Files
alkssh/tasks/architecture/oq-04-openssh-cert-auth.md
glm-5.3-flash f4b5f896b4 docs: sweep em dashes from all markdown prose
Renames the written-usage rule into practice across the contract surface:
docs/ (architecture, research, plans, sdd), tasks/ (all 43 task files,
taskgraph validate passes), AGENTS.md, README.md, CHANGELOG.md, and the
.opencode/agents/ prompts. Every replacement is a sense-preserving
rewrite (colons, semicolons, commas, parentheses, sentence splits, varied),
never a mechanical swap; no spaced hyphens were substituted. Enum fields,
frontmatter, tables, wire data, and cited identifiers survive verbatim;
en dashes inside numeric ranges keep their meaning.

Verification: taskgraph validate (43 tasks), repo grep clean (single
exempt hit: the verification command's own search pattern in AGENTS.md),
cargo test, clippy --all-targets -D warnings, fmt --check, doc all green.
2026-11-04 20:28:00 +00:00

993 B

id, name, status, depends_on, scope, risk, impact, level, tags
id name status depends_on scope risk impact level tags
architecture/oq-04-openssh-cert-auth OQ-04 tracker: OpenSSH certificate auth use case pending
single trivial isolated research
deferred-oq
external-trigger

Description

External-trigger tracker for OQ-04: does an OpenSSH-CA-trust use case ever arrive for auth_openssh_certificate? (deferred(scope)). Not actionable work; decline is the standing disposition (ADR-004 territory).

Work

Transition check only: when a consuming assembly presents a concrete CA-issued-certificate requirement, mark this task completed and move OQ-04 to open for a design pass (the decline disposition itself would be revisited by ADR amendment).

Verification

  • OQ-04 status in open-questions.md matches this task's state.

References

  • docs/architecture/open-questions.md (Theme B)

Out of scope

Any certificate-auth design.

Summary

Filled on completion.