the-custodian/infra/security-flow/playwright-delivery.json
codex f5925c6282
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
security: record guarded Playwright activation and collision verification
2026-10-13 23:47:30 +02:00

201 lines
10 KiB
JSON

{
"case_id": "case:cross-owner:CUST-WP-0080-T05:playwright-delivery",
"scenario_type": "cross_owner_wait",
"observed_at": "2026-10-13",
"coordinating_owner": "the-custodian / custodian-codex",
"beneficiary_workplan_id": "CUST-WP-0080",
"beneficiary_task_id": "CUST-WP-0080-T05",
"obligor_repo": "railiance-platform",
"obligor_workplan_id": "RPF-WP-0056",
"obligor_task_id": "RPF-WP-0056-T03",
"state": "waiting",
"reason": "Pilot and scoped RBAC delivered; same-image abrupt recovery now verified by provider receipts. Remaining delivery: exact owner registration/custody/authenticator/transport revisions, real human/agent trials, provider acceptance and managed discovery; cross-version rollback remains unproven in provider T01.",
"request_message_id": "1b279bad-a159-43da-8709-1167882e62f8",
"driver_lookup": {
"local_project_workplans_scanned": 10,
"matching_driver": null
},
"source_records": [
{
"repo": "railiance-platform",
"path": "docs/playwright-identity-handoff.md",
"commit": "d303c99e3be993ffa989bc9ba3d7b471903858ce",
"sha256": "9ddd4303c11182b62fdb45c737d5cd9457dcb83f47503cf9e0ef476f45016623"
},
{
"repo": "railiance-platform",
"path": "workplans/RPF-WP-0056-playwright-consumer-admission.md",
"commit": "d303c99e3be993ffa989bc9ba3d7b471903858ce",
"sha256": "8c4da42a929a7016df535bd40cfa724f308777c8a4822c6f4ca9868dad8eefdc"
},
{
"repo": "rapp-playwright",
"path": "workplans/RAPP-PLAYWRIGHT-WP-0004-consumer-verification.md",
"commit": "3a30ef159ae680da9e03179fcbe4dac9cdcc9cc3",
"sha256": "14ddd47537fe25964ed4df02c71a9d78dda74c4e2fb39c427b119de5f18e504e"
},
{
"repo": "rapp-playwright",
"path": "docs/evidence/2026-10-13-crash-recovery.md",
"commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
"sha256": "871221e07da35c468f0220aa0852145a83aee6a05a082219281d867d64c5ac4d"
},
{
"repo": "rapp-playwright",
"path": "docs/evidence/2026-10-13-crash-recovery/managed/verification.json",
"commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
"sha256": "87bebb470a0f3839ca6e991b1b3d4932cee04317f0e35bbcc18bd2183316a3fb"
},
{
"repo": "rapp-playwright",
"path": "docs/evidence/2026-10-13-crash-recovery/local/verification.json",
"commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
"sha256": "9ebd8c599cfae45e67c4994a325f78d47cc18fd1ce6ccde1791308e1c3e2ef0a"
},
{
"repo": "rapp-playwright",
"path": "docs/evidence/2026-10-13-crash-recovery/managed-first-attempt.json",
"commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
"sha256": "cb32871a3b9175301444efa1246869550ad3e2c78d26839e52f6df784bd415c3"
},
{
"repo": "rapp-playwright",
"path": "workplans/RAPP-PLAYWRIGHT-WP-0004-consumer-verification.md",
"commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
"sha256": "83410fc8993810fcdcdb4baba191dee334d09aa9c1817943a6dbbdf357ec9a50"
}
],
"linked_existing_tasks": [
{
"repo": "railiance-platform",
"task_id": "RPF-WP-0056-T03",
"hub_task_id": "a82762eb-bb6d-5600-89ca-a81ada2eba9f",
"status_observed": "wait",
"responsibility": "Integrated supported consumer flow and live consumer acceptance."
},
{
"repo": "railiance-platform",
"task_id": "RPF-WP-0056-T06",
"hub_task_id": "ef6c21bc-0048-5b73-976e-130cd9af538d",
"status_observed": "wait",
"responsibility": "Accept Custodian coordinating owner and source task return."
},
{
"repo": "rapp-playwright",
"task_id": "RAPP-PLAYWRIGHT-WP-0004-T01",
"hub_task_id": "09f87694-8832-5ae8-9d0b-b66834ffcfcc",
"status_observed": "wait",
"responsibility": "Accept native human/agent consumer operation and disposition of unproven cross-version rollback; same-image abrupt recovery is delivered."
},
{
"repo": "rapp-playwright",
"task_id": "RAPP-PLAYWRIGHT-WP-0004-T03",
"hub_task_id": "c8642437-27c5-5e58-b0f8-847c285fb4e6",
"status_observed": "wait",
"responsibility": "Publish supported managed availability with reuse-surface."
}
],
"owner_requests": [
{
"repo": "railiance-cluster",
"message_id": "0c1023ce-86ac-404a-842e-2f7e1a6d90f1",
"responsibility": "Native JWT authenticator integration, version-specific validation, preserved existing authentication, rollback and API allow/deny receipts.",
"accepted_task_id": null,
"acceptance": "Not observed; exact owner source task and revision must be returned."
},
{
"repo": "key-cape",
"message_id": "85bf4765-35cc-418f-903b-2dba64e8a06b",
"responsibility": "Public PKCE and distinct agent registration contract, claims/audience/scope, issuance/expiry and client disablement.",
"accepted_task_id": null,
"acceptance": "Not observed; exact owner source task and revision must be returned."
},
{
"repo": "net-kingdom",
"message_id": "c6b4dfb0-44d5-4f12-8854-2c38ab6dc454",
"responsibility": "Supported loopback/custom-scope registration outside current browser-RP type; registration and governed per-agent custody with Platform.",
"accepted_task_id": "NK-WP-0050-T02",
"acceptance": "NK-WP-0050-T01 registration preparation done. T02 progress: digest-bound private activation, conditional patch/readback and exact original-state rollback preparation verified in eba6e1f plus 276b95f collision repair; governed custody, protected executor integration and scoped live action remain open. T03 live acceptance waits.",
"source_commit": "276b95f6bab983a06795c26d5592b895b9a55f27",
"source_workplan": "workplans/NK-WP-0050-playwright-consumer-registration.md"
},
{
"repo": "ops-bridge",
"message_id": "c367f3a2-ceba-4ec9-b241-b917c47ba11e",
"responsibility": "Supported per-caller TLS API transport, individual identity, renewal, cleanup and active connection termination.",
"accepted_task_id": null,
"acceptance": "Not observed; exact owner source task and revision must be returned."
}
],
"dependency_order": [
{
"milestone": "M1",
"requires": [],
"deliverable": "Collect reviewed owner source tasks, exact registration/claim contract, governed per-agent custody route, supported per-caller transport and authenticator rollback proposal. Reviews can proceed independently; do not infer rollout authority."
},
{
"milestone": "M2",
"requires": [
"M1"
],
"deliverable": "Owners activate reviewed issuer/registration, API authenticator and per-caller transport in dependency order. Platform integrates one-command login/connect/trial with renewal, actionable failures and cleanup."
},
{
"milestone": "M3",
"requires": [
"M2"
],
"deliverable": "Real human and registered agent independently prove API-returned identity, least-privilege permissions and responsive/keyboard browser trials. Native wrong-audience, missing-scope, expired/tampered and ineligible-identity attempts fail. Prove revocation/active connection termination and retain remaining JWT lifetime limits."
},
{
"milestone": "M4",
"requires": [
"M3"
],
"deliverable": "Platform/provider accept real consumer receipts, retain delivered same-image abrupt recovery and explicit cross-version rollback limitation; publish docs and update existing capability.infotech.headless-browser managed availability; read back discovery."
}
],
"first_executable_milestone": "M1: NetKingdom registration preparation delivered in NK-WP-0050-T01; finish T02 custody/guarded activation integration, and obtain KeyCape, cluster and ops-bridge exact owner source revisions before M2 live activation.",
"unresolved_user_policy_decision": null,
"eligibility": "All identified platform humans and coding agents already admitted; no repeat membership approval.",
"constraints": [
"First delivery uses scoped port-forward and supported per-caller API transport; no new gateway required.",
"No shared admin kubeconfig/workstation SSH identity; no Secrets/exec/workload writes/other namespaces or new targets.",
"Human platform login and distinct registered governed agent identities.",
"No synthetic token/admin impersonation acceptance substitute.",
"Client disablement stops issuance; existing JWTs persist to expiry and active connections require termination.",
"No foreign task statuses changed or owner approvals invented; no workers injected."
],
"availability_observed": "Managed pilot and same-image abrupt recovery verified; real consumer identity/transport and final managed availability remain pending. Local provider discovery is published.",
"owner_progress": [
{
"message_id": "a2449fe0-ba12-47b8-9ca3-d7deedc089c3",
"repo": "rapp-playwright",
"commit": "2cb2b654e03e64ea28f1b369a89d7eaeb36c26fb",
"accepted_scope": "Local and managed same-image abrupt interruption/recovery; active and queued work interrupted, orphan PNG removed, completed hashes retained, fresh responsive/keyboard trial passed.",
"review_scope": "Reviewed committed provider report and local/managed/failure receipts; coordinator did not repeat a live crash.",
"first_transport_failure_retained": true,
"identity_acceptance": false,
"cross_version_rollback": false
},
{
"repo": "net-kingdom",
"commit": "5dd74dfbdf3fd38adb1bfc1bdc1326181435f0e9",
"accepted_scope": "Registration source responsibility, exact public and per-agent compiler, preservation/refusal tests and native disposable token/config checks.",
"implementation_task": "NK-WP-0050-T02",
"preparation_task": "NK-WP-0050-T01",
"identity_acceptance": false,
"custody_admitted": false,
"live_activated": false
},
{
"repo": "net-kingdom",
"commit": "276b95f6bab983a06795c26d5592b895b9a55f27",
"implementation_task": "NK-WP-0050-T02",
"accepted_scope": "Private activation patch preparation and exact original-state recovery, including reproduced effective-audience/delivery-alias collision repair; 90 focused tests and native synthetic startup checks pass.",
"custody_admitted": false,
"live_activated": false,
"identity_acceptance": false
}
]
}