SCOPE: current state lists the open workplans and cross-domain drivers

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

SCOPE.md

@@ -87,10 +87,19 @@ their own repositories and are referenced here only as integration pointers.
 
 ## Current State
 
-- Status: **stable maintenance, no open workplans.** `CUST-WP-0064` through
-  `CUST-WP-0068` are finished. The active registry is 120 classified
-  repositories; `make classification-check` is the convergence gate. Residual
-  `CUST-IN-0015` tracks a later SBOM catch-up `no-checkout` regression.
+- Status: **maintenance; three open workplans, none implementable here as of
+  2026-10-09.** `CUST-WP-0071` (workload sizing) waits on RAPPS-WP-0014-T03;
+  `CUST-WP-0073` (agent credential separation) waits on GLAS-WP-0012;
+  `CUST-WP-0076` is a residual awaiting the operator's provisioning-window
+  choice (decision `62aa95e4`). `CUST-WP-0064` through `CUST-WP-0068` and
+  `CUST-WP-0074`, `-0075`, `-0077` are finished. The active registry is 120
+  classified repositories; `make classification-check` is the convergence gate.
+  Residual `CUST-IN-0015` tracks a later SBOM catch-up `no-checkout` regression.
+- Cross-domain work driven from here but owned elsewhere: forge closure
+  (prj-forgejo-org-refactor `ORGREF-WP-0002`; decision record
+  `decisions/forge-visibility-policy.md`) and the SecurityCaseType model
+  (net-kingdom canon `security-case-types_v0.1`, `NK-WP-0048`, with ops-mason
+  `MASON-WP-0010` and ops-warden `WARDEN-WP-0044`).
 - Business platform enablement (`CUST-WP-0058`, finished 2026-07-10):
   DR-1/2/3 resolved (instance-per-client tenancy; coulomb.social as
   standalone app; app-local identity), business-app service contract