SCOPE: CUST-WP-0079 finished; daily flow runs on the workstation timer

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
codex 2026-10-21 00:14:42 +02:00
parent 62778aa2e1
commit af9e16c9ba

View file

@ -90,9 +90,9 @@ their own repositories and are referenced here only as integration pointers.
- Status: active coordination and source tooling. `CUST-WP-0071` retains
representative pilot acceptance, allocation review and weekly execution;
`CUST-WP-0073` is blocked only on the founder-triggered rotation (T05);
`CUST-WP-0079` retains schedule activation, policy publication,
fleet history acceptance and attended actions. Consult their task blocks for
current gates. `CUST-WP-0076` and `CUST-WP-0080` are finished; later architecture
Consult their task blocks for current gates. `CUST-WP-0079` (daily security
flow on a workstation systemd timer, see `infra/security-flow/`), `CUST-WP-0076`
and `CUST-WP-0080` are finished; later architecture
and hardening work is tracked in `CUST-WP-0081` and `CUST-WP-0082`.
Source preparation and owner integration can proceed independently of attended
acceptance; a blocked acceptance gate does not imply absent implementation.
@ -212,14 +212,14 @@ keywords: [memory, provenance, episodic, continuity, decisions]
```capability
type: tool
title: Deterministic security work reporting and checkpointed delivery
description: scripts/security_flow_report.py classifies repo-backed tasks with dependency and human gates; scripts/security_flow_daily.py synchronizes recorded decisions and delivers changed actionable reports with recipient checkpoints. Dry-run by default; durable schedule acceptance remains CUST-WP-0079-T03.
description: scripts/security_flow_report.py classifies repo-backed tasks with dependency and human gates; scripts/security_flow_daily.py synchronizes recorded decisions and delivers changed actionable reports with recipient checkpoints. Dry-run by default; runs daily with --apply from the workstation user timer in infra/security-flow/ (CUST-WP-0079-T03).
keywords: [security, workplans, dependencies, reports, checkpoints, scheduling]
```
```capability
type: tool
title: Generated-only commit guard
description: scripts/check_generated_only_commit.py checks staged changes or commit ranges; make generated-commit-hook preserves existing hook routing. Local enforcement and tests exist; the 2026-10-12 through 2026-10-19 local history audit found no generated-only commits across the 15-repo security estate. CUST-WP-0079-T05 records completed owner-generator adoption and local-history acceptance; runtime schedule and publication gates remain separate.
description: scripts/check_generated_only_commit.py checks staged changes or commit ranges; make generated-commit-hook preserves existing hook routing. Local enforcement and tests exist; the 2026-10-12 through 2026-10-19 local history audit found no generated-only commits across the 15-repo security estate. CUST-WP-0079-T05 records completed owner-generator adoption and local-history acceptance.
keywords: [git, generated, hooks, work-records, validation]
```