Renames the written-usage rule into practice across the contract surface: docs/ (architecture, research, plans, sdd), tasks/ (all 43 task files, taskgraph validate passes), AGENTS.md, README.md, CHANGELOG.md, and the .opencode/agents/ prompts. Every replacement is a sense-preserving rewrite (colons, semicolons, commas, parentheses, sentence splits, varied), never a mechanical swap; no spaced hyphens were substituted. Enum fields, frontmatter, tables, wire data, and cited identifiers survive verbatim; en dashes inside numeric ranges keep their meaning. Verification: taskgraph validate (43 tasks), repo grep clean (single exempt hit: the verification command's own search pattern in AGENTS.md), cargo test, clippy --all-targets -D warnings, fmt --check, doc all green.
993 B
993 B
id, name, status, depends_on, scope, risk, impact, level, tags
| id | name | status | depends_on | scope | risk | impact | level | tags | ||
|---|---|---|---|---|---|---|---|---|---|---|
| architecture/oq-04-openssh-cert-auth | OQ-04 tracker: OpenSSH certificate auth use case | pending | single | trivial | isolated | research |
|
Description
External-trigger tracker for OQ-04: does an OpenSSH-CA-trust use case ever arrive for auth_openssh_certificate? (deferred(scope)). Not actionable work; decline is the standing disposition (ADR-004 territory).
Work
Transition check only: when a consuming assembly presents a concrete CA-issued-certificate requirement, mark this task completed and move OQ-04 to open for a design pass (the decline disposition itself would be revisited by ADR amendment).
Verification
- OQ-04 status in
open-questions.mdmatches this task's state.
References
docs/architecture/open-questions.md(Theme B)
Out of scope
Any certificate-auth design.
Summary
Filled on completion.