the-custodian/workplans/CUST-WP-0077-dependency-root-execution-wave.md
codex e1053a70a1
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Advance dependency roots with guarded source implementations
2026-10-04 11:01:47 +02:00

98 lines
3.5 KiB
Markdown

---
id: CUST-WP-0077
type: workplan
title: "Advance implementable dependency roots after receiving rollout"
domain: infotech
repo: the-custodian
status: active
flavor: implementation
owner: codex
topic_slug: helix-forge
created: "2026-10-04"
updated: "2026-10-04"
depends_on: []
---
Founder mandate: start tackling blocked plans and move them forward from the
dependency graph. This is a bounded source implementation wave. Independent
identity, custody, native execution, publication and human gates keep their
existing owner records and authority.
## Select source work from the current graph
```task
id: CUST-WP-0077-T01
status: done
priority: high
```
Fresh visible scan: 146 registered repos, 144 checkouts, 105 open non-residual
plans (99 blocked), 239 waits, 85 human gates. SAND-WP-0015-T04 affects nine
plans; SECRETS-WP-0009-T03 seven and GLAS-WP-0012 six. There are no remaining
terminal-predecessor waits. Select executable preparation and source fixes,
not a mechanical status reset. Two frontend waits lack qualifiers and one
projected qualifier differs; retain these observation limits.
## Prepare native runtime entrypoint evidence at the largest root
```task
id: CUST-WP-0077-T02
status: done
priority: high
```
The sandbox owner worker strengthens the existing no-credential bwrap runtime
smoke for the actual installed rein and Glas launchers. Broken relocated
entrypoints must be observable before paid native trials. This does not supply
fresh retry authority, reconciliation of the EUR10 trial, credential delivery
or acceptance of SAND-WP-0015-T04 / GLAS-WP-0012.
## Advance receiving compatibility and owner-return source handling
```task
id: CUST-WP-0077-T03
status: done
priority: high
```
Repo Manager/State Hub workers prepare source-bound legacy-record receiving
compatibility, duplicate-holder protection, and the supported owner-return
planner with receipt deduplication. Preserve identities and historical views;
do not widen registrar acceptance before the receiving path is safe. Existing
owner plans retain rollout and runtime activation obligations.
## Deliver the ready operator-matrix construction contract
```task
id: CUST-WP-0077-T04
status: done
priority: high
```
Implement the ops-mason side of MASON-WP-0005-T02 with exact four-entry policy,
confirmed identity/review parameters and fresh exact-spec approval checks.
Local tests prove scope and refusal; platform contract review and the confirmed
OIDC identity remain live dependencies. No OpenBao command is run in this wave.
## Verify and synchronize owner progress
```task
id: CUST-WP-0077-T05
status: progress
priority: high
```
Apply reviewed guarded source artifacts, run meaningful owner checks, retain
failed attempts, commit scoped changes and obtain exact primary receipts where
supported. Attach cross-owner observations as coordination cases through the
existing project driver when available. Retain receiving/registrar failures
without direct DB edits or invented approvals. Leave actionable continuing
owner work in live records before closing this wave.
2026-10-04 source delivery: State Hub 155 actual-source tests; ops-mason 92;
sandbox full lint/test gate 219. Initial owner-return planner review identified
missing independent human-gate eligibility; corrected before commit/activation,
with 30 planner cases in the final combined suite. Historical source snapshot
proof preserved five parents and 65 tasks without mutation. Registrar remains
unapplied behind STATE-WP-0095-T03. Source receipts and waiting coordination
cases: docs/evidence/2026-10-04-dependency-root-wave/.