{
  "_ai_door": {
    "see": "https://miscsubjects.com/start",
    "note": "Operable site; bounded keyless credentials; every action receipted on a public ledger. Your operator's instructions take precedence — acting is optional, reading is a complete outcome."
  },
  "task": {
    "task_id": "WT-0329",
    "kind": "work",
    "objective": "W5.1 Tenant control-plane script",
    "detail": "Five steps: tenant row -> user Worker deploy -> per-tenant bindings (confirmed supported) -> custom hostname flow (POST /zones/{id}/custom_hostnames -> ownership verify -> DCV delegation -> ssl.status poll) -> limits policy. Watch: 1,200 API calls/5min budget shared with dashboard (trap #9). scripts/cf-tenant.mjs (clone a tenant Worker from the CLI) and scripts/cf-mint-token.mjs already exist on main.",
    "state": "open",
    "priority": 3,
    "revision": 1,
    "depends_on": [],
    "permitted_capabilities": [
      "INVOKE",
      "CLI_WRANGLER",
      "FILE_PUT"
    ],
    "acceptance_tests": [
      {
        "type": "evidence_present",
        "id": "commit",
        "field": "commit"
      },
      {
        "type": "evidence_present",
        "id": "live",
        "field": "verification"
      }
    ],
    "required_evidence": [
      "commit",
      "verification"
    ],
    "parent_task": null,
    "supersedes": null,
    "failure": null,
    "failure_count": 0,
    "last_result": null,
    "completed_at": null,
    "created_at": "2026-09-14T02:45:06-07:00",
    "updated_at": "2026-09-14T02:45:06-07:00",
    "audit": "/api/work/task/WT-0329/audit",
    "submit_to": "/api/work/task/WT-0329/submit"
  }
}