From af9e16c9badef6c4af8810922e40507eaec7d5e5 Mon Sep 17 00:00:00 2001 From: codex Date: Wed, 21 Oct 2026 00:14:42 +0200 Subject: [PATCH] SCOPE: CUST-WP-0079 finished; daily flow runs on the workstation timer Co-Authored-By: Claude Opus 5.5 --- SCOPE.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/SCOPE.md b/SCOPE.md index eaaa5a2..419175e 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -90,9 +90,9 @@ their own repositories and are referenced here only as integration pointers. - Status: active coordination and source tooling. `CUST-WP-0071` retains representative pilot acceptance, allocation review and weekly execution; `CUST-WP-0073` is blocked only on the founder-triggered rotation (T05); - `CUST-WP-0079` retains schedule activation, policy publication, - fleet history acceptance and attended actions. Consult their task blocks for - current gates. `CUST-WP-0076` and `CUST-WP-0080` are finished; later architecture + Consult their task blocks for current gates. `CUST-WP-0079` (daily security + flow on a workstation systemd timer, see `infra/security-flow/`), `CUST-WP-0076` + and `CUST-WP-0080` are finished; later architecture and hardening work is tracked in `CUST-WP-0081` and `CUST-WP-0082`. Source preparation and owner integration can proceed independently of attended acceptance; a blocked acceptance gate does not imply absent implementation. @@ -212,14 +212,14 @@ keywords: [memory, provenance, episodic, continuity, decisions] ```capability type: tool title: Deterministic security work reporting and checkpointed delivery -description: scripts/security_flow_report.py classifies repo-backed tasks with dependency and human gates; scripts/security_flow_daily.py synchronizes recorded decisions and delivers changed actionable reports with recipient checkpoints. Dry-run by default; durable schedule acceptance remains CUST-WP-0079-T03. +description: scripts/security_flow_report.py classifies repo-backed tasks with dependency and human gates; scripts/security_flow_daily.py synchronizes recorded decisions and delivers changed actionable reports with recipient checkpoints. Dry-run by default; runs daily with --apply from the workstation user timer in infra/security-flow/ (CUST-WP-0079-T03). keywords: [security, workplans, dependencies, reports, checkpoints, scheduling] ``` ```capability type: tool title: Generated-only commit guard -description: scripts/check_generated_only_commit.py checks staged changes or commit ranges; make generated-commit-hook preserves existing hook routing. Local enforcement and tests exist; the 2026-10-12 through 2026-10-19 local history audit found no generated-only commits across the 15-repo security estate. CUST-WP-0079-T05 records completed owner-generator adoption and local-history acceptance; runtime schedule and publication gates remain separate. +description: scripts/check_generated_only_commit.py checks staged changes or commit ranges; make generated-commit-hook preserves existing hook routing. Local enforcement and tests exist; the 2026-10-12 through 2026-10-19 local history audit found no generated-only commits across the 15-repo security estate. CUST-WP-0079-T05 records completed owner-generator adoption and local-history acceptance. keywords: [git, generated, hooks, work-records, validation] ```