fix(workplans): adopt ADR-007 derived identifiers for unregistered records
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

These workplans exist only in the retired local hub. Their random pre-ADR-007
identifiers are refused by C-06 as stale references, so they cannot be
registered. Deriving from the canonical record id takes no identity from
anything: central does not hold them and the old ids die with the cache.

Records central already holds were deliberately left untouched.

Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 20:26:33 +02:00
parent 24ce8b7637
commit a87a794cc9
4 changed files with 25 additions and 25 deletions

View file

@ -9,7 +9,7 @@ owner: codex
topic_slug: netkingdom
created: "2026-08-18"
updated: "2026-08-19"
state_hub_workstream_id: "014d0886-b690-4860-8337-c718e440f678"
state_hub_workstream_id: "4255c44c-70f3-5aa9-a301-4a0c0e1a9a47"
---
# USER-WP-0023 — flex-auth caller identity
@ -21,7 +21,7 @@ authorization semantics.
id: USER-WP-0023-T01
status: done
priority: high
state_hub_task_id: "8dae0fe1-f8a0-4276-8ae3-fe1f5b410669"
state_hub_task_id: "f513c592-35df-5950-91ae-f4d5297b67d0"
```
Read the audience-scoped caller token from a file per authorization decision,
@ -40,7 +40,7 @@ provider-gated skips.
id: USER-WP-0023-T02
status: done
priority: high
state_hub_task_id: "4a6c85e8-1ada-4147-b6b7-d340b7e5192c"
state_hub_task_id: "eb4ec2b0-36b3-5cc8-b912-d0bdf3d51cf0"
```
Align tenant-authority reads with the protected `tenant.read` action and actor
@ -51,7 +51,7 @@ adapter request coverage.
id: USER-WP-0023-T03
status: done
priority: high
state_hub_task_id: "0499c65b-491d-4ed1-8549-f58dba48f612"
state_hub_task_id: "dc4c771e-c16f-5609-bd09-20f051a6aae9"
```
Promote together with the flex-auth A2 digest and the NetKingdom projected