + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | RAPPS-WP-0001 | finished | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| workplan | RAPPS-WP-0002 | finished | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| workplan | RAPPS-WP-0003 | finished | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| workplan | RAPPS-WP-0014 | blocked | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| workplan | RAPPS-WP-0015 | active | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| workplan | RAPPS-WP-0016 | active | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| workplan | RAPPS-WP-0017 | finished | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0001-T01 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T02 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T03 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T04 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0001-T05 | done | — | workplans/RAPPS-WP-0001-cnpg-backup-scheduledbackup-coverage.md | +| task | RAPPS-WP-0002-T01 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T02 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T03 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T04 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T05 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T06 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0002-T07 | done | — | workplans/RAPPS-WP-0002-railiance01-activity-core-backup-automation.md | +| task | RAPPS-WP-0003-T01 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T02 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T03 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0003-T04 | done | — | workplans/RAPPS-WP-0003-policy-nexus-production-binding.md | +| task | RAPPS-WP-0014-T01 | done | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0014-T02 | done | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0014-T03 | wait | — | workplans/RAPPS-WP-0014-vergabe-invited-pilot.md | +| task | RAPPS-WP-0015-T01 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T02 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T03 | done | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0015-T04 | wait | — | workplans/RAPPS-WP-0015-coulomb-personal-content-release.md | +| task | RAPPS-WP-0016-T01 | done | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T02 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T03 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T04 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0016-T05 | wait | — | workplans/RAPPS-WP-0016-forgejo-netkingdom-login.md | +| task | RAPPS-WP-0017-T01 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0017-T02 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | +| task | RAPPS-WP-0017-T03 | done | — | workplans/RAPPS-WP-0017-reuse-private-reader-release.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/originals.json new file mode 100644 index 00000000..415362e8 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/activation-r2/publish-railiance-apps/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 1f9b6fae4362945f96aa9a2a9647be9c83d8296a 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 89c6d25cfe29035a2e0ad71113c31b89338b0cc3 0\tWORK-RECORDS.md" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/first-add-failure.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/first-add-failure.json new file mode 100644 index 00000000..8c8cc108 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/first-add-failure.json @@ -0,0 +1,8 @@ +{ + "stage": "git add explicit paths", + "exit_code": 1, + "reason": "The empty checker-build.log is ignored by repository policy; retain locally and exclude it from the source publication list.", + "proposal_revision_changed": false, + "source_and_semantic_inputs_changed": false, + "retry": "retry-r2/publication-inputs.json" +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/.custodian-brief.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/.custodian-brief.md.worktree new file mode 100644 index 00000000..6aad3a57 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/.custodian-brief.md.worktree @@ -0,0 +1,62 @@ + +# Custodian Brief — the-custodian + +**Domain:** infotech +**Last synced:** 2026-10-15 23:45 UTC +**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* + +## Active Workstreams + +### NetKingdom target security architecture and SEC-DSM implementation +Progress: 2/6 done | workplan_id: `dfadb19b-445e-59c6-bcd6-48e87b912c52` + +**Open tasks:** +- ► Close source defects and reconcile uncovered lifecycle gaps `87637402` +- ► Coordinate self-service Playwright identity delivery `ed8b909a` +- ► Establish the target architecture and drive the restructuring `6aca534c` +- · Verify native closure against every requirement `82378b0f` + +### Separate agent credentials and establish supervised privileged execution +Progress: 2/5 done | workplan_id: `a98a9f34-83b4-5c8c-8107-e05f7806d50d` + +**Open tasks:** +- ! Build and hand out the agent identity `4b88b0b7` + *(wait: Await GLAS-WP-0012 (glas-harness) production acceptance of the local supervised profile; then railiance-platform RBAC, railiance-enablement k3s config, railiance-infra principal mapping and ops-warden certificate issuance.)* +- ! Fleet guidance and harness guards `90725511` + *(wait: Await CUST-WP-0073-T02: the verified agent identity and execution path must exist before it can be documented; Codex/Grok read-denial guard needs glas-harness or harness-owner delivery.)* +- ! Rotate what was exposed `1b41b532` + *(wait: Deferred by founder decision 2026-09-24; reopened only by the founder on one of the three triggers below, in one attended rotation window.)* + +### Size Railiance workloads from actual demand and establish a weekly allocation review +Progress: 1/5 done | workplan_id: `2249bddb-7524-5add-bd5c-c4163a6ca0f3` + +**Open tasks:** +- ! Measure the Vergabe prototype under representative pilot use `82192370` + *(wait: Await RAPPS-WP-0014-T03 (blocked, needs_human): populated two-user/document workflow run by Bernd and the company contact, giving representative load for p95 <= 2s / zero failures.)* +- ! Review ecosystem allocations and reserve operating room `6dc67558` + *(wait: Await CUST-WP-0071-T02 representative sample; Forgejo/runner demand and zero-request workload review need owner input (railiance-cluster, railiance-forge, resource-control).)* +- ! Apply accepted sizing changes and verify their effects `944f98e2` + *(wait: Await reviewed allocation proposals and applicable workload-owner authority.)* +- ! Establish the regular weekly workload-demand and allocation assessment `20ddd4d7` + *(wait: Await the repeatable observation and accepted sizing/review procedure.)* + +### Deterministic security flow: standing authorizations, flow report, and agent re-engagement +Progress: 3/7 done | workplan_id: `ab288f92-d364-5c24-9362-aee451f266c3` + +**Open tasks:** +- ! Schedule the flow report and decision sync `1be0569c` + *(wait: Activity Core accepted the schedule in ACTIVITY-WP-0047. Await claiming rein workstation/hub acceptance, owner activation and the first unassisted fire with report/checkpoint evidence.)* +- ! Encode the standing change rule as a policy-nexus guardrail `5dd52156` + *(wait: policy-nexus owns guardrail publication; handoff written as PNEX-WP-0006.)* +- ! Stop agent-authored index and sync commits `8a3dc219` + *(wait: Local guard and repeatable shared-hook installation are implemented. Fleet generator adoption and the required full week of clean history remain unverified; repo-manager owner acceptance is needed.)* +- ! Attended window #1 `e3da807f` + *(wait: Partly done 2026-10-11: list cut from 14 to 3; U05-U07 accepted, U08 waits on KEY-WP-0040-T01. Remaining founder acts: USER-WP-0026-T03 readback, RPF-WP-0044-T08 coulombcore check, the U08 re-run, and Sol's added RPF-WP-0044-T04 issuer login.)* + +--- +## MCP Orientation (when available) + +If the state-hub MCP server is reachable, call: +`get_domain_summary("infotech")` +This provides richer cross-domain context. +If the MCP call fails, use this file as your orientation source. diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..6dc81634 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,536 @@ +# Work Records — the-custodian + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | CUST-WP-ADHOC-2026-05-02 | done | — | workplans/ADHOC-2026-05-02.md | +| workplan | CUST-WP-ADHOC-2026-07-02 | finished | — | workplans/ADHOC-2026-07-02.md | +| workplan | CUST-WP-ADHOC-2026-08-25-RETIRED | finished | — | workplans/ADHOC-2026-08-25-retired.md | +| workplan | CUST-WP-ADHOC-2026-08-25 | finished | — | workplans/ADHOC-2026-08-25.md | +| workplan | CUST-WP-ADHOC-2026-09-06 | finished | — | workplans/ADHOC-2026-09-06.md | +| workplan | CUST-WP-0000 | finished | — | workplans/CUST-WP-0000-state-hub-v0.1-build-deploy.md | +| workplan | CUST-WP-0000b | finished | — | workplans/CUST-WP-0000b-state-hub-v0.2-decisions-dependencies.md | +| workplan | CUST-WP-0001 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| workplan | CUST-WP-0002 | finished | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| workplan | CUST-WP-0004 | finished | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| workplan | CUST-WP-0005 | finished | — | workplans/CUST-WP-0005-dynamic-domains.md | +| workplan | CUST-WP-0006 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| workplan | CUST-WP-0007 | finished | — | workplans/CUST-WP-0007-gems-migration.md | +| workplan | CUST-WP-0008 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| workplan | CUST-WP-0009 | finished | — | workplans/CUST-WP-0009-human-interventions.md | +| workplan | CUST-WP-0010 | finished | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| workplan | CUST-WP-0010b | finished | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| workplan | CUST-WP-0013 | finished | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| workplan | CUST-WP-0015 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| workplan | CUST-WP-0016 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| workplan | CUST-WP-0017 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| workplan | CUST-WP-0018 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| workplan | CUST-WP-0019 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| workplan | CUST-WP-0020 | done | — | workplans/CUST-WP-0020-test-suite.md | +| workplan | CUST-WP-0021 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| workplan | CUST-WP-0022 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| workplan | CUST-WP-0023 | done | — | workplans/CUST-WP-0023-tpsc.md | +| workplan | CUST-WP-0024 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| workplan | CUST-WP-0026 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| workplan | CUST-WP-0027 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| workplan | CUST-WP-0029 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| workplan | CUST-WP-0030 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| workplan | CUST-WP-0031 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| workplan | CUST-WP-0032 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| workplan | CUST-WP-0033 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| workplan | CUST-WP-0039 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| workplan | CUST-WP-0040 | finished | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| workplan | CUST-WP-0041 | done | — | workplans/CUST-WP-0041-api-performance.md | +| workplan | CUST-WP-0043 | finished | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| workplan | CUST-WP-0044 | finished | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| workplan | CUST-WP-0045 | finished | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| workplan | CUST-WP-0069 | finished | — | workplans/CUST-WP-0045-cutover-runbook.md | +| workplan | CUST-WP-0046 | finished | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| workplan | CUST-WP-0047 | finished | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| workplan | CUST-WP-0048 | finished | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| workplan | CUST-WP-0049 | finished | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| workplan | CUST-WP-0050 | finished | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| workplan | CUST-WP-0051 | finished | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| workplan | CUST-WP-0052 | finished | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| workplan | CUST-WP-0053 | finished | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| workplan | CUST-WP-0055 | finished | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| workplan | CUST-WP-0056 | finished | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| workplan | CUST-WP-0059 | finished | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| workplan | CUST-WP-0060 | finished | — | workplans/CUST-WP-0060-work-record-canonization.md | +| workplan | CUST-WP-0061 | finished | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| workplan | CUST-WP-0062 | finished | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| workplan | CUST-WP-0063 | finished | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| workplan | CUST-WP-0064 | finished | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| workplan | CUST-WP-0065 | finished | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| workplan | CUST-WP-0066 | finished | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| workplan | CUST-WP-0067 | finished | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| workplan | CUST-WP-0068 | finished | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| workplan | CUST-WP-0070 | finished | — | workplans/CUST-WP-0070-publication-repo-category.md | +| workplan | CUST-WP-0071 | blocked | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| workplan | CUST-WP-0072 | finished | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| workplan | CUST-WP-0073 | blocked | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| workplan | CUST-WP-0074 | finished | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| workplan | CUST-WP-0075 | finished | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| workplan | CUST-WP-0076 | finished | — | workplans/CUST-WP-0076-provisioning-window-cadence.md | +| workplan | CUST-WP-0077 | finished | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| workplan | CUST-WP-0078 | finished | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| workplan | CUST-WP-0079 | blocked | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| workplan | CUST-WP-0080 | active | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| workplan | CUST-WP-0081 | finished | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| workplan | THE-WP-0001 | finished | — | workplans/THE-WP-0001-federation-interface.md | +| task | CUST-WP-ADHOC-2026-05-02-T01 | done | — | workplans/ADHOC-2026-05-02.md | +| task | CUST-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md | +| task | ADHOC-2026-08-25-T01 | done | — | workplans/ADHOC-2026-08-25-retired.md | +| task | CUST-WP-ADHOC-2026-08-25-T01 | done | — | workplans/ADHOC-2026-08-25.md | +| task | CUST-WP-ADHOC-2026-09-06-T01 | done | — | workplans/ADHOC-2026-09-06.md | +| task | CUST-WP-0001-T01 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| task | CUST-WP-0001-T02 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| task | CUST-WP-0002-T01 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T02 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T03 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T04 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T05 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T06 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T07 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T08 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T09 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T10 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T11 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T12 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T13 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T14 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T15 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0004-T01 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T02 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T03 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T04 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T05 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T06 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T07 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T08 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T09 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T10 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0005-T01 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T02 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T03 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T04 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T05 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T06 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T07 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T08 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T09 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T10 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T11 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | T01 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T02 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T03 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T04 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T05 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T01 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T02 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T03 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T04 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T05 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T06 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T07 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T08 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T09 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T10 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T11 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T12 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T13 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T14 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T15 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T16 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T17 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | CUST-WP-0008-T01 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T02 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T03 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T04 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0009-T1 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0009-T2 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0009-T3 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0010-T1 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010-T2 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010-T3 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010b-T01 | done | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| task | CUST-WP-0010b-T02 | done | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| task | CUST-WP-0013-T01 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T02 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T03 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T04 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T05 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T06 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T07 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T08 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T09 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T10 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T11 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T12 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T13 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T14 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0015-T01 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T02 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T03 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T04 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T05 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0016-T01 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T02 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T03 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T04 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T05 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0017-T01 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T02 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T03 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T04 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T05 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T06 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0018-T01 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T02 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T03 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T04 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T05 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T06 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T07 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0019-T01 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0019-T02 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0019-T03 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0020-T01 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T02 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T03 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T04 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T05 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0021-T01 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T02 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T03 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T04 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T05 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0022-T01 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T02 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T03 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T04 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T05 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T06 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T07 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T08 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T09 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T10 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0023-T01 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T02 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T03 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T04 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T05 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T06 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T07 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T08 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T09 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T10 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0024-T01 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T02 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T03 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T04 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T05 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0026-T01 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T02 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T03 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T04 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T05 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0027-T01 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T02 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T03 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T04 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T05 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0029-T01 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T02 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T03 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T04 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T05 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T06 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T07 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T08 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | T01 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T02 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T03 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T04 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T05 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T06 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T07 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T08 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T09 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T01 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T02 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T03 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T04 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T05 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T06 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T07 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | CUST-WP-0032-T01 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T02 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T03 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T04 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T05 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T06 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T07 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T08 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T09 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T10 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T11 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T12 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T13 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T14 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T15 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0033-T01 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T02 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T03 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T04 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T05 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T06 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0039-T1 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T2 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T3 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T4 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T5 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T6 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | T01 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T02 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T03 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T04 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T05 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T06 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | CUST-WP-0041-T1 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T2 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T3 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T4 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0043-T01 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T02 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T03 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T04 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T05 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T06 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T07 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T08 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T09 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0044-T01 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T02 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T03 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T04 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T05 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T06 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0045-T01 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T02 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T03 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T04 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T05 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T06 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T07 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T08 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0046-T01 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T02 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T03 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T04 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T05 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T06 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T07 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0047-T01 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T02 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T03 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T04 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T05 | cancel | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T06 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T07 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0048-T01 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T02 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T03 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T04 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T05 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T06 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T07 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T08 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0049-T01 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T02 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T03 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T04 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T05 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T06 | cancel | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0050-T01 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T02 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T03 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T04 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T05 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T06 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T07 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T08 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T09 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T10 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T11 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0051-T01 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T02 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T03 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T04 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T05 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T06 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T07 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T08 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0052-T01 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T02 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T03 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T04 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T05 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T06 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T07 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0053-T01 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T02 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T03 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T04 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T05 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0055-T01 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T02 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T03 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T04 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T05 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T06 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T07 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T08 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0056-T01 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0056-T02 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0056-T03 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0059-T01 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T02 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T03 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T04 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T05 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T06 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0060-T01 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T02 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T03 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T04 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T05 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T06 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T07 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0061-T01 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T02 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T03 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T04 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T05 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T06 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0062-T01 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T02 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T03 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T04 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T05 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T06 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0063-T01 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T02 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T03 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T04 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T05 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0064-T01 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T02 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T03 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T04 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0065-T01 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T02 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T03 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T04 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0066-T01 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0066-T02 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0066-T03 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0067-T01 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T02 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T03 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T04 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T05 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T06 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T07 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T08 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T09 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T10 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0068-T01 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T02 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T03 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T04 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T05 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T06 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T07 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T08 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T09 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0070-T01 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0070-T02 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0070-T03 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0071-T01 | done | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T02 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T03 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T04 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T05 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0072-T01 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T02 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T03 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T04 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0073-T01 | done | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T02 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T03 | done | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T04 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T05 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0074-T01 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T02 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T03 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T04 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T05 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T06 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0075-T01 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T02 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T03 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T04 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T05 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T06 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0076-T01 | done | — | workplans/CUST-WP-0076-provisioning-window-cadence.md | +| task | CUST-WP-0077-T01 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T02 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T03 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T04 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T05 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0078-T01 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T02 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T03 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T04 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0079-T01 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T02 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T03 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T04 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T05 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T06 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T07 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0080-T01 | done | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T02 | done | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T03 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T04 | todo | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T05 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T06 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0081-T01 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | CUST-WP-0081-T02 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | CUST-WP-0081-T03 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | THE-WP-0001-T01 | done | — | workplans/THE-WP-0001-federation-interface.md | +| task | THE-WP-0001-T02 | done | — | workplans/THE-WP-0001-federation-interface.md | +| intake | CUST-IN-0001 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0002 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0003 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0004 | routed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0005 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0006 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0007 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0008 | closed | blue | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0009 | closed | blue | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0010 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0011 | routed | red | intakes.md | +| intake | CUST-IN-0012 | closed | green | intakes.md | +| intake | CUST-IN-0013 | closed | blue | intakes.md | +| intake | CUST-IN-0014 | closed | blue | intakes.md | +| intake | CUST-IN-0015 | open | blue | intakes.md | +| intake | CUST-IN-0016 | open | green | intakes.md | +| intake | CUST-IN-0017 | open | green | intakes.md | +| intake | CUST-IN-0018 | open | green | intakes.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/originals.json new file mode 100644 index 00000000..5a19a7b4 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 6aad3a5788fad3abd60c0f1270f160062dc0168b 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 d535e0f2dcc3d454e041a8f1b547b5dea4493380 0\tWORK-RECORDS.md" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-inputs.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-inputs.json new file mode 100644 index 00000000..f00745e9 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/publication-inputs.json @@ -0,0 +1,167 @@ +{ + "owner": "the-custodian", + "base_revision": "bab3dd1c9df67f344fb207904a8edb3896bf4bd1", + "message": "Prepare and verify the Forgejo public-PKCE build profile for scoped review", + "files": [ + { + "path": ".kaizen/agents/custodian-codex/supervision.json", + "sha256": "6da87d32ad01919507beaf32248586fa2996337034ec9e39ad96bf3b975ac6bf" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/README.md", + "sha256": "865e22f76f3c5a66dfd5ee5b39e735ef99c7e40429515f465bd1b9fabe74ed1e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/check_upstream_release.py", + "sha256": "bf4e0bfe5f233d988df566fafb56c869bb809123204068460acc3d7ec0668f40" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/checker-build.log", + "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/checker-reproduction.json", + "sha256": "196d654fb711ff9e4fbd4e89a3a79fe61f77a74208942e9c6c8be5d417699e40" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/client-public-build.yaml", + "sha256": "942d642a40bf76f11d09336fa6e90f861b5fccffa7ba6143bdcbfa8a1498bb6b" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/client.yaml", + "sha256": "52e21883f677e69c99813eca8f273cea06e598c0475e5d51959251ba05161f53" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/decision-request.json", + "sha256": "c56938c703a04a6b5c7a274c48d29e762042f6e3c2be318f605d96ba54705419" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/delivery-metadata.json", + "sha256": "883d25d0c42904b6e1c450572252664677c23bdc7e50076551db74e1be242940" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/deployment-preconditions.json", + "sha256": "940594b48dfc024ed3eb83f86f051ee539b2ad90a18aa088cfa73483618e529e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/execution-steps.json", + "sha256": "98cb80a42e22315a7e846418f5157091c2e246ed3eb86e26dc46a3d5bec69ee6" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/forgejo-auth-source-inventory.json", + "sha256": "84c005ebf6cab6d04108b05b899f941479f4cc4b98719447cebfc2d341fdd0a1" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/forgejo-values.postimage.yaml", + "sha256": "210e6e450ad9fbe7e25ad7ec8ae5d4e9bf9bbc9e7f65d52ac670a66a9dd79d06" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/helm-render-validation.json", + "sha256": "0b458d9f3f4184323c890c063db7e52f715af56084b9df0512050cb466a7941c" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/issuer-start-probe.json", + "sha256": "d6599ea6bba54295937a1a6371768c8464139f00b3265cc5367f891c6b78d4d1" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/native-signin-settings.json", + "sha256": "92f4be74ea1a2b05822896018b3e40ec17be379c7b27d44f7d077b937891eb0e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/net-kingdom-client.postimage.yaml", + "sha256": "3210f662cf65d54e912969ad03767053baf5c867402fc5f24b7017fb3b82d8e1" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/prepublication-validation.json", + "sha256": "a85a9256bf87a7f321fd7b05ef461c7f4eb28a698a5a0d25cad705bb53d3940e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/proposal.json", + "sha256": "61eff8b488674e75510133fe118de86d895be04c033e109c3597c03ed2ecf30e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/proposal.sha256", + "sha256": "49ad6b5e7bccc88ffe3630454facb3ea49a6663cb42ad423b548d2adc4d52754" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-attempt1.json", + "sha256": "3966e5e9f3db2160cd0ec05e1c32a3f40c80e3448b1147c0bb80d9831748492f" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-attempt1.jsonl", + "sha256": "c36143e6ca9285b1f596df3c0e1873b767b2cfda70c2620cd63b43333e909ce2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-attempt2.json", + "sha256": "9e341cd83f74d64d538b0481109c477796a477a268688abc53c096f332d708e1" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-attempt2.jsonl", + "sha256": "491ebcaf534083308c9bb5ca4df3c3f0e3e52ee98f1c5c614b88aaa8ffe82172" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-attempt3.json", + "sha256": "663cafc1ebf62d3a46c47476e24d989f1077454919e032af5a6995164d89aef5" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-attempt3.jsonl", + "sha256": "4713adec78a038964aff5c2b2c30b7ea9adda7582e9aee9edfbef97863bae5b2" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-baseline.json", + "sha256": "c29bd2100de02383507a06340ab5a71ded1743f121d84bb4848f72bfb3a06330" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/protocol-result.json", + "sha256": "0fe021cacb6c8db0727ca8e4f31fa29960549fba3dd11871de00453667f40b0e" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/public-build-values.yaml", + "sha256": "5239c5c635d2467d7b3f4ea90e85ac71819afcca6b07f609c56b7d22b36ca1b6" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/public-registration-dry-run.json", + "sha256": "4dc8aaab56534b10a7c58e32fe5f20d379645cbdd2005278a2eedfb9b1fab6b3" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/public-registration-inspection.json", + "sha256": "6dba568b9ffa3cc8dc38b773344d1848ed00112c171352deb55d0897fd6299ca" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/public_pkce_interop_test.go", + "sha256": "8968c617d83bb041f0c2a4c251bf1efc88db45036f51c6eb55c5058bdb662aed" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/railiance-apps.patch", + "sha256": "65f1702d3450512f1b022992f0ec31953ae1e748e70d6e7d69fc2ddd64267312" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/rebuild_checker.py", + "sha256": "385a2590ecd63a59aa0189b0fc9501d2b727a4edf991c560343beff5fb106a2d" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/registration-inspection.json", + "sha256": "793f65acfc8e4f59224bc29dc48eec0fdef2b587cd16dedc4d3d06a3301ef098" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/run_public_protocol.py", + "sha256": "5d9ad425ebfafa317088ec8c2ed571d0398a3b131b0314af8658f345114b3d88" + }, + { + "path": "docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/upstream-release-result.json", + "sha256": "e4da5c8f605a871004be87fcd4e38b7bfaf9f3ca00922b8d1485e1226101e823" + }, + { + "path": "docs/security-close-down-checklist.md", + "sha256": "5163f275b0a614de60086aa4593b6a093751ed1a1d8353a18fec545f41454d9b" + }, + { + "path": "workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md", + "sha256": "4d65cdf6daa7855fed37277cdb63ce42ac59c35adee90dc0d89437ae835cb105" + }, + { + "path": "workplans/CUST-WP-0082-netkingdom-security-hardening.md", + "sha256": "481b13f6c5c7ef3a2120ddedcfbcdeaeb8f5543a4737c08afdec097b2b5ec3d2" + } + ] +} diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/.custodian-brief.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/.custodian-brief.md.worktree new file mode 100644 index 00000000..6aad3a57 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/.custodian-brief.md.worktree @@ -0,0 +1,62 @@ + +# Custodian Brief — the-custodian + +**Domain:** infotech +**Last synced:** 2026-10-15 23:45 UTC +**State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* + +## Active Workstreams + +### NetKingdom target security architecture and SEC-DSM implementation +Progress: 2/6 done | workplan_id: `dfadb19b-445e-59c6-bcd6-48e87b912c52` + +**Open tasks:** +- ► Close source defects and reconcile uncovered lifecycle gaps `87637402` +- ► Coordinate self-service Playwright identity delivery `ed8b909a` +- ► Establish the target architecture and drive the restructuring `6aca534c` +- · Verify native closure against every requirement `82378b0f` + +### Separate agent credentials and establish supervised privileged execution +Progress: 2/5 done | workplan_id: `a98a9f34-83b4-5c8c-8107-e05f7806d50d` + +**Open tasks:** +- ! Build and hand out the agent identity `4b88b0b7` + *(wait: Await GLAS-WP-0012 (glas-harness) production acceptance of the local supervised profile; then railiance-platform RBAC, railiance-enablement k3s config, railiance-infra principal mapping and ops-warden certificate issuance.)* +- ! Fleet guidance and harness guards `90725511` + *(wait: Await CUST-WP-0073-T02: the verified agent identity and execution path must exist before it can be documented; Codex/Grok read-denial guard needs glas-harness or harness-owner delivery.)* +- ! Rotate what was exposed `1b41b532` + *(wait: Deferred by founder decision 2026-09-24; reopened only by the founder on one of the three triggers below, in one attended rotation window.)* + +### Size Railiance workloads from actual demand and establish a weekly allocation review +Progress: 1/5 done | workplan_id: `2249bddb-7524-5add-bd5c-c4163a6ca0f3` + +**Open tasks:** +- ! Measure the Vergabe prototype under representative pilot use `82192370` + *(wait: Await RAPPS-WP-0014-T03 (blocked, needs_human): populated two-user/document workflow run by Bernd and the company contact, giving representative load for p95 <= 2s / zero failures.)* +- ! Review ecosystem allocations and reserve operating room `6dc67558` + *(wait: Await CUST-WP-0071-T02 representative sample; Forgejo/runner demand and zero-request workload review need owner input (railiance-cluster, railiance-forge, resource-control).)* +- ! Apply accepted sizing changes and verify their effects `944f98e2` + *(wait: Await reviewed allocation proposals and applicable workload-owner authority.)* +- ! Establish the regular weekly workload-demand and allocation assessment `20ddd4d7` + *(wait: Await the repeatable observation and accepted sizing/review procedure.)* + +### Deterministic security flow: standing authorizations, flow report, and agent re-engagement +Progress: 3/7 done | workplan_id: `ab288f92-d364-5c24-9362-aee451f266c3` + +**Open tasks:** +- ! Schedule the flow report and decision sync `1be0569c` + *(wait: Activity Core accepted the schedule in ACTIVITY-WP-0047. Await claiming rein workstation/hub acceptance, owner activation and the first unassisted fire with report/checkpoint evidence.)* +- ! Encode the standing change rule as a policy-nexus guardrail `5dd52156` + *(wait: policy-nexus owns guardrail publication; handoff written as PNEX-WP-0006.)* +- ! Stop agent-authored index and sync commits `8a3dc219` + *(wait: Local guard and repeatable shared-hook installation are implemented. Fleet generator adoption and the required full week of clean history remain unverified; repo-manager owner acceptance is needed.)* +- ! Attended window #1 `e3da807f` + *(wait: Partly done 2026-10-11: list cut from 14 to 3; U05-U07 accepted, U08 waits on KEY-WP-0040-T01. Remaining founder acts: USER-WP-0026-T03 readback, RPF-WP-0044-T08 coulombcore check, the U08 re-run, and Sol's added RPF-WP-0044-T04 issuer login.)* + +--- +## MCP Orientation (when available) + +If the state-hub MCP server is reachable, call: +`get_domain_summary("infotech")` +This provides richer cross-domain context. +If the MCP call fails, use this file as your orientation source. diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/WORK-RECORDS.md.worktree b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/WORK-RECORDS.md.worktree new file mode 100644 index 00000000..6dc81634 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/WORK-RECORDS.md.worktree @@ -0,0 +1,536 @@ +# Work Records — the-custodian + +> Generated by `statehub fix-consistency` (CUST-WP-0061-T04, work-record +> stage 3). Do not edit by hand — edit the source file/block listed for +> each record and re-run fix-consistency to refresh this index. Archived +> workplans are omitted; closed decisions/intakes/engagements stay listed +> so recently-resolved work is still visible. [auto] + +| Kind | ID | Status | Lane | Source | +| --- | --- | --- | --- | --- | +| workplan | CUST-WP-ADHOC-2026-05-02 | done | — | workplans/ADHOC-2026-05-02.md | +| workplan | CUST-WP-ADHOC-2026-07-02 | finished | — | workplans/ADHOC-2026-07-02.md | +| workplan | CUST-WP-ADHOC-2026-08-25-RETIRED | finished | — | workplans/ADHOC-2026-08-25-retired.md | +| workplan | CUST-WP-ADHOC-2026-08-25 | finished | — | workplans/ADHOC-2026-08-25.md | +| workplan | CUST-WP-ADHOC-2026-09-06 | finished | — | workplans/ADHOC-2026-09-06.md | +| workplan | CUST-WP-0000 | finished | — | workplans/CUST-WP-0000-state-hub-v0.1-build-deploy.md | +| workplan | CUST-WP-0000b | finished | — | workplans/CUST-WP-0000b-state-hub-v0.2-decisions-dependencies.md | +| workplan | CUST-WP-0001 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| workplan | CUST-WP-0002 | finished | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| workplan | CUST-WP-0004 | finished | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| workplan | CUST-WP-0005 | finished | — | workplans/CUST-WP-0005-dynamic-domains.md | +| workplan | CUST-WP-0006 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| workplan | CUST-WP-0007 | finished | — | workplans/CUST-WP-0007-gems-migration.md | +| workplan | CUST-WP-0008 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| workplan | CUST-WP-0009 | finished | — | workplans/CUST-WP-0009-human-interventions.md | +| workplan | CUST-WP-0010 | finished | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| workplan | CUST-WP-0010b | finished | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| workplan | CUST-WP-0013 | finished | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| workplan | CUST-WP-0015 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| workplan | CUST-WP-0016 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| workplan | CUST-WP-0017 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| workplan | CUST-WP-0018 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| workplan | CUST-WP-0019 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| workplan | CUST-WP-0020 | done | — | workplans/CUST-WP-0020-test-suite.md | +| workplan | CUST-WP-0021 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| workplan | CUST-WP-0022 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| workplan | CUST-WP-0023 | done | — | workplans/CUST-WP-0023-tpsc.md | +| workplan | CUST-WP-0024 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| workplan | CUST-WP-0026 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| workplan | CUST-WP-0027 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| workplan | CUST-WP-0029 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| workplan | CUST-WP-0030 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| workplan | CUST-WP-0031 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| workplan | CUST-WP-0032 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| workplan | CUST-WP-0033 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| workplan | CUST-WP-0039 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| workplan | CUST-WP-0040 | finished | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| workplan | CUST-WP-0041 | done | — | workplans/CUST-WP-0041-api-performance.md | +| workplan | CUST-WP-0043 | finished | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| workplan | CUST-WP-0044 | finished | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| workplan | CUST-WP-0045 | finished | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| workplan | CUST-WP-0069 | finished | — | workplans/CUST-WP-0045-cutover-runbook.md | +| workplan | CUST-WP-0046 | finished | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| workplan | CUST-WP-0047 | finished | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| workplan | CUST-WP-0048 | finished | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| workplan | CUST-WP-0049 | finished | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| workplan | CUST-WP-0050 | finished | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| workplan | CUST-WP-0051 | finished | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| workplan | CUST-WP-0052 | finished | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| workplan | CUST-WP-0053 | finished | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| workplan | CUST-WP-0055 | finished | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| workplan | CUST-WP-0056 | finished | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| workplan | CUST-WP-0059 | finished | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| workplan | CUST-WP-0060 | finished | — | workplans/CUST-WP-0060-work-record-canonization.md | +| workplan | CUST-WP-0061 | finished | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| workplan | CUST-WP-0062 | finished | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| workplan | CUST-WP-0063 | finished | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| workplan | CUST-WP-0064 | finished | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| workplan | CUST-WP-0065 | finished | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| workplan | CUST-WP-0066 | finished | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| workplan | CUST-WP-0067 | finished | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| workplan | CUST-WP-0068 | finished | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| workplan | CUST-WP-0070 | finished | — | workplans/CUST-WP-0070-publication-repo-category.md | +| workplan | CUST-WP-0071 | blocked | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| workplan | CUST-WP-0072 | finished | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| workplan | CUST-WP-0073 | blocked | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| workplan | CUST-WP-0074 | finished | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| workplan | CUST-WP-0075 | finished | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| workplan | CUST-WP-0076 | finished | — | workplans/CUST-WP-0076-provisioning-window-cadence.md | +| workplan | CUST-WP-0077 | finished | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| workplan | CUST-WP-0078 | finished | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| workplan | CUST-WP-0079 | blocked | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| workplan | CUST-WP-0080 | active | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| workplan | CUST-WP-0081 | finished | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| workplan | THE-WP-0001 | finished | — | workplans/THE-WP-0001-federation-interface.md | +| task | CUST-WP-ADHOC-2026-05-02-T01 | done | — | workplans/ADHOC-2026-05-02.md | +| task | CUST-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md | +| task | ADHOC-2026-08-25-T01 | done | — | workplans/ADHOC-2026-08-25-retired.md | +| task | CUST-WP-ADHOC-2026-08-25-T01 | done | — | workplans/ADHOC-2026-08-25.md | +| task | CUST-WP-ADHOC-2026-09-06-T01 | done | — | workplans/ADHOC-2026-09-06.md | +| task | CUST-WP-0001-T01 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| task | CUST-WP-0001-T02 | done | — | workplans/CUST-WP-0001-custodian-agent-runtime.md | +| task | CUST-WP-0002-T01 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T02 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T03 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T04 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T05 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T06 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T07 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T08 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T09 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T10 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T11 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T12 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T13 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T14 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0002-T15 | done | — | workplans/CUST-WP-0002-contribution-tracking-sbom.md | +| task | CUST-WP-0004-T01 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T02 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T03 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T04 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T05 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T06 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T07 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T08 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T09 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0004-T10 | done | — | workplans/CUST-WP-0004-ep-td-tracking.md | +| task | CUST-WP-0005-T01 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T02 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T03 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T04 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T05 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T06 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T07 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T08 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T09 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T10 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | CUST-WP-0005-T11 | done | — | workplans/CUST-WP-0005-dynamic-domains.md | +| task | T01 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T02 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T03 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T04 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T05 | done | — | workplans/CUST-WP-0006-gems-state-hub.md | +| task | T01 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T02 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T03 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T04 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T05 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T06 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T07 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T08 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T09 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T10 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T11 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T12 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T13 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T14 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T15 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T16 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | T17 | done | — | workplans/CUST-WP-0007-gems-migration.md | +| task | CUST-WP-0008-T01 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T02 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T03 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0008-T04 | done | — | workplans/CUST-WP-0008-consistency-engine.md | +| task | CUST-WP-0009-T1 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0009-T2 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0009-T3 | done | — | workplans/CUST-WP-0009-human-interventions.md | +| task | CUST-WP-0010-T1 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010-T2 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010-T3 | done | — | workplans/CUST-WP-0010-workstream-lifecycle-docs.md | +| task | CUST-WP-0010b-T01 | done | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| task | CUST-WP-0010b-T02 | done | — | workplans/CUST-WP-0010b-domain-and-repo-goals.md | +| task | CUST-WP-0013-T01 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T02 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T03 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T04 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T05 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T06 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T07 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T08 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T09 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T10 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T11 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T12 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T13 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0013-T14 | done | — | workplans/CUST-WP-0013-sbom-infra-expansion.md | +| task | CUST-WP-0015-T01 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T02 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T03 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T04 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0015-T05 | done | — | workplans/CUST-WP-0015-agent-inbox.md | +| task | CUST-WP-0016-T01 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T02 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T03 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T04 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0016-T05 | done | — | workplans/CUST-WP-0016-kaizen-agentic-integration.md | +| task | CUST-WP-0017-T01 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T02 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T03 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T04 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T05 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0017-T06 | done | — | workplans/CUST-WP-0017-scope-md-agent-and-coverage.md | +| task | CUST-WP-0018-T01 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T02 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T03 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T04 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T05 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T06 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0018-T07 | done | — | workplans/CUST-WP-0018-api-hardening-code-quality.md | +| task | CUST-WP-0019-T01 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0019-T02 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0019-T03 | done | — | workplans/CUST-WP-0019-dashboard-ux-polish.md | +| task | CUST-WP-0020-T01 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T02 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T03 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T04 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0020-T05 | done | — | workplans/CUST-WP-0020-test-suite.md | +| task | CUST-WP-0021-T01 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T02 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T03 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T04 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0021-T05 | done | — | workplans/CUST-WP-0021-multi-host-repo-paths.md | +| task | CUST-WP-0022-T01 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T02 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T03 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T04 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T05 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T06 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T07 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T08 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T09 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0022-T10 | done | — | workplans/CUST-WP-0022-capability-requests.md | +| task | CUST-WP-0023-T01 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T02 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T03 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T04 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T05 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T06 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T07 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T08 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T09 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0023-T10 | done | — | workplans/CUST-WP-0023-tpsc.md | +| task | CUST-WP-0024-T01 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T02 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T03 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T04 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0024-T05 | done | — | workplans/CUST-WP-0024-repo-doi-gate.md | +| task | CUST-WP-0026-T01 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T02 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T03 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T04 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0026-T05 | done | — | workplans/CUST-WP-0026-distributed-consistency.md | +| task | CUST-WP-0027-T01 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T02 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T03 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T04 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0027-T05 | done | — | workplans/CUST-WP-0027-capability-request-dispute.md | +| task | CUST-WP-0029-T01 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T02 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T03 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T04 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T05 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T06 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T07 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | CUST-WP-0029-T08 | done | — | workplans/CUST-WP-0029-token-consumption-tracking.md | +| task | T01 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T02 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T03 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T04 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T05 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T06 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T07 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T08 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T09 | done | — | workplans/CUST-WP-0030-dashboard-entity-list-ux.md | +| task | T01 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T02 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T03 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T04 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T05 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T06 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | T07 | done | — | workplans/CUST-WP-0031-capability-registry.md | +| task | CUST-WP-0032-T01 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T02 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T03 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T04 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T05 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T06 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T07 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T08 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T09 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T10 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T11 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T12 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T13 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T14 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0032-T15 | done | — | workplans/CUST-WP-0032-haskell-build-machine.md | +| task | CUST-WP-0033-T01 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T02 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T03 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T04 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T05 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0033-T06 | done | — | workplans/CUST-WP-0033-interface-change-registry.md | +| task | CUST-WP-0039-T1 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T2 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T3 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T4 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T5 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | CUST-WP-0039-T6 | done | — | workplans/CUST-WP-0039-dashboard-poll-optimization.md | +| task | T01 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T02 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T03 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T04 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T05 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | T06 | done | — | workplans/CUST-WP-0040-state-hub-nats-activity-core-integration.md | +| task | CUST-WP-0041-T1 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T2 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T3 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0041-T4 | done | — | workplans/CUST-WP-0041-api-performance.md | +| task | CUST-WP-0043-T01 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T02 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T03 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T04 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T05 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T06 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T07 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T08 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0043-T09 | done | — | workplans/CUST-WP-0043-state-hub-repo-extraction.md | +| task | CUST-WP-0044-T01 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T02 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T03 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T04 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T05 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0044-T06 | done | — | workplans/CUST-WP-0044-daily-statehub-wsjf-triage.md | +| task | CUST-WP-0045-T01 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T02 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T03 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T04 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T05 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T06 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T07 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0045-T08 | done | — | workplans/CUST-WP-0045-activity-core-daily-triage-runner.md | +| task | CUST-WP-0046-T01 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T02 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T03 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T04 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T05 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T06 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0046-T07 | done | — | workplans/CUST-WP-0046-hourly-recently-on-scope-activity-core.md | +| task | CUST-WP-0047-T01 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T02 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T03 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T04 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T05 | cancel | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T06 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0047-T07 | done | — | workplans/CUST-WP-0047-ops-hub-service-inventory-now-view.md | +| task | CUST-WP-0048-T01 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T02 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T03 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T04 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T05 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T06 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T07 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0048-T08 | done | — | workplans/CUST-WP-0048-hub-core-state-hub-import-refactor.md | +| task | CUST-WP-0049-T01 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T02 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T03 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T04 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T05 | done | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0049-T06 | cancel | — | workplans/CUST-WP-0049-interhub-bootstrap-access-lane.md | +| task | CUST-WP-0050-T01 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T02 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T03 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T04 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T05 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T06 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T07 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T08 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T09 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T10 | cancel | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0050-T11 | done | — | workplans/CUST-WP-0050-repo-classification-registration-redesign.md | +| task | CUST-WP-0051-T01 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T02 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T03 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T04 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T05 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T06 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T07 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0051-T08 | done | — | workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md | +| task | CUST-WP-0052-T01 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T02 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T03 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T04 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T05 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T06 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0052-T07 | done | — | workplans/CUST-WP-0052-core-hub-fos-reset.md | +| task | CUST-WP-0053-T01 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T02 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T03 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T04 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0053-T05 | done | — | workplans/CUST-WP-0053-coordination-hygiene-improvements.md | +| task | CUST-WP-0055-T01 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T02 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T03 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T04 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T05 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T06 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T07 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0055-T08 | done | — | workplans/CUST-WP-0055-workplan-terminology-fleet-refactor.md | +| task | CUST-WP-0056-T01 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0056-T02 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0056-T03 | done | — | workplans/CUST-WP-0056-daily-todo-md-stale-review.md | +| task | CUST-WP-0059-T01 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T02 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T03 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T04 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T05 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0059-T06 | done | — | workplans/CUST-WP-0059-forgejo-ci-publish-cutover-tail.md | +| task | CUST-WP-0060-T01 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T02 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T03 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T04 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T05 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T06 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0060-T07 | done | — | workplans/CUST-WP-0060-work-record-canonization.md | +| task | CUST-WP-0061-T01 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T02 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T03 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T04 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T05 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0061-T06 | done | — | workplans/CUST-WP-0061-work-record-stage3-intake-promotion-index.md | +| task | CUST-WP-0062-T01 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T02 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T03 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T04 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T05 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0062-T06 | done | — | workplans/CUST-WP-0062-sbom-nexus-daily-catchup.md | +| task | CUST-WP-0063-T01 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T02 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T03 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T04 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0063-T05 | done | — | workplans/CUST-WP-0063-inbox-governance-packets.md | +| task | CUST-WP-0064-T01 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T02 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T03 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0064-T04 | done | — | workplans/CUST-WP-0064-sbom-controlled-scan-inputs.md | +| task | CUST-WP-0065-T01 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T02 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T03 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0065-T04 | done | — | workplans/CUST-WP-0065-reclassify-repos-and-guidance-docs-to-the-new-sector-domain.md | +| task | CUST-WP-0066-T01 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0066-T02 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0066-T03 | done | — | workplans/CUST-WP-0066-repository-qualified-ad-hoc-identifiers.md | +| task | CUST-WP-0067-T01 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T02 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T03 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T04 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T05 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T06 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T07 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T08 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T09 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0067-T10 | done | — | workplans/CUST-WP-0067-hub-authority-target-resolution.md | +| task | CUST-WP-0068-T01 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T02 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T03 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T04 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T05 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T06 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T07 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T08 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0068-T09 | done | — | workplans/CUST-WP-0068-cache-only-work-record-recovery.md | +| task | CUST-WP-0070-T01 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0070-T02 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0070-T03 | done | — | workplans/CUST-WP-0070-publication-repo-category.md | +| task | CUST-WP-0071-T01 | done | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T02 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T03 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T04 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0071-T05 | wait | — | workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md | +| task | CUST-WP-0072-T01 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T02 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T03 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0072-T04 | done | — | workplans/CUST-WP-0072-fleet-flavor-and-depends-on-backfill.md | +| task | CUST-WP-0073-T01 | done | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T02 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T03 | done | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T04 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0073-T05 | wait | — | workplans/CUST-WP-0073-agent-credential-separation.md | +| task | CUST-WP-0074-T01 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T02 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T03 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T04 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T05 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0074-T06 | done | — | workplans/CUST-WP-0074-qualified-wait-states.md | +| task | CUST-WP-0075-T01 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T02 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T03 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T04 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T05 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0075-T06 | done | — | workplans/CUST-WP-0075-dependency-graph-driven-unblocking.md | +| task | CUST-WP-0076-T01 | done | — | workplans/CUST-WP-0076-provisioning-window-cadence.md | +| task | CUST-WP-0077-T01 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T02 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T03 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T04 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0077-T05 | done | — | workplans/CUST-WP-0077-dependency-root-execution-wave.md | +| task | CUST-WP-0078-T01 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T02 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T03 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0078-T04 | done | — | workplans/CUST-WP-0078-security-collaboration-consolidation.md | +| task | CUST-WP-0079-T01 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T02 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T03 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T04 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T05 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T06 | wait | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0079-T07 | done | — | workplans/CUST-WP-0079-deterministic-security-flow.md | +| task | CUST-WP-0080-T01 | done | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T02 | done | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T03 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T04 | todo | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T05 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0080-T06 | progress | — | workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md | +| task | CUST-WP-0081-T01 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | CUST-WP-0081-T02 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | CUST-WP-0081-T03 | done | — | workplans/CUST-WP-0081-netkingdom-architecture-review-and-reuse.md | +| task | THE-WP-0001-T01 | done | — | workplans/THE-WP-0001-federation-interface.md | +| task | THE-WP-0001-T02 | done | — | workplans/THE-WP-0001-federation-interface.md | +| intake | CUST-IN-0001 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0002 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0003 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0004 | routed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0005 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0006 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0007 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0008 | closed | blue | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0009 | closed | blue | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0010 | closed | green | intake-legacy-suggestions-migration.md | +| intake | CUST-IN-0011 | routed | red | intakes.md | +| intake | CUST-IN-0012 | closed | green | intakes.md | +| intake | CUST-IN-0013 | closed | blue | intakes.md | +| intake | CUST-IN-0014 | closed | blue | intakes.md | +| intake | CUST-IN-0015 | open | blue | intakes.md | +| intake | CUST-IN-0016 | open | green | intakes.md | +| intake | CUST-IN-0017 | open | green | intakes.md | +| intake | CUST-IN-0018 | open | green | intakes.md | diff --git a/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/originals.json b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/originals.json new file mode 100644 index 00000000..5a19a7b4 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/forgejo-good-case-preparation-r1/publication/retry-r2/publication-backup/originals.json @@ -0,0 +1,10 @@ +[ + { + "path": ".custodian-brief.md", + "index": "100644 6aad3a5788fad3abd60c0f1270f160062dc0168b 0\t.custodian-brief.md" + }, + { + "path": "WORK-RECORDS.md", + "index": "100644 d535e0f2dcc3d454e041a8f1b547b5dea4493380 0\tWORK-RECORDS.md" + } +]