coulomb/the-custodian
5
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions
the-custodian/docs/changes/netkingdom-target-2026-10-17/native-gates-r1/native-gate-audit.json
codex 275e034883
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Reject generated-only commits / generated-commit-guard (push) Successful in 9s
Details
Record native security preparation and owner checkpoints (1/7)
2026-10-17 04:30:03 +02:00

3643 lines
151 KiB
JSON
Raw Blame History

{
"schema": "netkingdom-native-gate-audit.v1",
"observed_at": "2026-10-17T02:04:44.628210+00:00",
"scope": "Source and Hub GET read-only audit; artifact-only write, no privileged APIs, private reads, messages, canonical updates, workplans or test reruns.",
"summary": {
"total_gates": 16,
"native_accepted": 0,
"native_open": 16,
"owner_source_files": 30,
"verified_task_bindings": 200,
"all_workplan_statuses_match": true,
"all_task_statuses_and_parents_match": true
},
"completed_do_not_repeat": [
"STATE-WP-0095 all10tasks done; owner200cbd0a; exact approved guard image4cc4 atHelm77 and8native rollback cases,18CURRENT rows unchanged",
"RMGR-WP-0019 all6tasks done; owner3bcb1e1c; ordinary Cluster pipeline20/20bindings/frozen3omitted",
"RMGR-WP-0021-T05 done; actual six configured-hook clean/key/unavailable cases and independent cleanup accepted",
"NK-WP-0048-T20 andT21 done; source/disposable LLDAP/PostgreSQL proof",
"NK-WP-0049-T37 done;65actual SOPS regression cases"
],
"authority": {
"mode": "supervised",
"runtime_enforcement_not_inferred": true,
"autopilot_granted": false,
"new_privileged_proposals_owned_by": "root with fresh exact supervisor approval as required",
"residual_freeze": "APPROVAL-WP-0002 source and Hub flavor residual; Hub flavor_promotion_reason null. Reference its evidence requirements, do not implement without explicit scoped promotion."
},
"source_refs": [
{
"path": "/home/worsch/the-custodian/AGENTS.md",
"sha256": "633f3026fec7a00e75b7db2773543abb9c95af0146be30b35205ea807d2d4b18"
},
{
"path": "/home/worsch/the-custodian/docs/netkingdom-target-security-architecture.md",
"sha256": "3a74cbd71dc22514033906f6029de1d3e113640bc5faab94f8d58c62e0c86203"
},
{
"path": "/home/worsch/the-custodian/docs/netkingdom-target-implementation.md",
"sha256": "02ee43e554f05ad0376271531b4de0699fdb64f97b5b839184eb50283703ba0f"
},
{
"path": "/home/worsch/the-custodian/docs/agent-autonomy-decision.md",
"sha256": "4f65dfd2b56b67cd64eb9577644d574d2e687adcfd8b5bdb65a2e0d14f8bf1ff"
},
{
"path": "/home/worsch/the-custodian/.kaizen/agents/custodian-codex/supervision.json",
"sha256": "4a4b0e61df23f1499916c04d85e61c558df810f43f485abf84792acfbbb66016"
},
{
"path": "/home/worsch/the-custodian/docs/changes/netkingdom-target-2026-10-17/guard-successor-execution-r2/verified-receiving-return.json",
"sha256": "09958bd69367cc6903e2a21a56eb81b6a8a46c2a1907afc93f787cd63732e92a"
}
],
"owner_refs": [
{
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md",
"sha256": "9f97a7bc3724fdac82dacc6821d57a57061c7b1243792aedf814c3bd3173bbdc",
"workplan": "SECRETS-WP-0009"
},
{
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md",
"sha256": "04c9f7432216205b0ded3abc49042988e7730d1a3014f919d60456192fa7fd6c",
"workplan": "SECRETS-WP-0013"
},
{
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md",
"sha256": "6cb4ec3500cddd5156235f1a493d7a979227a6b04eb037bacd23073fd1328efe",
"workplan": "SECRETS-WP-0014"
},
{
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md",
"sha256": "b3cab4e8d14b3b03179fc72a6e9ce1c0ee840cfa3247c022c1324d60378bde5b",
"workplan": "SECRETS-WP-0015"
},
{
"path": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md",
"sha256": "139e4a6dd53f02cd184ebb12a5c30bcbfd0993cf9fdf1f42a1aa27b0823f32cf",
"workplan": "RPF-WP-0035"
},
{
"path": "/home/worsch/access-engine/workplans/FLEX-WP-0024-decision-envelope-authenticity.md",
"sha256": "cc94a493c23c16a3baa718b75ef5d48a596c6386c11534d50fd4839a6f0448f2",
"workplan": "FLEX-WP-0024"
},
{
"path": "/home/worsch/approval-engine/workplans/APPROVAL-WP-0002-production-readiness-and-consumer-adoption.md",
"sha256": "9e0d1292516c4fc25c4521ab1dda3b3aecc1559260eb630a4bf1af5f0f10a4f5",
"workplan": "APPROVAL-WP-0002"
},
{
"path": "/home/worsch/approval-engine/workplans/APPROVAL-WP-0004-exact-consume-source-provenance.md",
"sha256": "90a96e90641090b07986515310fb317d2769c2ed5a36121c3d545264054cc5ce",
"workplan": "APPROVAL-WP-0004"
},
{
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048"
},
{
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049"
},
{
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0050-playwright-consumer-registration.md",
"sha256": "0be0b643409d0731d4924c95566facdef58b1c65c5c1276f7f308ebfb2271fb7",
"workplan": "NK-WP-0050"
},
{
"path": "/home/worsch/glas-harness/workplans/GLAS-WP-0012-first-local-profile-production-proof.md",
"sha256": "881ab0f5ba3bb43f5404c8f4cd23f9628e014992ba88fc13f541f0fa8b7b1eaa",
"workplan": "GLAS-WP-0012"
},
{
"path": "/home/worsch/sand-boxer/workplans/SAND-WP-0014-owner-mediated-execution.md",
"sha256": "1e8d225c0bb0eb2c894709ed49a2cb0a0af0449fb6eab0971b13524cd133a9d7",
"workplan": "SAND-WP-0014"
},
{
"path": "/home/worsch/rein-aharness/workplans/REINAH-WP-0008-simpler-metered-retry.md",
"sha256": "9aac375bdb2e93c57cd513ab8cd5bf0c0979a0699ea0181e6d405899d906bf68",
"workplan": "REINAH-WP-0008"
},
{
"path": "/home/worsch/key-cape/workplans/KEY-WP-0040-mfa-attended-run-findings.md",
"sha256": "c213d8ad5ef2471d1ab8672502b561b9fee84b110575366c09148add83ad9d79",
"workplan": "KEY-WP-0040"
},
{
"path": "/home/worsch/user-engine/workplans/USER-WP-0026-account-recovery.md",
"sha256": "b4c2e5e9e17140a4c3a6fce85ac795c07121a82cd48008419d2dd943d38d5d76",
"workplan": "USER-WP-0026"
},
{
"path": "/home/worsch/railiance-forge/workplans/FORGE-WP-0006-independent-secret-detection.md",
"sha256": "fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb",
"workplan": "FORGE-WP-0006"
},
{
"path": "/home/worsch/repo-manager/workplans/RMGR-WP-0019-historical-source-admission.md",
"sha256": "189372458e1b072451eb64333e38f849835c16dba5bb69deed2a17794644986d",
"workplan": "RMGR-WP-0019"
},
{
"path": "/home/worsch/repo-manager/workplans/RMGR-WP-0021-secret-detection-controls.md",
"sha256": "966d15ccdabc8edf98bc58f9422ea190566d05fe4208f4749f59a9731f4e108d",
"workplan": "RMGR-WP-0021"
},
{
"path": "/home/worsch/activity-core/workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md",
"sha256": "e0b83b570da688abb405bed165d81db7cf49bc7ff11ef9a8ad86cbee2dc651db",
"workplan": "ACTIVITY-WP-0047"
},
{
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md",
"sha256": "dd7b1afa47e5c1b78eee1be9df2b61d9c5b3ef1f9dea25f13e2631daacd5ada9",
"workplan": "CUST-WP-0071"
},
{
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0073-agent-credential-separation.md",
"sha256": "8cbf27819b4d8c689c6afadf0dd3eabe8a8cd4b399d20f05a5e7fe8749b9b43a",
"workplan": "CUST-WP-0073"
},
{
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0079-deterministic-security-flow.md",
"sha256": "f4ad3299c90f84f49e5867b3d358582c3faea65db4a2a4f595cf1a7f2b806097",
"workplan": "CUST-WP-0079"
},
{
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080"
},
{
"path": "/home/worsch/audit-core/workplans/AUDIT-WP-0009-evidence-role-conformance.md",
"sha256": "5869955cd50eb501032af1d3d5ff0dd9f35f773e82d351528b400361bdd73d33",
"workplan": "AUDIT-WP-0009"
},
{
"path": "/home/worsch/audit-core/workplans/AUDIT-WP-0015-independent-evidence-returns.md",
"sha256": "3b2d120dd9118e1eed8d8d6104beceebb78e02a3c2946bf3f804cd3bc9506490",
"workplan": "AUDIT-WP-0015"
},
{
"path": "/home/worsch/reuse-surface/workplans/REUSE-WP-0025-private-source-reader-boundary.md",
"sha256": "7ebc371800c0be11e4a707d6e89915c1c659b469c65e2c2ee239c8b7144e8744",
"workplan": "REUSE-WP-0025"
},
{
"path": "/home/worsch/railiance-cluster/workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md",
"sha256": "76810b497e04548e3b22a28973303198f25aba5b47847e24b69024f8d07e39b7",
"workplan": "RCLUSTER-WP-0017"
},
{
"path": "/home/worsch/railiance-cluster/workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md",
"sha256": "96d52b6dbae056399159632d50b32ccc6662e4f6d3677af154f7c8a3d618334b",
"workplan": "RCLUSTER-WP-0018"
},
{
"path": "/home/worsch/state-hub/workplans/STATE-WP-0095-historical-source-receiving.md",
"sha256": "31bea1d5b54f9f6e5bc01d11d271c3a86ac76389350b467ba568b9dc93e41c61",
"workplan": "STATE-WP-0095"
}
],
"gates": [
{
"gate": "TSA-01",
"native_status": "open",
"owners": [
"Access Engine",
"Secrets Engine",
"Platform",
"Cluster"
],
"existing_tasks": [
{
"id": "FLEX-WP-0024-T06",
"path": "/home/worsch/access-engine/workplans/FLEX-WP-0024-decision-envelope-authenticity.md",
"sha256": "cc94a493c23c16a3baa718b75ef5d48a596c6386c11534d50fd4839a6f0448f2",
"workplan": "FLEX-WP-0024",
"workplan_status": "active",
"workplan_flavor": null,
"task_status": "progress",
"uuid": "7f785b52-bf62-5884-8d34-670d70bc9023"
},
{
"id": "SECRETS-WP-0014-T02",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md",
"sha256": "6cb4ec3500cddd5156235f1a493d7a979227a6b04eb037bacd23073fd1328efe",
"workplan": "SECRETS-WP-0014",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "877782e5-045b-5186-8b95-82e25db21a5a"
},
{
"id": "SECRETS-WP-0014-T03",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md",
"sha256": "6cb4ec3500cddd5156235f1a493d7a979227a6b04eb037bacd23073fd1328efe",
"workplan": "SECRETS-WP-0014",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "85aa4c78-b66d-5201-8e31-0ed50e7eaeec"
},
{
"id": "RCLUSTER-WP-0017-T02",
"path": "/home/worsch/railiance-cluster/workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md",
"sha256": "76810b497e04548e3b22a28973303198f25aba5b47847e24b69024f8d07e39b7",
"workplan": "RCLUSTER-WP-0017",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "7f4320c6-8bb5-598e-9b9a-65565091276f"
},
{
"id": "RCLUSTER-WP-0017-T03",
"path": "/home/worsch/railiance-cluster/workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md",
"sha256": "76810b497e04548e3b22a28973303198f25aba5b47847e24b69024f8d07e39b7",
"workplan": "RCLUSTER-WP-0017",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "747a8d77-5c02-5b26-ba9c-385f75f3ac1c"
}
],
"delivered_evidence": "Signed producer and strict fixed verifier; actual local producer-to-consumer proof; normal immutable image, release bundle, inert installed CLI, seven-resource server dry-run. Eleven authorization sites across ten handlers remain the initial PEP denominator.",
"next_native_deliverable": "Execute independently admitted stopped/running signer rollout and one-use custody; install independent public trust/caller binding, then native ALLOW and all refusal/rotation cases at the inventoried PEPs.",
"real_blocker": "Actual founder entity/expiry, held window, approved CCR-2026-0050, exact storage/PVC/PV evidence and final owner custody dispositions remain missing. Server dry-run is not runtime assent.",
"closure_requires": "Every denominator site and consumer pin admitted; forged/altered/wrong pin/key/unsigned/expired/rotation refusals recorded against exact deployed source/package/identity.",
"independent_preparation_now": "Refresh source-only rollout R2 / custody P4 closure matrix and enumerate unresolved owner facts; do not repeat completed dry-run or inert installation.",
"priority": 1
},
{
"gate": "TSA-02",
"native_status": "open",
"owners": [
"Platform",
"Secrets Engine",
"Approval Engine"
],
"existing_tasks": [
{
"id": "RPF-WP-0035-T12",
"path": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md",
"sha256": "139e4a6dd53f02cd184ebb12a5c30bcbfd0993cf9fdf1f42a1aa27b0823f32cf",
"workplan": "RPF-WP-0035",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "914bf383-c13f-5247-9af0-91d7e3a4784a"
},
{
"id": "SECRETS-WP-0013-T01",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md",
"sha256": "04c9f7432216205b0ded3abc49042988e7730d1a3014f919d60456192fa7fd6c",
"workplan": "SECRETS-WP-0013",
"workplan_status": "proposed",
"workplan_flavor": "planning",
"task_status": "wait",
"uuid": "b2f0d462-a542-518b-a26b-b7ec07b3c7c1"
},
{
"id": "SECRETS-WP-0013-T03",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md",
"sha256": "04c9f7432216205b0ded3abc49042988e7730d1a3014f919d60456192fa7fd6c",
"workplan": "SECRETS-WP-0013",
"workplan_status": "proposed",
"workplan_flavor": "planning",
"task_status": "wait",
"uuid": "5f8f7c41-5921-543f-a7c6-0b1350ea6d82"
},
{
"id": "APPROVAL-WP-0002-T01",
"path": "/home/worsch/approval-engine/workplans/APPROVAL-WP-0002-production-readiness-and-consumer-adoption.md",
"sha256": "9e0d1292516c4fc25c4521ab1dda3b3aecc1559260eb630a4bf1af5f0f10a4f5",
"workplan": "APPROVAL-WP-0002",
"workplan_status": "blocked",
"workplan_flavor": "residual",
"task_status": "wait",
"uuid": "dc4523f5-e0af-5734-a0ef-07aa7f2b2a27"
},
{
"id": "APPROVAL-WP-0002-T05",
"path": "/home/worsch/approval-engine/workplans/APPROVAL-WP-0002-production-readiness-and-consumer-adoption.md",
"sha256": "9e0d1292516c4fc25c4521ab1dda3b3aecc1559260eb630a4bf1af5f0f10a4f5",
"workplan": "APPROVAL-WP-0002",
"workplan_status": "blocked",
"workplan_flavor": "residual",
"task_status": "wait",
"uuid": "3196fb77-3df0-5358-ae12-2d07bac12041"
}
],
"delivered_evidence": "Exact approval/decision binding and consume-confirm-effect seam; actual local source servers and disposable OpenBao effect/readback. Approval0004 source tasks are done.",
"next_native_deliverable": "Admit exact native metadata execute-ccr action, reviewed readiness baseline and target readback; prove actor/tenant/body/expiry/replay/unavailable refusals through the actual served PEP.",
"real_blocker": "Independent mediated-contract acceptance, task entitlement, native issuer/profile provenance and founder exact native effect approval remain absent. APPROVAL0002 is residual with no Hub promotion reason; do not implement it absent explicit scoped promotion.",
"closure_requires": "Authoritative approval consumption confirmation precedes exact single bounded effect; accepted tenant/issuer provenance and complete positive/negative native outcome receipts.",
"independent_preparation_now": "Prepare exact T12/T01 native request and effect baseline/recovery packet; list residual owner evidence prerequisite without implementing residual scope.",
"priority": 2
},
{
"gate": "TSA-03",
"native_status": "open",
"owners": [
"Platform",
"Secrets Engine"
],
"existing_tasks": [
{
"id": "RPF-WP-0035-T12",
"path": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md",
"sha256": "139e4a6dd53f02cd184ebb12a5c30bcbfd0993cf9fdf1f42a1aa27b0823f32cf",
"workplan": "RPF-WP-0035",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "914bf383-c13f-5247-9af0-91d7e3a4784a"
},
{
"id": "SECRETS-WP-0013-T03",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md",
"sha256": "04c9f7432216205b0ded3abc49042988e7730d1a3014f919d60456192fa7fd6c",
"workplan": "SECRETS-WP-0013",
"workplan_status": "proposed",
"workplan_flavor": "planning",
"task_status": "wait",
"uuid": "5f8f7c41-5921-543f-a7c6-0b1350ea6d82"
}
],
"delivered_evidence": "Durable reservation/call intent, uncertainty and cleanup source plus disposable process/OpenBao cases delivered.",
"next_native_deliverable": "Run exact admitted ledger restart/concurrency and consumed-before-effect failure scenarios, independently reconcile target state and prove scoped cleanup/revocation with no replay.",
"real_blocker": "Same entitlement and native acceptance boundary as TSA-02; fixture ledger and disposable target do not establish production persistence or cleanup owner authority.",
"closure_requires": "Lost response remains unknown until authoritative reconciliation; changed/competing request refused; every durable cleanup obligation demonstrably survives and completes or stays owned.",
"independent_preparation_now": "Prepare bounded native fault plan and cleanup owner/receipt requirements against current exact operation.",
"priority": 2
},
{
"gate": "TSA-04",
"native_status": "open",
"owners": [
"NetKingdom",
"Mason",
"Warden",
"KeyCape",
"Platform",
"Apps",
"rapp-postgres"
],
"existing_tasks": [
{
"id": "NK-WP-0048-T06",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "d9b26bcf-a7c6-59a2-92a0-f913d76a203c"
},
{
"id": "NK-WP-0048-T12",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "7ce4eee3-cd47-55a9-bfa5-4f1835d4d6fd"
},
{
"id": "NK-WP-0048-T14",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "fce95440-a25b-5f27-8ef3-a3d182099113"
},
{
"id": "NK-WP-0048-T15",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "1b825705-4848-5edc-832f-b1622cd9bdb7"
},
{
"id": "NK-WP-0048-T16",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "200bf500-5084-5ae7-be26-3033fe1f296e"
}
],
"delivered_evidence": "Registration adapter/checker build, producer compatibility and caller containment published; 14 disposable LLDAP oracles and 21 real disposable PostgreSQL oracles delivered. NK48 T20/T21 are done.",
"next_native_deliverable": "First native Forgejo KnownSecurityCase with complete admitted descriptors, trusted callbacks, CNPG continuity and all-LDAP-writer exclusion, delivered custody, login/denial, revocation and rollback.",
"real_blocker": "Dedicated CNPG consumer/placement/lease/TLS/recovery, independent exact-content checkpoint and case/source/principal callbacks, all-writer fencing/CAS/ABA exclusion, restart evidence holder and native executable custody/type admission remain unresolved.",
"closure_requires": "Independent Mason structure, Warden evidence admission, Platform custody/delivery, Apps actual human login/group denial, scoped rollback/revocation and retained uncertainty receipts for the exact case.",
"independent_preparation_now": "T15 authenticated lost-process recovery contract and T16 complete descriptor composition can advance independently in source; T14 must use existing rapp-postgres admission contract.",
"priority": 1
},
{
"gate": "TSA-05",
"native_status": "open",
"owners": [
"KeyCape",
"User Engine",
"NetKingdom",
"Custodian"
],
"existing_tasks": [
{
"id": "KEY-WP-0040-T01",
"path": "/home/worsch/key-cape/workplans/KEY-WP-0040-mfa-attended-run-findings.md",
"sha256": "c213d8ad5ef2471d1ab8672502b561b9fee84b110575366c09148add83ad9d79",
"workplan": "KEY-WP-0040",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "b385602d-714a-5fdb-b40b-bd870420f28e"
},
{
"id": "KEY-WP-0040-T02",
"path": "/home/worsch/key-cape/workplans/KEY-WP-0040-mfa-attended-run-findings.md",
"sha256": "c213d8ad5ef2471d1ab8672502b561b9fee84b110575366c09148add83ad9d79",
"workplan": "KEY-WP-0040",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "3ad155dd-15ef-5522-bdf9-c78832728553"
},
{
"id": "USER-WP-0026-T03",
"path": "/home/worsch/user-engine/workplans/USER-WP-0026-account-recovery.md",
"sha256": "b4c2e5e9e17140a4c3a6fce85ac795c07121a82cd48008419d2dd943d38d5d76",
"workplan": "USER-WP-0026",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "95e9a6d4-7e57-5483-97c5-3f4a45bb6767"
},
{
"id": "NK-WP-0050-T02",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0050-playwright-consumer-registration.md",
"sha256": "0be0b643409d0731d4924c95566facdef58b1c65c5c1276f7f308ebfb2271fb7",
"workplan": "NK-WP-0050",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "a9dadd07-f136-5dc7-9229-7a9dbb941f0d"
},
{
"id": "NK-WP-0050-T03",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0050-playwright-consumer-registration.md",
"sha256": "0be0b643409d0731d4924c95566facdef58b1c65c5c1276f7f308ebfb2271fb7",
"workplan": "NK-WP-0050",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "5a3aaf57-de5c-5a03-bc99-9bcf2fc5d95e"
},
{
"id": "CUST-WP-0080-T05",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "ed8b909a-23bf-5e5f-b600-e477fbae136b"
}
],
"delivered_evidence": "Recovery/journey source and Playwright registration preservation/custody source exist; native human/agent consumer acceptance remains open.",
"next_native_deliverable": "Complete real-factor U08 recovery and portal positive readback, then actual separately admitted human and agent Playwright sign-in/denial using delivered identity and individual transport.",
"real_blocker": "KEY40 remains progress; User26 positive net-kingdom-admins readback is attended and catalogue-management restoration is required before customers. NK50 activation, native auth and custody/transport admission remain missing.",
"closure_requires": "Real human and bounded agent journeys use the intended issuer/factor/claims and denied paths; exact delivery/revocation and recovery evidence, no source-only completion.",
"independent_preparation_now": "Prepare named journey/identity/transport acceptance matrix from existing NK50/CUST80 scope; keep real-factor and custody inputs with their owners.",
"priority": 3
},
{
"gate": "TSA-06",
"native_status": "open",
"owners": [
"Glas",
"Sand-boxer",
"rein-aharness",
"Secrets",
"Platform",
"Forge"
],
"existing_tasks": [
{
"id": "GLAS-WP-0012-T02",
"path": "/home/worsch/glas-harness/workplans/GLAS-WP-0012-first-local-profile-production-proof.md",
"sha256": "881ab0f5ba3bb43f5404c8f4cd23f9628e014992ba88fc13f541f0fa8b7b1eaa",
"workplan": "GLAS-WP-0012",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "4209f564-a9ee-57f9-9522-3708988801ef"
},
{
"id": "GLAS-WP-0012-T03",
"path": "/home/worsch/glas-harness/workplans/GLAS-WP-0012-first-local-profile-production-proof.md",
"sha256": "881ab0f5ba3bb43f5404c8f4cd23f9628e014992ba88fc13f541f0fa8b7b1eaa",
"workplan": "GLAS-WP-0012",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "c660808a-1724-555c-bc59-7318870d3591"
},
{
"id": "GLAS-WP-0012-T04",
"path": "/home/worsch/glas-harness/workplans/GLAS-WP-0012-first-local-profile-production-proof.md",
"sha256": "881ab0f5ba3bb43f5404c8f4cd23f9628e014992ba88fc13f541f0fa8b7b1eaa",
"workplan": "GLAS-WP-0012",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "3e791432-8f37-54bd-a44a-55eeff11ac19"
},
{
"id": "GLAS-WP-0012-T05",
"path": "/home/worsch/glas-harness/workplans/GLAS-WP-0012-first-local-profile-production-proof.md",
"sha256": "881ab0f5ba3bb43f5404c8f4cd23f9628e014992ba88fc13f541f0fa8b7b1eaa",
"workplan": "GLAS-WP-0012",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "f7635cf6-e044-52d4-8242-0512e0ccbd7b"
},
{
"id": "REINAH-WP-0008-T07",
"path": "/home/worsch/rein-aharness/workplans/REINAH-WP-0008-simpler-metered-retry.md",
"sha256": "9aac375bdb2e93c57cd513ab8cd5bf0c0979a0699ea0181e6d405899d906bf68",
"workplan": "REINAH-WP-0008",
"workplan_status": "blocked",
"workplan_flavor": null,
"task_status": "wait",
"uuid": "80318842-ccaa-5484-a54a-3d9981eaec8b"
},
{
"id": "SAND-WP-0014-T05",
"path": "/home/worsch/sand-boxer/workplans/SAND-WP-0014-owner-mediated-execution.md",
"sha256": "1e8d225c0bb0eb2c894709ed49a2cb0a0af0449fb6eab0971b13524cd133a9d7",
"workplan": "SAND-WP-0014",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "c6812fd4-bb7b-5be0-8344-a122496fe5bc"
},
{
"id": "SECRETS-WP-0009-T03",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md",
"sha256": "9f97a7bc3724fdac82dacc6821d57a57061c7b1243792aedf814c3bd3173bbdc",
"workplan": "SECRETS-WP-0009",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "f8069c8a-ad6b-5d0b-9a36-c2326699437d"
},
{
"id": "CUST-WP-0073-T02",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0073-agent-credential-separation.md",
"sha256": "8cbf27819b4d8c689c6afadf0dd3eabe8a8cd4b399d20f05a5e7fe8749b9b43a",
"workplan": "CUST-WP-0073",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "4b88b0b7-dc7e-5612-aa5d-1a08f0530c35"
},
{
"id": "FORGE-WP-0006-T03",
"path": "/home/worsch/railiance-forge/workplans/FORGE-WP-0006-independent-secret-detection.md",
"sha256": "fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb",
"workplan": "FORGE-WP-0006",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "e65f9093-f615-5af9-a2c0-21e17ff35dcf"
}
],
"delivered_evidence": "Combined immutable runtime rebuilt; actual isolated manager/gateway proof passes synthetic credential delivery, read denial, cancellation and cleanup. Profile1.1.1 remains unverified. Runner loopback listener defect repaired separately.",
"next_native_deliverable": "Admit runtime through actual owner, execute bounded real-model rein acceptance, migrate actual assignment to isolated identity and prove per-job runner credential/repository-workflow abuse refusals.",
"real_blocker": "Model-call cost/scope and runtime custody/owner launch not admitted; actual assignment migration not done; host jobs share privileged runner authority and workflow authority/checks remain open.",
"closure_requires": "Actual identified task cannot read inherited host credentials or escape tool effects; real task cancellation/revocation and credential isolation proven; runner abuse matrix covers declared jobs/workflows.",
"independent_preparation_now": "Prepare exact real-model task/cost/egress proposal using existing GLAS T06 runner and immutable runtime; no new sandbox design or rerun of synthetic manager proof.",
"priority": 2
},
{
"gate": "TSA-07",
"native_status": "open",
"owners": [
"Secrets Engine",
"NetKingdom",
"credential and consumer owners"
],
"existing_tasks": [
{
"id": "NK-WP-0049-T02",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "479d6970-6516-50f5-9436-bb5b56d58aad"
},
{
"id": "NK-WP-0049-T21",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "77aa42be-7a39-5d93-8042-03d78b4094b4"
},
{
"id": "NK-WP-0049-T22",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "3ea6bf00-a87f-58ea-bdce-328c13a03a55"
}
],
"delivered_evidence": "Historical/current caller inventory and lifecycle source exist; backup custody grants cover only named backup lanes. Whole current owner/consumer denominator and lifecycle acceptance are incomplete.",
"next_native_deliverable": "Finish metadata-only caller/provider/consumer ledger, unknown/orphan and native-identity elimination dispositions, then sampled replacement/adoption/old-refusal/deletion at real owner boundaries.",
"real_blocker": "Current caller and legacy lane dispositions, consumer-selected replacement entitlement and owner acceptance inputs are missing. Founder exposure-rotation deferral remains binding.",
"closure_requires": "Admitted current denominator, explicit unknown/orphan findings, simplified lanes and complete native replacement/deletion semantics including old credential refusal without reopening deferred rotations.",
"independent_preparation_now": "Complete public-source inventory and owner dependency table under NK49 T02; do not fetch values, rotate credentials or claim absent assessment means absent control.",
"priority": 3
},
{
"gate": "TSA-08",
"native_status": "open",
"owners": [
"NetKingdom",
"Cluster",
"Secrets",
"Platform",
"root recovery owners"
],
"existing_tasks": [
{
"id": "NK-WP-0049-T17",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "b47f9975-d6d7-5bb8-93ce-886deb1dfa70"
},
{
"id": "NK-WP-0049-T19",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "6f8af1a7-2a3f-5fa8-8202-83103ebd55b2"
},
{
"id": "NK-WP-0049-T18",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "141dd773-c1fa-56c1-a852-bbe2372e5125"
},
{
"id": "NK-WP-0049-T33",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "56c8d469-7a10-5d50-a30e-95cbf3cd4756"
},
{
"id": "NK-WP-0049-T35",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "1bfd1703-589f-5511-bad5-812d860e4a71"
},
{
"id": "NK-WP-0049-T36",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md",
"sha256": "678ec04b73b57c026001791706c05c5d4d5a508a32f17210ae8ad03ab15d53b8",
"workplan": "NK-WP-0049",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "8b72334b-fc27-5707-a189-bad345eaf3bc"
},
{
"id": "RCLUSTER-WP-0018-T02",
"path": "/home/worsch/railiance-cluster/workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md",
"sha256": "96d52b6dbae056399159632d50b32ccc6662e4f6d3677af154f7c8a3d618334b",
"workplan": "RCLUSTER-WP-0018",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "90836435-917f-504c-a711-3f29ece348e3"
},
{
"id": "RCLUSTER-WP-0018-T05",
"path": "/home/worsch/railiance-cluster/workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md",
"sha256": "96d52b6dbae056399159632d50b32ccc6662e4f6d3677af154f7c8a3d618334b",
"workplan": "RCLUSTER-WP-0018",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "5bc67a22-0991-5625-86a6-f749560d8a0e"
},
{
"id": "SECRETS-WP-0015-T03",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md",
"sha256": "b3cab4e8d14b3b03179fc72a6e9ce1c0ee840cfa3247c022c1324d60378bde5b",
"workplan": "SECRETS-WP-0015",
"workplan_status": "ready",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "6262a915-7655-50be-b9f7-481f816d7335"
},
{
"id": "SECRETS-WP-0015-T04",
"path": "/home/worsch/secrets-engine/workplans/SECRETS-WP-0015-original-keycape-recovery-selector.md",
"sha256": "b3cab4e8d14b3b03179fc72a6e9ce1c0ee840cfa3247c022c1324d60378bde5b",
"workplan": "SECRETS-WP-0015",
"workplan_status": "ready",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "aeec6eb0-39e2-5f7c-8f5d-778133edfc73"
}
],
"delivered_evidence": "Independent off-host archive retrieval/recovery, actual LLDAP user authentication, retained privacyIDEA token-material decryption and old/new audit signature continuity verified. Real SOPS 65-case compatibility and synthetic KeyCape lifecycle delivered.",
"next_native_deliverable": "Prove original isolated Authelia/OIDC, retained-token real-factor MFA and selected KeyCape service consumer continuity with ordinary issuer unavailable; measure full restore/reconnect/audit RTO/RPO.",
"real_blocker": "Original TLS artifact/provider/private custody independent of outage remains unknown; current selected Secrets consumer requires attended OpenBao memory read and refuses file fallback. Exact owner-held restore/private admission and retained factor selection remain required.",
"closure_requires": "Actual original trust/key pairing or explicitly accepted reissue, independently admitted custody, successful existing-token MFA, original service authentication and consumer continuity plus measured RTO/RPO.",
"independent_preparation_now": "RCLUSTER18 T02 public metadata identification and T05 future archive disposition; SECRETS15 T03 exact outage-compatible consumer/custody plan. No new provider, file fallback or private read.",
"priority": 1
},
{
"gate": "TSA-09",
"native_status": "open",
"owners": [
"Audit Core",
"Approval",
"Access",
"Tenant",
"Secrets emitting owners"
],
"existing_tasks": [
{
"id": "APPROVAL-WP-0002-T04",
"path": "/home/worsch/approval-engine/workplans/APPROVAL-WP-0002-production-readiness-and-consumer-adoption.md",
"sha256": "9e0d1292516c4fc25c4521ab1dda3b3aecc1559260eb630a4bf1af5f0f10a4f5",
"workplan": "APPROVAL-WP-0002",
"workplan_status": "blocked",
"workplan_flavor": "residual",
"task_status": "wait",
"uuid": "777a5cf5-c1db-5e07-8de6-ab109db5ccdc"
},
{
"id": "AUDIT-WP-0015-T01",
"path": "/home/worsch/audit-core/workplans/AUDIT-WP-0015-independent-evidence-returns.md",
"sha256": "3b2d120dd9118e1eed8d8d6104beceebb78e02a3c2946bf3f804cd3bc9506490",
"workplan": "AUDIT-WP-0015",
"workplan_status": "blocked",
"workplan_flavor": null,
"task_status": "wait",
"uuid": "5fa2bfe4-df47-58a1-9240-80e2ad224617"
},
{
"id": "FLEX-WP-0024-T06",
"path": "/home/worsch/access-engine/workplans/FLEX-WP-0024-decision-envelope-authenticity.md",
"sha256": "cc94a493c23c16a3baa718b75ef5d48a596c6386c11534d50fd4839a6f0448f2",
"workplan": "FLEX-WP-0024",
"workplan_status": "active",
"workplan_flavor": null,
"task_status": "progress",
"uuid": "7f785b52-bf62-5884-8d34-670d70bc9023"
},
{
"id": "RPF-WP-0035-T12",
"path": "/home/worsch/railiance-platform/workplans/RPF-WP-0035-credential-lane-implementation.md",
"sha256": "139e4a6dd53f02cd184ebb12a5c30bcbfd0993cf9fdf1f42a1aa27b0823f32cf",
"workplan": "RPF-WP-0035",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "914bf383-c13f-5247-9af0-91d7e3a4784a"
}
],
"delivered_evidence": "Audit receiver/custody infrastructure and AUDIT0009 implementation are done; complete-ledger reconciliation source and bounded fixture pass. Native Access initial signer keeps audit delivery disabled.",
"next_native_deliverable": "Admit first protected-operation source/class inventory and cadence; drain its atomic outbox, independently retain full producer ledger and read back every event with boundary/lag/duplicate accounting and missing-class findings.",
"real_blocker": "Current source/class/cadence admission, runtime producer emission and independent receiver reconciliation are not established. AUDIT15 offsite chain-head custody owner/task and readback remain open. Approval0002 remains unpromoted residual.",
"closure_requires": "All expected effect classes and IDs reconcile at actual receiver acceptance time; concurrent boundary arrivals settle and missing/quiet classes produce findings; durable independent custody continuity evidenced.",
"independent_preparation_now": "Reuse completed AUDIT0009 and existing Access reconciliation contract; prepare exact class inventory/ledger/receiver receipt packet, no residual implementation or invented custody.",
"priority": 3
},
{
"gate": "TSA-10",
"native_status": "open",
"owners": [
"Forge",
"Repo Manager",
"Apps",
"private response owner"
],
"existing_tasks": [
{
"id": "FORGE-WP-0006-T02",
"path": "/home/worsch/railiance-forge/workplans/FORGE-WP-0006-independent-secret-detection.md",
"sha256": "fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb",
"workplan": "FORGE-WP-0006",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "210e7935-944a-5720-b356-18b48a68aa5e"
},
{
"id": "FORGE-WP-0006-T03",
"path": "/home/worsch/railiance-forge/workplans/FORGE-WP-0006-independent-secret-detection.md",
"sha256": "fbcf3f75e884f6c90554c05525d787f61cfc2b915a206e6010bed447e7a720eb",
"workplan": "FORGE-WP-0006",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "e65f9093-f615-5af9-a2c0-21e17ff35dcf"
},
{
"id": "RMGR-WP-0021-T03",
"path": "/home/worsch/repo-manager/workplans/RMGR-WP-0021-secret-detection-controls.md",
"sha256": "966d15ccdabc8edf98bc58f9422ea190566d05fe4208f4749f59a9731f4e108d",
"workplan": "RMGR-WP-0021",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "0ab44bd9-00d8-5470-ad45-7350e7868d0a"
},
{
"id": "RMGR-WP-0021-T04",
"path": "/home/worsch/repo-manager/workplans/RMGR-WP-0021-secret-detection-controls.md",
"sha256": "966d15ccdabc8edf98bc58f9422ea190566d05fe4208f4749f59a9731f4e108d",
"workplan": "RMGR-WP-0021",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "44272818-db49-58a2-83b1-d2f9e9d5976c"
}
],
"delivered_evidence": "22 workstation roots have admitted hooks; source/actual-hook batching/unavailability/cleanup T05 is done. Latest declared server inventory is 167 repos:166 admitted profiles, ID55 builtin-only. Receive expansion and template/custody recovery evidenced.",
"next_native_deliverable": "Execute existing FORGE6-ROUTES-001 r2 attended private disposable repository route suite; close declared CI authority/checks, repository55/submodules, import/mirror/new-repo coverage and private synthetic finding-to-response handling.",
"real_blocker": "Production authenticated HTTPS/API/frontend and session revocation remain unverified; repository55 has missing upstream sources; clone/fetch bypass receive-pack; CI workflow authority/required checks and private response are open.",
"closure_requires": "Complete admitted path/repository denominator with explicit uncovered scope; real positive/refusal native receipts and required checks/provenance; approved private finding classification/routing/resolution and exception lifecycle.",
"independent_preparation_now": "Prepare T04 synthetic metadata-only finding route and exact private review plan; inventory current source-path coverage without rerunning completed scanner T05.",
"priority": 2
},
{
"gate": "TSA-11",
"native_status": "open",
"owners": [
"Reuse Surface",
"Repo Manager",
"provider owners"
],
"existing_tasks": [
{
"id": "CUST-WP-0080-T06",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "6aca534c-5c7a-556f-b6b6-406433670c29"
},
{
"id": "REUSE-WP-0025-T03",
"path": "/home/worsch/reuse-surface/workplans/REUSE-WP-0025-private-source-reader-boundary.md",
"sha256": "7ebc371800c0be11e4a707d6e89915c1c659b469c65e2c2ee239c8b7144e8744",
"workplan": "REUSE-WP-0025",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "789bb918-4848-5bdf-bfd4-8ee42877addb"
}
],
"delivered_evidence": "70 reviewed IDs hosted exactly once on16Oct, 60 local indexes passed stronger parity; corrected two descriptions. Discovery delivered separately from full target closure.",
"next_native_deliverable": "Admit usable source links, current limits/version aliases and each package-family disposition, then show recurring drift detection and correction with receiver/readback evidence.",
"real_blocker": "70/70 dated snapshot does not prove source/package-family completion, recurring observation or every consumer resolver. REUSE25 native follow-through remains wait and cannot be inferred from Cust81 historical success.",
"closure_requires": "All reviewed capabilities retain exact owner/index parity and usable revisioned discovery; drift loop actually runs, reports and reconciles changes; package families explicitly dispositioned.",
"independent_preparation_now": "Prepare complete 70-row source-link/version/package-family audit from current public indexes and existing CUST80T06 obligation; do not redeploy discovery.",
"priority": 3
},
{
"gate": "TSA-12",
"native_status": "open",
"owners": [
"Activity Core",
"rein-aharness",
"Coordination",
"Custodian"
],
"existing_tasks": [
{
"id": "ACTIVITY-WP-0047-T02",
"path": "/home/worsch/activity-core/workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md",
"sha256": "e0b83b570da688abb405bed165d81db7cf49bc7ff11ef9a8ad86cbee2dc651db",
"workplan": "ACTIVITY-WP-0047",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "d0d5fddd-2d73-5156-aac3-49837aec2988"
},
{
"id": "ACTIVITY-WP-0047-T03",
"path": "/home/worsch/activity-core/workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md",
"sha256": "e0b83b570da688abb405bed165d81db7cf49bc7ff11ef9a8ad86cbee2dc651db",
"workplan": "ACTIVITY-WP-0047",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "d692a3eb-7878-5405-931c-e11db494f803"
},
{
"id": "CUST-WP-0079-T03",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0079-deterministic-security-flow.md",
"sha256": "f4ad3299c90f84f49e5867b3d358582c3faea65db4a2a4f595cf1a7f2b806097",
"workplan": "CUST-WP-0079",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "1be0569c-221d-5925-a0ff-fd2af88e52b1"
},
{
"id": "CUST-WP-0079-T05",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0079-deterministic-security-flow.md",
"sha256": "f4ad3299c90f84f49e5867b3d358582c3faea65db4a2a4f595cf1a7f2b806097",
"workplan": "CUST-WP-0079",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "8a3dc219-8982-5903-9407-e1b549d4544c"
}
],
"delivered_evidence": "Schedule source accepted but enabled false; no unassisted activation proof. Source/report/checkpoint tooling and coordination cases exist.",
"next_native_deliverable": "Obtain claiming rein workstation-checkout/Hub acceptance, publish enablement through owner release/admin-sync, manual trigger, then observe scheduled unassisted completed ops_run/report/checkpoint/changed-state notification without duplicates.",
"real_blocker": "Claiming execution runtime acceptance missing; unavailable workstation user systemd bus precludes host timer substitute. Source cadence adoption alone supplies no runtime/receiver receipt.",
"closure_requires": "Actual accepted schedule fires independently; report/checkpoint and changed-state delivery received; owner action followed by native remeasurement; applicable fleet cadence shows its required observation window.",
"independent_preparation_now": "Prepare exact existing fixed-command readiness and owner activation packet; do not add another scheduler or create worker wakeups.",
"priority": 2
},
{
"gate": "TSA-13",
"native_status": "open",
"owners": [
"NetKingdom",
"Access",
"Secrets",
"provider and consumer owners"
],
"existing_tasks": [
{
"id": "NK-WP-0048-T06",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "d9b26bcf-a7c6-59a2-92a0-f913d76a203c"
},
{
"id": "NK-WP-0048-T16",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "200bf500-5084-5ae7-be26-3033fe1f296e"
},
{
"id": "FLEX-WP-0024-T06",
"path": "/home/worsch/access-engine/workplans/FLEX-WP-0024-decision-envelope-authenticity.md",
"sha256": "cc94a493c23c16a3baa718b75ef5d48a596c6386c11534d50fd4839a6f0448f2",
"workplan": "FLEX-WP-0024",
"workplan_status": "active",
"workplan_flavor": null,
"task_status": "progress",
"uuid": "7f785b52-bf62-5884-8d34-670d70bc9023"
},
{
"id": "CUST-WP-0080-T06",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "6aca534c-5c7a-556f-b6b6-406433670c29"
}
],
"delivered_evidence": "Producer-format compatibility and cross-language/source fixtures delivered for initial seams; no two accepted real consumers.",
"next_native_deliverable": "Admit existing shared adapters for two named real consumers with version compatibility, denied-path parity, upgrades and rollback receipts.",
"real_blocker": "First native consumer remains unaccepted; second actual consumer and owner/version lock not admitted. Fixture parity is insufficient.",
"closure_requires": "Two actual consumers reuse same producer-owned format with exact contract/version pins; positive and denied outcomes, upgrade and rollback work without a second PDP.",
"independent_preparation_now": "Assemble source-only two-consumer compatibility matrix and identify actual owner dependencies under existing CUST80T06, preserving first-case ordering.",
"priority": 4
},
{
"gate": "TSA-14",
"native_status": "open",
"owners": [
"NetKingdom",
"package and provider owners"
],
"existing_tasks": [
{
"id": "NK-WP-0048-T06",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "d9b26bcf-a7c6-59a2-92a0-f913d76a203c"
},
{
"id": "NK-WP-0048-T07",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "c3c9c3ae-4f23-5ba7-9e6f-e63bcf29b9f7"
},
{
"id": "NK-WP-0048-T16",
"path": "/home/worsch/net-kingdom/workplans/NK-WP-0048-security-case-types.md",
"sha256": "b737bfae4802c122b21619695a169d7d082672af96314b1709860dd5aff2a60f",
"workplan": "NK-WP-0048",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "200bf500-5084-5ae7-be26-3033fe1f296e"
},
{
"id": "CUST-WP-0080-T06",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "6aca534c-5c7a-556f-b6b6-406433670c29"
}
],
"delivered_evidence": "Case type/schema, provider declarations and local thin package source exist; independent second clean installation is pending.",
"next_native_deliverable": "Lock one minimal admitted profile with dependency/optional-provider declarations and owner adapters; verify second clean install, full journeys and upgrade/recovery instructions.",
"real_blocker": "First known case and ordinary type/version admission remain open; local declaration/package tuple alone is not central registration, placement or runtime trust. T07 waits on T06.",
"closure_requires": "Independent second installation from locked package/provider versions produces complete positive/negative journeys and tested upgrade/recovery, with no hidden checkout or ambient credential dependency.",
"independent_preparation_now": "Document exact minimal profile lock/dependency closure from existing source; do not enqueue later types or implement T07 before T06 acceptance.",
"priority": 4
},
{
"gate": "TSA-15",
"native_status": "open",
"owners": [
"Resource Control",
"telemetry",
"consumer owners",
"Custodian"
],
"existing_tasks": [
{
"id": "CUST-WP-0071-T02",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md",
"sha256": "dd7b1afa47e5c1b78eee1be9df2b61d9c5b3ef1f9dea25f13e2631daacd5ada9",
"workplan": "CUST-WP-0071",
"workplan_status": "blocked",
"workplan_flavor": "planning",
"task_status": "wait",
"uuid": "82192370-2fd7-5363-88d2-3c67889d3d68"
},
{
"id": "CUST-WP-0071-T03",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md",
"sha256": "dd7b1afa47e5c1b78eee1be9df2b61d9c5b3ef1f9dea25f13e2631daacd5ada9",
"workplan": "CUST-WP-0071",
"workplan_status": "blocked",
"workplan_flavor": "planning",
"task_status": "wait",
"uuid": "6dc67558-eb1e-5bb6-a667-986f884dd495"
},
{
"id": "CUST-WP-0071-T04",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md",
"sha256": "dd7b1afa47e5c1b78eee1be9df2b61d9c5b3ef1f9dea25f13e2631daacd5ada9",
"workplan": "CUST-WP-0071",
"workplan_status": "blocked",
"workplan_flavor": "planning",
"task_status": "wait",
"uuid": "944f98e2-7e42-5894-925b-752423f3a1cc"
},
{
"id": "CUST-WP-0071-T05",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md",
"sha256": "dd7b1afa47e5c1b78eee1be9df2b61d9c5b3ef1f9dea25f13e2631daacd5ada9",
"workplan": "CUST-WP-0071",
"workplan_status": "blocked",
"workplan_flavor": "planning",
"task_status": "wait",
"uuid": "20ddd4d7-d85d-5b95-bb0a-7b0ca8af76ca"
},
{
"id": "RMGR-WP-0021-T05",
"path": "/home/worsch/repo-manager/workplans/RMGR-WP-0021-secret-detection-controls.md",
"sha256": "966d15ccdabc8edf98bc58f9422ea190566d05fe4208f4749f59a9731f4e108d",
"workplan": "RMGR-WP-0021",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "done",
"uuid": "25fbe694-41d8-5232-bce0-4ed362387d5a"
},
{
"id": "CUST-WP-0080-T06",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "6aca534c-5c7a-556f-b6b6-406433670c29"
}
],
"delivered_evidence": "Staged scanner warm generated 1/16/64-blob medians recorded with one-blob regression retained. Runtime headroom observations are dated and not reservations. Scanner T05 complete.",
"next_native_deliverable": "Admit representative operational baselines and repeats for onboarding touches/time, p50/p95 decision/effect latency, scanner tails/failure, resource/headroom and owner effort with equal control coverage.",
"real_blocker": "Representative pilot load/customer workflow and owner-native telemetry/effort samples missing; local fixture medians do not establish workload tails or production benefit.",
"closure_requires": "Comparable before/after denominators and unchanged controls, including adverse results and overhead, demonstrate actual operational improvement under representative use.",
"independent_preparation_now": "Prepare measurement protocol and missing baseline/owner matrix; preserve scanner results without another broad benchmark run.",
"priority": 4
},
{
"gate": "TSA-16",
"native_status": "open",
"owners": [
"Custodian",
"governance and all owner records"
],
"existing_tasks": [
{
"id": "CUST-WP-0080-T04",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "todo",
"uuid": "82378b0f-7004-5c2f-9683-b356a1227576"
},
{
"id": "CUST-WP-0080-T06",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md",
"sha256": "d8723566dbdfd8140b89d7e12ba2aeabf3fdf704b501dd899ab056e440981536",
"workplan": "CUST-WP-0080",
"workplan_status": "active",
"workplan_flavor": "implementation",
"task_status": "progress",
"uuid": "6aca534c-5c7a-556f-b6b6-406433670c29"
},
{
"id": "CUST-WP-0073-T04",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0073-agent-credential-separation.md",
"sha256": "8cbf27819b4d8c689c6afadf0dd3eabe8a8cd4b399d20f05a5e7fe8749b9b43a",
"workplan": "CUST-WP-0073",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "90725511-4e31-549f-b567-47feff1a9ca4"
},
{
"id": "CUST-WP-0079-T04",
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0079-deterministic-security-flow.md",
"sha256": "f4ad3299c90f84f49e5867b3d358582c3faea65db4a2a4f595cf1a7f2b806097",
"workplan": "CUST-WP-0079",
"workplan_status": "blocked",
"workplan_flavor": "implementation",
"task_status": "wait",
"uuid": "5dd52156-09a8-5781-b288-99ae822f59a6"
}
],
"delivered_evidence": "Architecture/SEC-DSM ledger, source owners, decisions and supervised record exist. State95 and RMGR19 finished after exact approved Helm77 guard; historical failure retained as approved exception.",
"next_native_deliverable": "Reconcile all sixteen gate receipts and SEC-DSM close-down controls to exact native proof/authority, retained deferrals and explicit residual promotion dispositions.",
"real_blocker": "All fifteen other native gates remain open; existing record grants no autopilot. APPROVAL0002 residual has no Hub promotion reason. Old source prose contains stale waits despite current task status.",
"closure_requires": "Requirement-by-requirement independent audit covers every named denominator and authoritative receipt, no invented owner assent, source/native separation, no implicit new authority or residual promotion.",
"independent_preparation_now": "This audit is a bounded current checkpoint under T04; root can reconcile stale narrative and exact publication, but do not mark native target complete.",
"priority": 1
}
],
"priority_preparation_candidates": [
{
"rank": 1,
"tasks": [
"RCLUSTER-WP-0018-T02",
"RCLUSTER-WP-0018-T05"
],
"deliverable": "Exact public-only original TLS artifact/provider/custody metadata disposition and future archive requirement handoff. Existing source and tool already published.",
"native_gate_effect": "Unblocks TSA08 attempt preparation; cannot close TSA08 alone."
},
{
"rank": 2,
"tasks": [
"SECRETS-WP-0015-T03"
],
"deliverable": "Exact original selected service consumer continuity/custody proof plan compatible with issuer/OpenBao outage; no file fallback or credentials.",
"native_gate_effect": "Unblocks TSA08/T18 selected consumer; native T04 remains human gated."
},
{
"rank": 3,
"tasks": [
"NK-WP-0048-T15",
"NK-WP-0048-T16"
],
"deliverable": "Authenticated original-attempt evidence lookup/restart contract and complete machine descriptor/callback/type-version proposal, using delivered checker.",
"native_gate_effect": "Removes source blockers to TSA04; CNPG/all-writer/native owner admission remains."
},
{
"rank": 4,
"tasks": [
"GLAS-WP-0012-T03",
"GLAS-WP-0012-T04"
],
"deliverable": "Exact immutable-runtime launch and bounded real-model task proposal with cost/egress/cleanup and actual task isolation receipts.",
"native_gate_effect": "Can satisfy named Glas profile slice only after runtime owner/supervisor assent; TSA06 runner/assignment denominator stays open."
},
{
"rank": 5,
"tasks": [
"FLEX-WP-0024-T06",
"RCLUSTER-WP-0017-T02",
"RCLUSTER-WP-0017-T03"
],
"deliverable": "Finalize existing R2/P4 signer/storage/custody review using actual founder entity/window/CCR and admitted storage evidence.",
"native_gate_effect": "First exact native pin may be accepted after owner assent; TSA01 entire PEP denominator remains open."
},
{
"rank": 6,
"tasks": [
"RMGR-WP-0021-T04"
],
"deliverable": "Synthetic private metadata-only finding route and exact review/exception/resolution plan; preserve deferred real rotations.",
"native_gate_effect": "Private response slice of TSA10 only; native path/CI coverage still open."
},
{
"rank": 7,
"tasks": [
"ACTIVITY-WP-0047-T02",
"ACTIVITY-WP-0047-T03"
],
"deliverable": "Claiming rein readiness, owner activation and first scheduled unassisted fire/readback.",
"native_gate_effect": "Can satisfy CUST79T03 slice after native execution; broader TSA12 cadence/change/remeasurement remains."
}
],
"narrative_drift_findings": [
{
"path": "/home/worsch/railiance-cluster/workplans/RCLUSTER-WP-0018-keycape-original-tls-recovery.md",
"finding": "Historical narrative still says STATE95T07/RMGR19T06 remain wait; source and Hub now done/finished. Retain historical failure while refreshing current checkpoint; this is not a fresh runtime blocker."
},
{
"path": "/home/worsch/the-custodian/workplans/CUST-WP-0079-deterministic-security-flow.md",
"finding": "T06 blocker text still lists RPF-WP-0044-T08 coulombcore check; actual source status is done (seen during audit). Do not reopen completed work from stale prose."
}
],
"hub_validation": {
"observed_at": "2026-10-17T02:04:44.628210+00:00",
"checks": [
{
"workplan": "SECRETS-WP-0009",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "SECRETS-WP-0009-T01",
"uuid": "4f1cf242-3aec-56a8-b958-5d53823875e0",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Define the exact native read lane",
"hub_error": null
},
{
"id": "SECRETS-WP-0009-T02",
"uuid": "fa4a3e87-0854-5e2b-af44-facd5b25f443",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Support data-only delivery policies",
"hub_error": null
},
{
"id": "SECRETS-WP-0009-T03",
"uuid": "f8069c8a-ad6b-5d0b-9a36-c2326699437d",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Activate the approved native lane and verify real owner delivery",
"hub_error": null
}
]
},
{
"workplan": "SECRETS-WP-0013",
"source_status": "proposed",
"hub_status": "proposed",
"status_matches": true,
"hub_flavor": "planning",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "SECRETS-WP-0013-T01",
"uuid": "b2f0d462-a542-518b-a26b-b7ec07b3c7c1",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Define the exact mediated execution contract",
"hub_error": null
},
{
"id": "SECRETS-WP-0013-T02",
"uuid": "4ad61917-506d-5c12-a715-3d336e6b95e0",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prevent consumption without execution readiness",
"hub_error": null
},
{
"id": "SECRETS-WP-0013-T03",
"uuid": "5f8f7c41-5921-543f-a7c6-0b1350ea6d82",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement and prove one native metadata action",
"hub_error": null
}
]
},
{
"workplan": "SECRETS-WP-0014",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "SECRETS-WP-0014-T01",
"uuid": "8baba9a3-3513-5f02-bafe-ed9dce743173",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prevent the Check credential from leaving the admitted local transport",
"hub_error": null
},
{
"id": "SECRETS-WP-0014-T02",
"uuid": "877782e5-045b-5186-8b95-82e25db21a5a",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement independently anchored responder authentication",
"hub_error": null
},
{
"id": "SECRETS-WP-0014-T03",
"uuid": "85aa4c78-b66d-5201-8e31-0ed50e7eaeec",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify the admitted native consumer and rotation path",
"hub_error": null
}
]
},
{
"workplan": "SECRETS-WP-0015",
"source_status": "ready",
"hub_status": "ready",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "SECRETS-WP-0015-T01",
"uuid": "a3e0e243-edac-5ade-a3d5-f58dac41633a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Establish exact current intended source selector",
"hub_error": null
},
{
"id": "SECRETS-WP-0015-T02",
"uuid": "eab3b758-10ce-5464-b5f7-3a152ee1327a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver bounded offline public source selector preflight",
"hub_error": null
},
{
"id": "SECRETS-WP-0015-T03",
"uuid": "6262a915-7655-50be-b9f7-481f816d7335",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare outage-compatible original consumer proof without custody bypass",
"hub_error": null
},
{
"id": "SECRETS-WP-0015-T04",
"uuid": "aeec6eb0-39e2-5f7c-8f5d-778133edfc73",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify the separately admitted actual isolated consumer result",
"hub_error": null
}
]
},
{
"workplan": "RPF-WP-0035",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "RPF-WP-0035-T01",
"uuid": "0f3606bb-e95b-5484-8a57-bcdd6e3916fd",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Consolidate completed designs and owner dependencies",
"hub_error": null
},
{
"id": "RPF-WP-0035-T02",
"uuid": "e0c82ea9-05a5-537e-8fbf-67534263572e",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Accept and provision secrets-engine service JWT login",
"hub_error": null
},
{
"id": "RPF-WP-0035-T03",
"uuid": "f47e5bc5-6f3c-54bb-aa35-260ad03892ba",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement the platform operator-write CCR contract and Fluid lane",
"hub_error": null
},
{
"id": "RPF-WP-0035-T04",
"uuid": "35a85846-61d5-54ce-8b18-ede45733d53c",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Accept the needed signing lane and deliver it to the owning runtime",
"hub_error": null
},
{
"id": "RPF-WP-0035-T05",
"uuid": "e15d62c9-e5da-5721-a135-87c050f7851c",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Admit KeyCape approval-engine client custody and delivery",
"hub_error": null
},
{
"id": "RPF-WP-0035-T07",
"uuid": "0dd7c9a5-65a0-53fc-b6c3-5ad96ee56f7b",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Dispose of the ungoverned whynot-design npm duplicate",
"hub_error": null
},
{
"id": "RPF-WP-0035-T06",
"uuid": "68bff751-e48b-548b-8fb4-dfb3b16210c2",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Admit the separate approval client-side readers",
"hub_error": null
},
{
"id": "RPF-WP-0035-T08",
"uuid": "0ef52c26-2669-5cd1-8149-b1f6fcdda6cb",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Admit the two factory audit-sender custody lanes",
"hub_error": null
},
{
"id": "RPF-WP-0035-T09",
"uuid": "7c753be6-42f1-58a6-a4a4-a7ed686f461f",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Founder approval of the CCR-2026-0033 custody child",
"hub_error": null
},
{
"id": "RPF-WP-0035-T10",
"uuid": "af2d4dba-f83a-5819-9a8b-671bae799364",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Retire the approval-engine-operator client delivery and custody (CCR-2026-0018)",
"hub_error": null
},
{
"id": "RPF-WP-0035-T11",
"uuid": "7952c8cd-c066-5b72-a025-78d24341c1ab",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Complete independent service-JWT source preparation and execution design",
"hub_error": null
},
{
"id": "RPF-WP-0035-T12",
"uuid": "914bf383-c13f-5247-9af0-91d7e3a4784a",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement and prove the separately approved task execution entitlement",
"hub_error": null
},
{
"id": "RPF-WP-0035-T13",
"uuid": "8f6966fa-6e9a-58b2-8b40-c47340ec19d1",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Complete independent KEY39 v4 lifecycle source review preparation",
"hub_error": null
}
]
},
{
"workplan": "FLEX-WP-0024",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": null,
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "FLEX-WP-0024-T01",
"uuid": "b8fad80d-5c44-5e26-a632-5096e0c0f3c5",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "1. Publish the stance and stop publishing bare Service names",
"hub_error": null
},
{
"id": "FLEX-WP-0024-T02",
"uuid": "5482f3cd-36cb-55e0-8c52-0ca2340ed4d7",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "2. Choose the signature shape and key custody",
"hub_error": null
},
{
"id": "FLEX-WP-0024-T03",
"uuid": "041612ea-1be4-5997-8c32-49f8bcc50855",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "3. Implement signing and verification",
"hub_error": null
},
{
"id": "FLEX-WP-0024-T04",
"uuid": "82d6b75e-e2c6-5e3d-a897-fbdfb7c9094e",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "4. Report the gap to gate-house",
"hub_error": null
},
{
"id": "FLEX-WP-0024-T05",
"uuid": "cfe4d275-9f02-5090-8391-06eea59d45c5",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "5. Wire owner signing into the decision pin and retained deployment charts",
"hub_error": null
},
{
"id": "FLEX-WP-0024-T06",
"uuid": "7f785b52-bf62-5884-8d34-670d70bc9023",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "6. Admit custody, consumer trust, exact packages and native signed decisions",
"hub_error": null
}
]
},
{
"workplan": "APPROVAL-WP-0002",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "residual",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "APPROVAL-WP-0002-T01",
"uuid": "dc4523f5-e0af-5734-a0ef-07aa7f2b2a27",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Authenticate lifecycle mutations and approver evidence",
"hub_error": null
},
{
"id": "APPROVAL-WP-0002-T02",
"uuid": "2bef94ca-9482-5eff-9bd9-39adef292a78",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Harden durable storage and migrations",
"hub_error": null
},
{
"id": "APPROVAL-WP-0002-T03",
"uuid": "f0aa2e6d-19e6-5b43-886c-efa4e3de5f22",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Package and deploy the service",
"hub_error": null
},
{
"id": "APPROVAL-WP-0002-T04",
"uuid": "777a5cf5-c1db-5e07-8de6-ab109db5ccdc",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Wire outbox delivery and reconciliation",
"hub_error": null
},
{
"id": "APPROVAL-WP-0002-T05",
"uuid": "3196fb77-3df0-5358-ae12-2d07bac12041",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove one live PEP consumption path",
"hub_error": null
},
{
"id": "APPROVAL-WP-0002-T06",
"uuid": "1c6d6936-1a16-5f41-ba7d-5cfbd4231bf9",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Make presentation exclusion a tested binding contract",
"hub_error": null
}
]
},
{
"workplan": "APPROVAL-WP-0004",
"source_status": "finished",
"hub_status": "finished",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "APPROVAL-WP-0004-T01",
"uuid": "b0b0a5a9-f7e7-508b-96d0-4b02457b16fc",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Preserve verified consumer and approved operation in the use source row",
"hub_error": null
},
{
"id": "APPROVAL-WP-0004-T02",
"uuid": "2b932ef8-e143-5bb7-856e-4cba4fb22c09",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Integrate independently reviewed source and synchronize work records",
"hub_error": null
}
]
},
{
"workplan": "NK-WP-0048",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "NK-WP-0048-T01",
"uuid": "930ac3e9-20ec-5473-98cd-3fe8fddb730f",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "NK-WP-0048-T02",
"uuid": "19c25d96-a55c-58f0-9168-3fdbc4955fc2",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T01 \u2014 Accept the terminology and the canon",
"hub_error": null
},
{
"id": "NK-WP-0048-T03",
"uuid": "e487975b-73b1-516c-971d-da4cbbb93063",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T02 \u2014 Inventory the de-facto types already built by hand",
"hub_error": null
},
{
"id": "NK-WP-0048-T04",
"uuid": "2fffe112-7d55-5680-9952-78d74f44f87f",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T03 \u2014 Schema, template and validator",
"hub_error": null
},
{
"id": "NK-WP-0048-T05",
"uuid": "3d987d3d-0797-538b-86e4-51185a327ae2",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T04 \u2014 Define the first type: browser OIDC relying party",
"hub_error": null
},
{
"id": "NK-WP-0048-T06",
"uuid": "d9b26bcf-a7c6-59a2-92a0-f913d76a203c",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T05 \u2014 Acknowledge the type through informed-decision",
"hub_error": null
},
{
"id": "NK-WP-0048-T07",
"uuid": "c3c9c3ae-4f23-5ba7-9e6f-e63bcf29b9f7",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T06 \u2014 First KnownSecurityCase: Forgejo",
"hub_error": null
},
{
"id": "NK-WP-0048-T08",
"uuid": "8e519082-dc8b-5e46-b660-03d03e55dcf6",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T07 \u2014 Queue the next types",
"hub_error": null
},
{
"id": "NK-WP-0048-T09",
"uuid": "0ee12dfc-8260-5038-bd39-cc7fb4113be0",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T08 \u2014 identity-provisioner: ensure service-access groups",
"hub_error": null
},
{
"id": "NK-WP-0048-T10",
"uuid": "4b06ca97-c1e4-5680-bf22-ab75ab1646a4",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T10 \u2014 Source compatibility checker for Mason and Warden evidence",
"hub_error": null
},
{
"id": "NK-WP-0048-T11",
"uuid": "ef2a0119-f59e-5e45-9519-115da9df7b85",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T11 \u2014 Validate the optional machine-descriptor pin contract",
"hub_error": null
},
{
"id": "NK-WP-0048-T12",
"uuid": "7ce4eee3-cd47-55a9-bfa5-4f1835d4d6fd",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T12 \u2014 Prepare NetKingdom-owned attended step adapters",
"hub_error": null
},
{
"id": "NK-WP-0048-T13",
"uuid": "b264c10b-565c-5d29-b788-03cf5fbd2883",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T13 \u2014 Prepare the fixed registration adapter source candidate",
"hub_error": null
},
{
"id": "NK-WP-0048-T14",
"uuid": "fce95440-a25b-5f27-8ef3-a3d182099113",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T14 \u2014 Admit governed group rollback against native owner boundaries",
"hub_error": null
},
{
"id": "NK-WP-0048-T15",
"uuid": "1b825705-4848-5edc-832f-b1622cd9bdb7",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T15 \u2014 Define authenticated recovery for lost registration process state",
"hub_error": null
},
{
"id": "NK-WP-0048-T16",
"uuid": "200bf500-5084-5ae7-be26-3033fe1f296e",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T16 \u2014 Select and review the actual machine descriptor composition",
"hub_error": null
},
{
"id": "NK-WP-0048-T17",
"uuid": "8c3e4baa-a218-5996-af9e-fe1153a46dac",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T17 \u2014 Build and exercise the exact offline config-checker artifact",
"hub_error": null
},
{
"id": "NK-WP-0048-T18",
"uuid": "9c45da71-fb4c-5f20-9065-90f448f37c64",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T18 \u2014 Make checker input and executable selection deterministic",
"hub_error": null
},
{
"id": "NK-WP-0048-T19",
"uuid": "f50fdcd1-00be-5c3c-be0c-345aa2126032",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T19 \u2014 Bind checker execution to verified immutable attempt bytes",
"hub_error": null
},
{
"id": "NK-WP-0048-T20",
"uuid": "863fcbdb-e246-51ba-87ca-a2f44d01d6f8",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T20 \u2014 Prepare durable group provenance and prove disposable LLDAP compatibility",
"hub_error": null
},
{
"id": "NK-WP-0048-T21",
"uuid": "afe78e4d-408a-516a-ab92-e212e8a2d11d",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "T21 \u2014 Implement the PostgreSQL journal and prove disposable SQL compatibility",
"hub_error": null
}
]
},
{
"workplan": "NK-WP-0049",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "NK-WP-0049-T01",
"uuid": "d7ca8d5f-c5ff-5cba-bd25-038cb53ffe4e",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Remove secret-bearing output and ambient root discovery",
"hub_error": null
},
{
"id": "NK-WP-0049-T04",
"uuid": "04c4e8be-5bd8-5d5c-99b1-79d8ae758462",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Harden custody, SOPS and rotation source entry points",
"hub_error": null
},
{
"id": "NK-WP-0049-T05",
"uuid": "e8e38f42-609e-5c07-a8e6-e73c8eb4ae95",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Repair component, diagnostic, LDAP and resolver callers",
"hub_error": null
},
{
"id": "NK-WP-0049-T06",
"uuid": "a5f50891-c5b2-513b-8670-e1915ee52015",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Inventory source callers and retire remaining unsafe delivery paths",
"hub_error": null
},
{
"id": "NK-WP-0049-T07",
"uuid": "2d7302a2-319a-5633-bf58-d51ccd25ebf6",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Discover off-host coverage and recover the existing PI database",
"hub_error": null
},
{
"id": "NK-WP-0049-T08",
"uuid": "317ca173-c784-5329-9810-5e3d300604b8",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement the full identity capture and archive recovery toolchain",
"hub_error": null
},
{
"id": "NK-WP-0049-T09",
"uuid": "4a47eb2a-7e42-5ae7-9df1-f5ede746eca1",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Admit and verify the two scoped backup credential deliveries",
"hub_error": null
},
{
"id": "NK-WP-0049-T10",
"uuid": "0519444c-d559-5455-aa27-8c5dc8b832b0",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Apply capture isolation and install the guarded node runtime",
"hub_error": null
},
{
"id": "NK-WP-0049-T11",
"uuid": "d69af493-4026-56a8-a526-c267d90dce18",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Connect recovery to Railiance bootstrap and reuse discovery",
"hub_error": null
},
{
"id": "NK-WP-0049-T12",
"uuid": "decb415a-8012-521c-9dbe-d73c6ff0bbfb",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Create and verify the first full off-host identity bundle",
"hub_error": null
},
{
"id": "NK-WP-0049-T13",
"uuid": "602d4921-cfac-5e5b-9993-4fbf67195c7d",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Independently retrieve and recover the complete actual archive",
"hub_error": null
},
{
"id": "NK-WP-0049-T14",
"uuid": "eaf0708f-b3b7-5531-8172-95edf30c3a19",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Activate and prove the complete recurring backup and retention job",
"hub_error": null
},
{
"id": "NK-WP-0049-T02",
"uuid": "479d6970-6516-50f5-9436-bb5b56d58aad",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Map current callers, owners and native acceptance gaps",
"hub_error": null
},
{
"id": "NK-WP-0049-T15",
"uuid": "1d1eb903-a4b0-5bc4-a421-0b842d7f68ae",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare the isolated full-service restore and acceptance packet",
"hub_error": null
},
{
"id": "NK-WP-0049-T16",
"uuid": "b64d4d6a-e851-58d1-9929-f03343147de0",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove restored LLDAP directory and existing-user authentication",
"hub_error": null
},
{
"id": "NK-WP-0049-T17",
"uuid": "b47f9975-d6d7-5bb8-93ce-886deb1dfa70",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove restored Authelia storage and OIDC continuity",
"hub_error": null
},
{
"id": "NK-WP-0049-T19",
"uuid": "6f8af1a7-2a3f-5fa8-8202-83103ebd55b2",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove retained privacyIDEA token decryption and existing-token MFA",
"hub_error": null
},
{
"id": "NK-WP-0049-T20",
"uuid": "375fa8f9-b8a5-5048-97a7-ec141aa7c45d",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove historical and new privacyIDEA audit-signature continuity",
"hub_error": null
},
{
"id": "NK-WP-0049-T18",
"uuid": "141dd773-c1fa-56c1-a852-bbe2372e5125",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove restored KeyCape issuer, policy and consumer continuity",
"hub_error": null
},
{
"id": "NK-WP-0049-T21",
"uuid": "77aa42be-7a39-5d93-8042-03d78b4094b4",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify current caller and provider admission at their actual boundaries",
"hub_error": null
},
{
"id": "NK-WP-0049-T22",
"uuid": "3ea6bf00-a87f-58ea-bdce-328c13a03a55",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Resolve historical credential and configuration-preserving rotation dispositions",
"hub_error": null
},
{
"id": "NK-WP-0049-T23",
"uuid": "1ec537ee-dfee-5576-be36-a81bdba417d1",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Provide retrieval that works when OpenBao and SSO are unavailable",
"hub_error": null
},
{
"id": "NK-WP-0049-T24",
"uuid": "474f5a78-a643-59c6-bcf9-fc4a908dfcb0",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Record owner disposition for second-provider and external monitoring gaps",
"hub_error": null
},
{
"id": "NK-WP-0049-T25",
"uuid": "1c5ea7a1-edf7-5072-b36b-8be7f827957a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver and verify the offline retrieval adapter and recovery tools kit",
"hub_error": null
},
{
"id": "NK-WP-0049-T26",
"uuid": "94d054fe-e5d8-5ddf-8e48-80714123d184",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Publish and verify the disaster recovery guide on Storage Share",
"hub_error": null
},
{
"id": "NK-WP-0049-T27",
"uuid": "e273e803-bee7-5d90-bc51-ecc08c0c8eff",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Draft the isolated service restore packet and observe candidate images",
"hub_error": null
},
{
"id": "NK-WP-0049-T28",
"uuid": "4829b091-76d2-5b10-bdfc-032800190c0a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Stage and verify the five exact service images for local offline recovery",
"hub_error": null
},
{
"id": "NK-WP-0049-T29",
"uuid": "2f8c73b0-1cdd-5b22-99b6-017ccde4454b",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare and verify the bounded native LLDAP recovery executor",
"hub_error": null
},
{
"id": "NK-WP-0049-T30",
"uuid": "6e4a43db-9be2-5662-bdbf-1595fce03052",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare the bounded native privacyIDEA token-material and audit executor",
"hub_error": null
},
{
"id": "NK-WP-0049-T31",
"uuid": "26383841-8076-5c53-bbd1-9db64e32544a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify retained privacyIDEA token material inside the isolated provider",
"hub_error": null
},
{
"id": "NK-WP-0049-T32",
"uuid": "cd78dbb7-a8f2-5754-8788-6eb1b7d97741",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver isolated KeyCape restore source and synthetic lifecycle proof",
"hub_error": null
},
{
"id": "NK-WP-0049-T33",
"uuid": "56c8d469-7a10-5d50-a30e-95cbf3cd4756",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare the exact owner-held KeyCape recovery attempt",
"hub_error": null
},
{
"id": "NK-WP-0049-T34",
"uuid": "821b3a56-6f36-5812-abc9-5a00e37cb2e7",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver attended custody, metadata preflight and private manifest preparation source",
"hub_error": null
},
{
"id": "NK-WP-0049-T35",
"uuid": "1bfd1703-589f-5511-bad5-812d860e4a71",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Establish original KeyCape TLS and trust recovery ownership for outage use",
"hub_error": null
},
{
"id": "NK-WP-0049-T36",
"uuid": "8b72334b-fc27-5707-a189-bad345eaf3bc",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare selected original service registration and private admission bindings",
"hub_error": null
},
{
"id": "NK-WP-0049-T37",
"uuid": "3403e266-d63b-5ce1-b891-3bfeac93d28c",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify actual SOPS compatibility and sealed-descriptor read/write custody",
"hub_error": null
},
{
"id": "NK-WP-0049-T03",
"uuid": "d68cd4d3-1ba3-530e-88f9-26ebb8dd6eac",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Accept remaining recovery and caller evidence and close the G08 handoff",
"hub_error": null
}
]
},
{
"workplan": "NK-WP-0050",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "NK-WP-0050-T01",
"uuid": "64893d94-9717-5812-b8e3-7cabe095fcdc",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare exact registrations and preservation checks",
"hub_error": null
},
{
"id": "NK-WP-0050-T02",
"uuid": "a9dadd07-f136-5dc7-9229-7a9dbb941f0d",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver custody integration and guarded registration activation",
"hub_error": null
},
{
"id": "NK-WP-0050-T03",
"uuid": "5a3aaf57-de5c-5a03-bc99-9bcf2fc5d95e",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify issuer and real consumer acceptance",
"hub_error": null
}
]
},
{
"workplan": "GLAS-WP-0012",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "GLAS-WP-0012-T01",
"uuid": "711aeb7e-4664-5078-8c65-3fe6f46f7999",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Establish the exact local baseline and acceptance requirements",
"hub_error": null
},
{
"id": "GLAS-WP-0012-T02",
"uuid": "4209f564-a9ee-57f9-9522-3708988801ef",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Resolve and verify the owner runtime, credential, and egress contract",
"hub_error": null
},
{
"id": "GLAS-WP-0012-T03",
"uuid": "c660808a-1724-555c-bc59-7318870d3591",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Review and validate the versioned Glas proof candidate",
"hub_error": null
},
{
"id": "GLAS-WP-0012-T04",
"uuid": "3e791432-8f37-54bd-a44a-55eeff11ac19",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove one real bounded rein task inside the sandbox",
"hub_error": null
},
{
"id": "GLAS-WP-0012-T05",
"uuid": "f7635cf6-e044-52d4-8242-0512e0ccbd7b",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Publish evidence and mark only the proven profile ready",
"hub_error": null
},
{
"id": "GLAS-WP-0012-T06",
"uuid": "d0c26709-549f-540a-8250-1fd1b2e4960a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare the real-rein acceptance runner",
"hub_error": null
}
]
},
{
"workplan": "SAND-WP-0014",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "SAND-WP-0014-T01",
"uuid": "1b4349de-7027-5f01-8deb-122772e1404d",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Define the governed execution contract",
"hub_error": null
},
{
"id": "SAND-WP-0014-T02",
"uuid": "59f9af7c-7cd7-5e86-849f-5dfc7a3a06ee",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement owner-mediated bwrap execution",
"hub_error": null
},
{
"id": "SAND-WP-0014-T03",
"uuid": "4fc7d747-13d5-58e7-b89e-b72e845515aa",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Remove direct namespace-entry guidance",
"hub_error": null
},
{
"id": "SAND-WP-0014-T04",
"uuid": "c7ada937-4430-59d7-b3a6-9f3f36e9a907",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify unit and local namespace behavior",
"hub_error": null
},
{
"id": "SAND-WP-0014-T05",
"uuid": "c6812fd4-bb7b-5be0-8344-a122496fe5bc",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prove one governed rein and coordinate consumers",
"hub_error": null
}
]
},
{
"workplan": "REINAH-WP-0008",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": null,
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "REINAH-WP-0008-T01",
"uuid": "c6536c8d-7862-5de6-ad2b-401077b60c04",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "A. Free rehearsal on the host",
"hub_error": null
},
{
"id": "REINAH-WP-0008-T02",
"uuid": "6a413f5a-4ac2-5d5e-9b19-71b33445c0a9",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "B. Release holds that provably cost nothing",
"hub_error": null
},
{
"id": "REINAH-WP-0008-T03",
"uuid": "87457216-2371-51ca-b3d4-3917e6f180a2",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "D. One owner command for renewal",
"hub_error": null
},
{
"id": "REINAH-WP-0008-T04",
"uuid": "898e02af-51bb-5e8d-93d0-ae908466c612",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "C. Envelopes that cover several attempts (decision)",
"hub_error": null
},
{
"id": "REINAH-WP-0008-T05",
"uuid": "b486e86b-9d0f-501d-a394-771b40f771ee",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "E. Ship the owner runtime as a container image (decision)",
"hub_error": null
},
{
"id": "REINAH-WP-0008-T06",
"uuid": "4cf721e6-724b-5c64-91bb-67b098bb97af",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "F. Approvals per envelope (decision)",
"hub_error": null
},
{
"id": "REINAH-WP-0008-T07",
"uuid": "80318842-ccaa-5484-a54a-3d9981eaec8b",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Retry on the corrected runtime",
"hub_error": null
}
]
},
{
"workplan": "KEY-WP-0040",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "KEY-WP-0040-T01",
"uuid": "b385602d-714a-5fdb-b40b-bd870420f28e",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Recovery preview rejects valid input (F6)",
"hub_error": null
},
{
"id": "KEY-WP-0040-T02",
"uuid": "3ad155dd-15ef-5522-bdf9-c78832728553",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Link the OTP prompt to lost-authenticator help (F3)",
"hub_error": null
}
]
},
{
"workplan": "USER-WP-0026",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "USER-WP-0026-T01",
"uuid": "86324ec8-cf2f-5e9e-bb60-670c4d792828",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement and validate recovery",
"hub_error": null
},
{
"id": "USER-WP-0026-T02",
"uuid": "ad5b0a77-d8ec-5e07-9a9e-2fa231a6f792",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Publish and verify the recovery flow",
"hub_error": null
},
{
"id": "USER-WP-0026-T03",
"uuid": "95e9a6d4-7e57-5483-97c5-3f4a45bb6767",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Discover workload access from authoritative application records",
"hub_error": null
}
]
},
{
"workplan": "FORGE-WP-0006",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "FORGE-WP-0006-T01",
"uuid": "cd81bc07-e3b9-55f4-bafd-e78d271497ee",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement introduced-history refusal and verify the protocol",
"hub_error": null
},
{
"id": "FORGE-WP-0006-T02",
"uuid": "210e7935-944a-5720-b356-18b48a68aa5e",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Admit the inventory and activate a reviewed server profile",
"hub_error": null
},
{
"id": "FORGE-WP-0006-T03",
"uuid": "e65f9093-f615-5af9-a2c0-21e17ff35dcf",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify CI independence, detection response and complete coverage",
"hub_error": null
}
]
},
{
"workplan": "RMGR-WP-0019",
"source_status": "finished",
"hub_status": "finished",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "RMGR-WP-0019-T01",
"uuid": "d78a622e-39f9-5923-b4e1-f70fdc17fb42",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Review exact historical receiving contract",
"hub_error": null
},
{
"id": "RMGR-WP-0019-T02",
"uuid": "95240c81-1805-5365-9b35-d238621a16bf",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Enable exact frozen registrar exceptions after receiving deployment",
"hub_error": null
},
{
"id": "RMGR-WP-0019-T03",
"uuid": "682eea14-a4a8-5f33-9a9f-8f2f1ac8288d",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Run normal owner sync and verify preserved identities",
"hub_error": null
},
{
"id": "RMGR-WP-0019-T04",
"uuid": "1ccb06c6-ad30-5847-8704-e5628ba81f35",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare exact cluster registrar successor",
"hub_error": null
},
{
"id": "RMGR-WP-0019-T05",
"uuid": "36f47e21-42d0-5aef-b065-4a5dd3af0726",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Admit cluster registrar successor only after receiving verification",
"hub_error": null
},
{
"id": "RMGR-WP-0019-T06",
"uuid": "4d1675b6-f49f-5b01-8d76-bbf2030d1b34",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Run ordinary cluster owner publication and verify preservation",
"hub_error": null
}
]
},
{
"workplan": "RMGR-WP-0021",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "RMGR-WP-0021-T01",
"uuid": "d3d20c18-5a5f-5f8a-b5c4-a22b4b662ebe",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Provide a bounded content-silent staged-object scanner adapter",
"hub_error": null
},
{
"id": "RMGR-WP-0021-T02",
"uuid": "e27817e6-b298-581f-b99a-05ec459be749",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Admit the tool and activate local prevention for the reviewed repositories",
"hub_error": null
},
{
"id": "RMGR-WP-0021-T03",
"uuid": "0ab44bd9-00d8-5470-ad45-7350e7868d0a",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Establish independent forge and CI detection coverage",
"hub_error": null
},
{
"id": "RMGR-WP-0021-T04",
"uuid": "44272818-db49-58a2-83b1-d2f9e9d5976c",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify private finding-to-response handling",
"hub_error": null
},
{
"id": "RMGR-WP-0021-T05",
"uuid": "25fbe694-41d8-5232-bce0-4ed362387d5a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Publish measured staged-scanner batching and verify runtime routing",
"hub_error": null
}
]
},
{
"workplan": "ACTIVITY-WP-0047",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "ACTIVITY-WP-0047-T01",
"uuid": "cbe8cfe2-43ef-5a31-b163-c473572754b7",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Source definition",
"hub_error": null
},
{
"id": "ACTIVITY-WP-0047-T02",
"uuid": "d0d5fddd-2d73-5156-aac3-49837aec2988",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Activation",
"hub_error": null
},
{
"id": "ACTIVITY-WP-0047-T03",
"uuid": "d692a3eb-7878-5405-931c-e11db494f803",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "First unassisted fire",
"hub_error": null
}
]
},
{
"workplan": "CUST-WP-0071",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "planning",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "CUST-WP-0071-T01",
"uuid": "4ae8eb8d-f8c5-5256-ae50-c323cfd73d7a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Reconcile live capacity, demand and ownership evidence",
"hub_error": null
},
{
"id": "CUST-WP-0071-T02",
"uuid": "82192370-2fd7-5363-88d2-3c67889d3d68",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Measure the Vergabe prototype under representative pilot use",
"hub_error": null
},
{
"id": "CUST-WP-0071-T03",
"uuid": "6dc67558-eb1e-5bb6-a667-986f884dd495",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Review ecosystem allocations and reserve operating room",
"hub_error": null
},
{
"id": "CUST-WP-0071-T04",
"uuid": "944f98e2-7e42-5894-925b-752423f3a1cc",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Apply accepted sizing changes and verify their effects",
"hub_error": null
},
{
"id": "CUST-WP-0071-T05",
"uuid": "20ddd4d7-d85d-5b95-bb0a-7b0ca8af76ca",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Establish the regular weekly workload-demand and allocation assessment",
"hub_error": null
}
]
},
{
"workplan": "CUST-WP-0073",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "CUST-WP-0073-T01",
"uuid": "4781bb99-020f-59f6-be13-e3b8777d3fd8",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Decide the identity model",
"hub_error": null
},
{
"id": "CUST-WP-0073-T02",
"uuid": "4b88b0b7-dc7e-5612-aa5d-1a08f0530c35",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Build and hand out the agent identity",
"hub_error": null
},
{
"id": "CUST-WP-0073-T03",
"uuid": "5abbfcae-eb65-5b62-a7fa-f4f698f95312",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Reject last-applied annotations on Secrets",
"hub_error": null
},
{
"id": "CUST-WP-0073-T04",
"uuid": "90725511-4e31-549f-b567-47feff1a9ca4",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Fleet guidance and harness guards",
"hub_error": null
},
{
"id": "CUST-WP-0073-T05",
"uuid": "1b41b532-38a2-5f39-b387-28737934811a",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Rotate what was exposed",
"hub_error": null
}
]
},
{
"workplan": "CUST-WP-0079",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "CUST-WP-0079-T01",
"uuid": "618b32bb-3b30-5c31-b054-65b455d62b0b",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Founder decision batch and hub/repo decision sync",
"hub_error": null
},
{
"id": "CUST-WP-0079-T02",
"uuid": "2764581a-ff8f-5a05-90bd-3dc6bd058ae5",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deterministic tooling",
"hub_error": null
},
{
"id": "CUST-WP-0079-T03",
"uuid": "1be0569c-221d-5925-a0ff-fd2af88e52b1",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Schedule the flow report and decision sync",
"hub_error": null
},
{
"id": "CUST-WP-0079-T04",
"uuid": "5dd52156-09a8-5781-b288-99ae822f59a6",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Encode the standing change rule as a policy-nexus guardrail",
"hub_error": null
},
{
"id": "CUST-WP-0079-T05",
"uuid": "8a3dc219-8982-5903-9407-e1b549d4544c",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Stop agent-authored index and sync commits",
"hub_error": null
},
{
"id": "CUST-WP-0079-T06",
"uuid": "e3da807f-9a6e-513f-82dc-3714a489e7bf",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Attended window #1",
"hub_error": null
},
{
"id": "CUST-WP-0079-T07",
"uuid": "91ec924c-b305-5a63-925d-087a3b927d60",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Re-engage the coding agent with the renewed goal",
"hub_error": null
}
]
},
{
"workplan": "CUST-WP-0080",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "CUST-WP-0080-T01",
"uuid": "c770f7e1-25eb-53ec-9a37-1f7794077ff8",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Review canon and map actual architecture",
"hub_error": null
},
{
"id": "CUST-WP-0080-T02",
"uuid": "5973026f-8ca9-5882-99fe-65a54bc250ac",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Inspect and optimize the blueprint before planning closure",
"hub_error": null
},
{
"id": "CUST-WP-0080-T03",
"uuid": "87637402-02f1-57c1-8fbc-4141598af8e3",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Close source defects and reconcile uncovered lifecycle gaps",
"hub_error": null
},
{
"id": "CUST-WP-0080-T04",
"uuid": "82378b0f-7004-5c2f-9683-b356a1227576",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify native closure against every requirement",
"hub_error": null
},
{
"id": "CUST-WP-0080-T05",
"uuid": "ed8b909a-23bf-5e5f-b600-e477fbae136b",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Coordinate self-service Playwright identity delivery",
"hub_error": null
},
{
"id": "CUST-WP-0080-T06",
"uuid": "6aca534c-5c7a-556f-b6b6-406433670c29",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Establish the target architecture and drive the restructuring",
"hub_error": null
}
]
},
{
"workplan": "AUDIT-WP-0009",
"source_status": "finished",
"hub_status": "finished",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "AUDIT-WP-0009-T01",
"uuid": "f545b0e4-8c99-5186-affd-ce9a41209ed7",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T02",
"uuid": "6de9945f-4dd1-57dd-898a-f59c35b1df6c",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T03",
"uuid": "acae6085-ada7-51b2-8dc0-4abac7f7e7b3",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T04",
"uuid": "f36470af-4019-54b2-96d7-e049d867c7db",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T05",
"uuid": "382575ca-1801-5a32-a93d-90a8b9c8adbf",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T06",
"uuid": "0a8d6eed-75dd-5aaa-bf86-60be9dadca03",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T07",
"uuid": "f572dfeb-0d1b-58d6-be83-405125189028",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T08",
"uuid": "f7b513ee-af48-5c5a-a34e-3e9922d29b76",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T09",
"uuid": "fd4a4ac3-e525-57c1-9179-e0fcd0226913",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T10",
"uuid": "ac3464fd-3df9-51a1-b1f4-3bf3c60e4265",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T11",
"uuid": "96e0cbd5-e3ce-5807-8f64-41244671327b",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Tasks",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T12",
"uuid": "712ba035-edad-5528-8293-56375553d85a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Operate the scheduled attestation and independent offsite return",
"hub_error": null
},
{
"id": "AUDIT-WP-0009-T13",
"uuid": "cfe3e530-28e5-515e-a5e5-a9ca4b960054",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Answer flex-auth's B3: which repository is the \u00a74 source of evidence",
"hub_error": null
}
]
},
{
"workplan": "AUDIT-WP-0015",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": null,
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "AUDIT-WP-0015-T01",
"uuid": "5fa2bfe4-df47-58a1-9240-80e2ad224617",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Obtain independent offsite chain-head readback",
"hub_error": null
},
{
"id": "AUDIT-WP-0015-T02",
"uuid": "e8a9cd4f-0267-524a-8ddd-5e1cec33e3af",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Record refreshed E2 and asm-t08 owner prerequisites",
"hub_error": null
}
]
},
{
"workplan": "REUSE-WP-0025",
"source_status": "blocked",
"hub_status": "blocked",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "REUSE-WP-0025-T01",
"uuid": "1f841e28-fc55-5b12-bb51-bb3291f17d8b",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Independent consumer review",
"hub_error": null
},
{
"id": "REUSE-WP-0025-T02",
"uuid": "a9e794f6-a894-52e6-bd93-4781e05c6a55",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare native boundary and verification helper",
"hub_error": null
},
{
"id": "REUSE-WP-0025-T03",
"uuid": "789bb918-4848-5bdf-bfd4-8ee42877addb",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Review, publish and verify deployed consumer",
"hub_error": null
}
]
},
{
"workplan": "RCLUSTER-WP-0017",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "RCLUSTER-WP-0017-T01",
"uuid": "6ee408cd-c055-532d-bc80-f64c9bdf143b",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Review exact runtime and storage source boundary",
"hub_error": null
},
{
"id": "RCLUSTER-WP-0017-T02",
"uuid": "7f4320c6-8bb5-598e-9b9a-65565091276f",
"source_status": "progress",
"hub_status": "progress",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Review the bounded native preflight and storage action",
"hub_error": null
},
{
"id": "RCLUSTER-WP-0017-T03",
"uuid": "747a8d77-5c02-5b26-ba9c-385f75f3ac1c",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify the approved runtime and storage result",
"hub_error": null
}
]
},
{
"workplan": "RCLUSTER-WP-0018",
"source_status": "active",
"hub_status": "active",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "RCLUSTER-WP-0018-T01",
"uuid": "7280193d-0d59-5b78-a2d3-96ebd127127f",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Record source boundary and public-only metadata preparation",
"hub_error": null
},
{
"id": "RCLUSTER-WP-0018-T02",
"uuid": "90836435-917f-504c-a711-3f29ece348e3",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Establish exact independent original TLS artifact and provider custody metadata",
"hub_error": null
},
{
"id": "RCLUSTER-WP-0018-T03",
"uuid": "5dfa9a3a-2639-5cf6-b0a4-13eef417d47a",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare safe isolated original extraction or explicit reissue alternative",
"hub_error": null
},
{
"id": "RCLUSTER-WP-0018-T04",
"uuid": "021b07bb-65bc-5743-bac5-4294b4be74f6",
"source_status": "wait",
"hub_status": "wait",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify admitted original TLS recovery through the actual owner boundary",
"hub_error": null
},
{
"id": "RCLUSTER-WP-0018-T05",
"uuid": "5bc67a22-0991-5625-86a6-f749560d8a0e",
"source_status": "todo",
"hub_status": "todo",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Disposition original TLS coverage in the future identity archive contract",
"hub_error": null
}
]
},
{
"workplan": "STATE-WP-0095",
"source_status": "finished",
"hub_status": "finished",
"status_matches": true,
"hub_flavor": "implementation",
"hub_flavor_promotion_reason": null,
"tasks": [
{
"id": "STATE-WP-0095-T01",
"uuid": "6a5f87bb-e63d-5e20-b9fc-c1b5cd403ff7",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify source bindings and shared views",
"hub_error": null
},
{
"id": "STATE-WP-0095-T02",
"uuid": "ebb24194-e4cc-5130-aaa6-663f2ea2c822",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Implement preservation receiving and global collision refusal",
"hub_error": null
},
{
"id": "STATE-WP-0095-T03",
"uuid": "e8566341-cf6e-5b9c-ad80-8564d14cd52a",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver receiving through normal deployment and verify owner return",
"hub_error": null
},
{
"id": "STATE-WP-0095-T04",
"uuid": "3bbb311f-194e-5862-8aed-358a580f22b4",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify normal historical replay preserves existing identities",
"hub_error": null
},
{
"id": "STATE-WP-0095-T05",
"uuid": "339b9a37-181c-5599-9a89-0393e199bd4b",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Prepare exact cluster source preservation and refusal cases",
"hub_error": null
},
{
"id": "STATE-WP-0095-T06",
"uuid": "6af973b4-1964-5d4d-a2f8-8dbd4c01fda4",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver reviewed cluster receiving successor before registrar admission",
"hub_error": null
},
{
"id": "STATE-WP-0095-T07",
"uuid": "cfd1ea99-e75b-542e-a434-acefb62f3c7d",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Verify ordinary cluster receiving and immutable historical rows",
"hub_error": null
},
{
"id": "STATE-WP-0095-T08",
"uuid": "2dd9b04f-2250-5a8a-b5bc-c8a009872858",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Fix policy-compatible Secret-template server dry-run preparation",
"hub_error": null
},
{
"id": "STATE-WP-0095-T09",
"uuid": "8be8f13b-6352-5295-9755-de6fbfb13593",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Guard immutable historical index bindings in CLI and receiving API",
"hub_error": null
},
{
"id": "STATE-WP-0095-T10",
"uuid": "88585c69-d9b9-5e1f-a256-6416ff71e824",
"source_status": "done",
"hub_status": "done",
"status_matches": true,
"workplan_matches": true,
"hub_title": "Deliver and verify the ordinary-binding guard successor",
"hub_error": null
}
]
}
]
}
}
Reference in a new issue View git blame Copy permalink