diff --git a/docs/evidence/2026-10-10-security-consolidation/canonical-go-repair/raw-log-integrity.json b/docs/evidence/2026-10-10-security-consolidation/canonical-go-repair/raw-log-integrity.json new file mode 100644 index 0000000..e4ab8b1 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/canonical-go-repair/raw-log-integrity.json @@ -0,0 +1,25 @@ +{ + "note": "Raw test output is retained byte-for-byte, including pytest whitespace. Formatting checks on authored prose/source exclude these raw logs. Baseline errors are local synthetic test evidence, not protected service transport errors.", + "logs": [ + { + "file": "final-source-suite.txt", + "sha256": "b563940c02dfa8b8509dacb48ece3f017c2c841690cda37f0a51e6c7ba2203e0", + "raw_test_output_preserved": true + }, + { + "file": "reviewed-code-original-stub-suite.txt", + "sha256": "5eb9cc402653b62d295c65372041f90d09e69f3a4b7cacd2088631a943034d12", + "raw_test_output_preserved": true + }, + { + "file": "sandbox-baseline-sixteen.txt", + "sha256": "fa88af7b7c14780c63a7609d9da329688a53146aecb98a3b2b1ec736d6baf2c6", + "raw_test_output_preserved": true + }, + { + "file": "unchanged-source-stub-failure.txt", + "sha256": "92fd5edb071e1b74a0971642226e532b8f2edc9284b411339335f370c3816f1b", + "raw_test_output_preserved": true + } + ] +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-wave-owner-git-checkpoint.json b/docs/evidence/2026-10-10-security-consolidation/source-wave-owner-git-checkpoint.json new file mode 100644 index 0000000..875e13b --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-wave-owner-git-checkpoint.json @@ -0,0 +1,99 @@ +{ + "observed_at": "2026-10-11T17:55:20.183492+00:00", + "repos": [ + { + "repo": "railiance-platform", + "head": "390894f4da8bfa965d49c67fa6e912cde6e2b67a", + "upstream": "390894f4da8bfa965d49c67fa6e912cde6e2b67a", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "net-kingdom", + "head": "96eb40c69569eb9cb8416a176d18b831db21f406", + "upstream": "96eb40c69569eb9cb8416a176d18b831db21f406", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "access-engine", + "head": "a12571767cd1084a35bd2a7e724725d901cfb4f8", + "upstream": "a12571767cd1084a35bd2a7e724725d901cfb4f8", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "secrets-engine", + "head": "987db9c91379ec4a1fb4d90f05bcbf4c8658ed16", + "upstream": "987db9c91379ec4a1fb4d90f05bcbf4c8658ed16", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "ops-mason", + "head": "98dd9ea2e0b621d5f8404d2c3d11c09b2feb2f7f", + "upstream": "98dd9ea2e0b621d5f8404d2c3d11c09b2feb2f7f", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "ops-warden", + "head": "888d4f424c65cd2a6d112981d8b3f39f0e74319c", + "upstream": "888d4f424c65cd2a6d112981d8b3f39f0e74319c", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "key-cape", + "head": "21c664643b50203b586e240acdff05d2181da824", + "upstream": "21c664643b50203b586e240acdff05d2181da824", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "user-engine", + "head": "3eaf4cb15aac22bedc2a23d866b478c8ddf8a090", + "upstream": "3eaf4cb15aac22bedc2a23d866b478c8ddf8a090", + "ahead_behind": "0\t0", + "status": "?? .claude/settings.local.json." + }, + { + "repo": "tenant-engine", + "head": "1dabbcf47d87d27d118dcf3147d9e3588a807e0c", + "upstream": "1dabbcf47d87d27d118dcf3147d9e3588a807e0c", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "gate-house", + "head": "b589fcb061cafe608264547cb00f518f22a232c9", + "upstream": "b589fcb061cafe608264547cb00f518f22a232c9", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "kings-guard", + "head": "f141d17a39896d53ae5baba0104823dc4ca55bae", + "upstream": "f141d17a39896d53ae5baba0104823dc4ca55bae", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "policy-nexus", + "head": "341d9861dfb3821f271adda913338357af11b5fa", + "upstream": "341d9861dfb3821f271adda913338357af11b5fa", + "ahead_behind": "0\t0", + "status": "" + }, + { + "repo": "informed-decision", + "head": "f3061401fc27aa1a06ef46c6a34f71a7d2cca7bf", + "upstream": "f3061401fc27aa1a06ef46c6a34f71a7d2cca7bf", + "ahead_behind": "0\t0", + "status": "" + } + ], + "all_upstream_equal": true, + "tracked_worktrees_clean": true, + "preserved_untracked": "user-engine/.claude/settings.local.json. existed before this work; never read or staged" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/access-source-wave-final.json b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/access-source-wave-final.json new file mode 100644 index 0000000..97294ea --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/access-source-wave-final.json @@ -0,0 +1,93 @@ +{ + "repo_slug": "access-engine", + "repo_path": "/home/worsch/access-engine", + "issues": [ + { + "severity": "WARN", + "check_id": "C-33", + "message": "WORK-RECORDS.md is missing or stale \u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)", + "file_path": "WORK-RECORDS.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-11", + "message": "Task 'FLEX-WP-ADHOC-2026-10-11-T02' has no state_hub_task_id", + "file_path": "workplans/ADHOC-2026-10-11.md#FLEX-WP-ADHOC-2026-10-11-T02", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-11", + "message": "Task 'FLEX-WP-ADHOC-2026-10-11-T03' has no state_hub_task_id", + "file_path": "workplans/ADHOC-2026-10-11.md#FLEX-WP-ADHOC-2026-10-11-T03", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-11", + "message": "Task 'FLEX-WP-ADHOC-2026-10-11-T04' has no state_hub_task_id", + "file_path": "workplans/ADHOC-2026-10-11.md#FLEX-WP-ADHOC-2026-10-11-T04", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-11", + "message": "Task 'FLEX-WP-ADHOC-2026-10-11-T05' has no state_hub_task_id", + "file_path": "workplans/ADHOC-2026-10-11.md#FLEX-WP-ADHOC-2026-10-11-T05", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread inbox message(s) older than 3 day(s): the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread message(s) lack thread_id for supersession tracking: the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 38/38", + "C-17 cleared: pushed 1 backlogged commit(s)", + "C-33 fixed: regenerated WORK-RECORDS.md", + "C-11 skipped: task 'FLEX-WP-ADHOC-2026-10-11-T02' in finished workstream \u2014 not created", + "C-11 skipped: task 'FLEX-WP-ADHOC-2026-10-11-T03' in finished workstream \u2014 not created", + "C-11 skipped: task 'FLEX-WP-ADHOC-2026-10-11-T04' in finished workstream \u2014 not created", + "C-11 skipped: task 'FLEX-WP-ADHOC-2026-10-11-T05' in finished workstream \u2014 not created", + "push: pushed" + ], + "summary": { + "fail": 0, + "automation_error": 0, + "warn": 7, + "info": 0 + }, + "result": "warn" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/custodian-source-wave-final-escalated.json b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/custodian-source-wave-final-escalated.json new file mode 100644 index 0000000..b80da98 --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/custodian-source-wave-final-escalated.json @@ -0,0 +1,87 @@ +{ + "repo_slug": "the-custodian", + "repo_path": "/home/worsch/the-custodian", + "issues": [ + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager warning: workplans/: repository uses more than one workplan prefix: ['CUST-WP', 'THE-WP']", + "file_path": "workplans/", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/ADHOC-2026-08-25-retired.md: workplan id 'CUST-WP-ADHOC-2026-08-25-RETIRED' is not accepted by the canon kind registry", + "file_path": "workplans/ADHOC-2026-08-25-retired.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'cust-wp-0010b' (id=416ff571\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "416ff571-18cf-5cb2-9c8b-836f68a301b3", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'interactive-the-custodian@retired-20260828' (id=370c2481\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "370c2481-6806-41eb-a917-f8874f03184f", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'the-custodian-adhoc-2026-07-02@retired-20260827' (id=5c53733b\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "5c53733b-c077-4a93-be66-9c3af8f9b6fd", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'adhoc-2026-05-02@retired-20260827' (id=3f54ce9c\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "3f54ce9c-1f95-42de-894f-0f81a52ba2e8", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-26", + "message": "Workplan id 'THE-WP-0001' uses prefix 'THE-WP' but repo canonical prefix is 'CUST-WP' \u2014 new plans must conform", + "file_path": "workplans/THE-WP-0001-federation-interface.md", + "db_id": "", + "file_value": "THE-WP-0001", + "db_value": "CUST-WP", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 86/86", + "push: pushed" + ], + "summary": { + "fail": 0, + "automation_error": 0, + "warn": 3, + "info": 4 + }, + "result": "warn" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/custodian-source-wave-final.json b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/custodian-source-wave-final.json new file mode 100644 index 0000000..a82475e --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/custodian-source-wave-final.json @@ -0,0 +1,88 @@ +{ + "repo_slug": "the-custodian", + "repo_path": "/home/worsch/the-custodian", + "issues": [ + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager warning: workplans/: repository uses more than one workplan prefix: ['CUST-WP', 'THE-WP']", + "file_path": "workplans/", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager contradictory: workplans/ADHOC-2026-08-25-retired.md: workplan id 'CUST-WP-ADHOC-2026-08-25-RETIRED' is not accepted by the canon kind registry", + "file_path": "workplans/ADHOC-2026-08-25-retired.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'cust-wp-0010b' (id=416ff571\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "416ff571-18cf-5cb2-9c8b-836f68a301b3", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'interactive-the-custodian@retired-20260828' (id=370c2481\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "370c2481-6806-41eb-a917-f8874f03184f", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'the-custodian-adhoc-2026-07-02@retired-20260827' (id=5c53733b\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "5c53733b-c077-4a93-be66-9c3af8f9b6fd", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'adhoc-2026-05-02@retired-20260827' (id=3f54ce9c\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "3f54ce9c-1f95-42de-894f-0f81a52ba2e8", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-26", + "message": "Workplan id 'THE-WP-0001' uses prefix 'THE-WP' but repo canonical prefix is 'CUST-WP' \u2014 new plans must conform", + "file_path": "workplans/THE-WP-0001-federation-interface.md", + "db_id": "", + "file_value": "THE-WP-0001", + "db_value": "CUST-WP", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 86/86", + "C-17 cleared: pushed 1 backlogged commit(s)", + "push: pushed" + ], + "summary": { + "fail": 0, + "automation_error": 0, + "warn": 3, + "info": 4 + }, + "result": "warn" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/key39-source-acceptance.json b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/key39-source-acceptance.json new file mode 100644 index 0000000..543b67c --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/key39-source-acceptance.json @@ -0,0 +1,80 @@ +{ + "repo_slug": "key-cape", + "repo_path": "/home/worsch/key-cape", + "issues": [ + { + "severity": "WARN", + "check_id": "C-24", + "message": "Repo classification advisory: capability_tag 'security' is not a recommended family tag (allowed, check for synonym)", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-11", + "message": "Task 'ADHOC-2026-09-27-T02' has no state_hub_task_id", + "file_path": "workplans/ADHOC-2026-09-27.md#ADHOC-2026-09-27-T02", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-22", + "message": "Task description drift 'KEY-WP-0039-T03': file content differs from DB (file wins)", + "file_path": "workplans/KEY-WP-0039-openbao-negative-probe-tokens.md#KEY-WP-0039-T03", + "db_id": "54d37ad8-2352-51c2-bb2e-af6070dbbd73", + "file_value": "2026-10-11: Completed KeyCape's own issuer-source inspection for\nKEY-WP-0039-T02/attended-lifecycle-v2, exact manifest S", + "db_value": "2026-10-11: Completed KeyCape's own issuer-source inspection for\nKEY-WP-0039-T02/attended-lifecycle-v2, exact manifest S", + "fixable": true + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'keycape-implementation@retired-20260826' (id=2c9caad8\u2026, status=archived) has no backing workplan file", + "file_path": "", + "db_id": "2c9caad8-2ced-492d-9d63-376387b4b9b0", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread inbox message(s) older than 3 day(s): the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread message(s) lack thread_id for supersession tracking: the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 42/42", + "C-17 cleared: pushed 1 backlogged commit(s)", + "C-11 skipped: task 'ADHOC-2026-09-27-T02' in finished workstream \u2014 not created", + "C-22 fixed: task 54d37ad8\u2026 description updated", + "push: pushed" + ], + "summary": { + "fail": 0, + "automation_error": 0, + "warn": 5, + "info": 1 + }, + "result": "warn" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/platform-source-wave-final.json b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/platform-source-wave-final.json new file mode 100644 index 0000000..6ebbe0a --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/platform-source-wave-final.json @@ -0,0 +1,431 @@ +{ + "repo_slug": "railiance-platform", + "repo_path": "/home/worsch/railiance-platform", + "issues": [ + { + "severity": "WARN", + "check_id": "C-35", + "message": "Repo Manager missing: README.md: README.md is required for flavor tooling", + "file_path": "README.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-33", + "message": "WORK-RECORDS.md is missing or stale \u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)", + "file_path": "WORK-RECORDS.md", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-11", + "message": "Task 'RPF-WP-ADHOC-2026-10-11-T02' has no state_hub_task_id", + "file_path": "workplans/ADHOC-2026-10-11.md#RPF-WP-ADHOC-2026-10-11-T02", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-11", + "message": "Task 'RPF-WP-ADHOC-2026-10-11-T03' has no state_hub_task_id", + "file_path": "workplans/ADHOC-2026-10-11.md#RPF-WP-ADHOC-2026-10-11-T03", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": true + }, + { + "severity": "WARN", + "check_id": "C-23", + "message": "Lifecycle drift in 'rpf-wp-0053': workplan status 'proposed' has an active task \u2014 report only (ADR-007: do not auto-promote proposed)", + "file_path": "workplans/RPF-WP-0053-coulomb-paired-backup-admission.md", + "db_id": "cb55e474-c7a5-5c6f-bd72-ce65f853e3e3", + "file_value": "proposed", + "db_value": "proposed", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0004' is not linked to State Hub", + "file_path": "workplans/archived/260702-RPF-WP-0023-workload-kv-access-lanes.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0004", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0005' is not linked to State Hub", + "file_path": "workplans/archived/260702-RPF-WP-0024-credential-change-approval-workflow.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0005", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0006' is not linked to State Hub", + "file_path": "workplans/archived/260702-RPF-WP-0024-credential-change-approval-workflow.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0006", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0005' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0005", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0006' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0006", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0002-openbao-approved-automation-delegation.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0007", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0004' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0004", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0007", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0008' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0003-issue-core-runtime-ingestion-key-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0008", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0004' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0004", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0007", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0008' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0004-llm-connect-openrouter-provider-key-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0008", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0007' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0007", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-20", + "message": "Workplan dependency target 'RAILIANCE-WP-0008' is not linked to State Hub", + "file_path": "workplans/archived/260905-RPF-WP-0005-reuse-surface-runtime-secrets-openbao-lane.md", + "db_id": "", + "file_value": "RAILIANCE-WP-0008", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0003@retired-20260826' (id=665b3b9b\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "665b3b9b-608a-4be4-84b6-dcb8261ff57b", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0004@retired-20260826' (id=e57e487b\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "e57e487b-8557-439d-8093-0457c73ede93", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0005@retired-20260826' (id=2731fece\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "2731fece-6c49-45b8-ab8a-4ea6c04ac603", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0006@retired-20260826' (id=96c8a93d\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "96c8a93d-7a5a-4fa9-8f7b-865119551da3", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0007@retired-20260826' (id=4d7ce243\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "4d7ce243-f40a-4249-a46a-a24f75d6fe4c", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0008@retired-20260826' (id=671898ef\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "671898ef-2378-4814-b8f6-066148cdad46", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0009@retired-20260826' (id=b059c81d\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "b059c81d-96f1-451f-896f-a05cd73744a1", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0010@retired-20260826' (id=f364d405\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "f364d405-a85d-4b89-b600-1964ab436cad", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "FAIL", + "check_id": "C-07", + "message": "Non-closed DB workstream 'railiance-wp-0029@retired-20260826' (id=038bc3c0\u2026) has no backing workplan file \u2014 ADR-001 violation", + "file_path": "", + "db_id": "038bc3c0-4492-5b91-95eb-ae515ca205df", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "FAIL", + "check_id": "C-07", + "message": "Non-closed DB workstream 'railiance-wp-0024@retired-20260826' (id=88c4ef7f\u2026) has no backing workplan file \u2014 ADR-001 violation", + "file_path": "", + "db_id": "88c4ef7f-0af8-580e-90dc-a2bae2675a4d", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0017@retired-20260826' (id=16e8f234\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "16e8f234-9305-5ff3-af82-4639215a0c54", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0028@retired-20260826' (id=022dda1f\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "022dda1f-8772-57ad-862e-672924455f11", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0015@retired-20260826' (id=1c73af72\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "1c73af72-fd4b-5ab6-8ff7-a3c302bf55a5", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0023@retired-20260826' (id=ec52fbe6\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "ec52fbe6-571b-570e-884b-c7a32ff7bcc8", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0026@retired-20260826' (id=73878f8d\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "73878f8d-d8bb-5845-8a5c-91cdd83c1066", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0016@retired-20260826' (id=857ca302\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "857ca302-bb94-5d41-a649-1aa966368df4", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-platform-railiance-wp-0011@retired-20260826' (id=3f9fd8de\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "3f9fd8de-7235-4486-aaa7-634dba2bb6fa", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0022@retired-20260826' (id=a7977cbf\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "a7977cbf-ab43-56b7-b7a9-ceb52382b341", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'railiance-wp-0025@retired-20260826' (id=2422d4e7\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "2422d4e7-2125-591e-8e95-80ecc6e09da0", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "FAIL", + "check_id": "C-07", + "message": "Non-closed DB workstream 'railiance-wp-0027@retired-20260826' (id=6f8a6cbc\u2026) has no backing workplan file \u2014 ADR-001 violation", + "file_path": "", + "db_id": "6f8a6cbc-c076-5f0a-ade2-281a7ec71360", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-26", + "message": "Workplan id 'RAIL-PL-WP-0002' uses prefix 'RAIL-PL-WP' but repo canonical prefix is 'RPF-WP' \u2014 new plans must conform", + "file_path": "workplans/archived/260702-RAIL-PL-WP-0002-openbao-platform-secrets-service.md", + "db_id": "", + "file_value": "RAIL-PL-WP-0002", + "db_value": "RPF-WP", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-26", + "message": "Workplan id 'RAIL-PL-WP-0001' uses prefix 'RAIL-PL-WP' but repo canonical prefix is 'RPF-WP' \u2014 new plans must conform", + "file_path": "workplans/archived/RAIL-PL-WP-0001-platform-baseline.md", + "db_id": "", + "file_value": "RAIL-PL-WP-0001", + "db_value": "RPF-WP", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 60/60", + "C-17 cleared: pushed 2 backlogged commit(s)", + "C-33 fixed: regenerated WORK-RECORDS.md", + "C-11 skipped: task 'RPF-WP-ADHOC-2026-10-11-T02' in finished workstream \u2014 not created", + "C-11 skipped: task 'RPF-WP-ADHOC-2026-10-11-T03' in finished workstream \u2014 not created", + "push: pushed" + ], + "summary": { + "fail": 3, + "automation_error": 0, + "warn": 21, + "info": 17 + }, + "result": "fail" +} diff --git a/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/secrets-source-wave-final.json b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/secrets-source-wave-final.json new file mode 100644 index 0000000..796d31e --- /dev/null +++ b/docs/evidence/2026-10-10-security-consolidation/source-wave-sync/secrets-source-wave-final.json @@ -0,0 +1,70 @@ +{ + "repo_slug": "secrets-engine", + "repo_path": "/home/worsch/secrets-engine", + "issues": [ + { + "severity": "WARN", + "check_id": "C-23", + "message": "Lifecycle drift in 'secrets-wp-0013': workplan status 'proposed' has an active task \u2014 report only (ADR-007: do not auto-promote proposed)", + "file_path": "workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md", + "db_id": "5e38aecc-85ca-5f55-94c6-9fbb08604819", + "file_value": "proposed", + "db_value": "active", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-22", + "message": "Task description drift 'SECRETS-WP-0013-T03': file content differs from DB (file wins)", + "file_path": "workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md#SECRETS-WP-0013-T03", + "db_id": "5f8f7c41-5921-543f-a7c6-0b1350ea6d82", + "file_value": "After T01 independent owner acceptance, implement the narrow execute-ccr surface,\nPlatform task-grant mediator, bound po", + "db_value": "After T01 independent owner acceptance, implement the narrow execute-ccr surface,\nPlatform task-grant mediator, bound po", + "fixable": true + }, + { + "severity": "INFO", + "check_id": "C-08", + "message": "Closed DB workstream 'secrets-wp-0002' (id=7929a2d1\u2026, status=finished) has no backing workplan file", + "file_path": "", + "db_id": "7929a2d1-3006-5d4b-85e4-c62da055ee9b", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread inbox message(s) older than 3 day(s): the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + }, + { + "severity": "WARN", + "check_id": "C-28", + "message": "2 unread message(s) lack thread_id for supersession tracking: the-custodian:23172cb2, the-custodian:51e9eace", + "file_path": "", + "db_id": "", + "file_value": "", + "db_value": "", + "fixable": false + } + ], + "fixes_applied": [ + "bindings: synced 15/15", + "C-17 cleared: pushed 1 backlogged commit(s)", + "C-22 fixed: task 5f8f7c41\u2026 description updated", + "brief: .custodian-brief.md updated", + "push: pushed" + ], + "summary": { + "fail": 0, + "automation_error": 0, + "warn": 4, + "info": 1 + }, + "result": "warn" +}