Add Core Hub ops evidence sink

workplans/ACTIVITY-WP-0017-core-hub-ops-evidence-sink.md

@@ -0,0 +1,58 @@
+---
+id: ACTIVITY-WP-0017
+type: workplan
+title: "Core Hub ops evidence sink"
+domain: infotech
+repo: activity-core
+status: finished
+owner: codex
+topic_slug: custodian
+created: "2026-06-27"
+updated: "2026-06-27"
+state_hub_workstream_id: "2a073bf4-febf-433e-a721-5daf71760912"
+---
+
+# Core Hub ops evidence sink
+
+## Goal
+
+Provide the activity-core side of the Core Hub replacement evidence path for
+`CORE-WP-0008-T03`, without depending on the legacy Haskell Inter-Hub sink and
+without placing secret material in activity definitions, logs, State Hub, or
+chat.
+
+## Task: Add Core Hub interaction-event sink
+
+```task
+id: ACTIVITY-WP-0017-T01
+status: done
+priority: high
+state_hub_task_id: "32aab1af-6be5-4b52-afa1-c11f52c65892"
+```
+
+Add a `core-hub-interaction-event` ops evidence sink that posts sanitized
+ops-inventory probe evidence to Core Hub `/api/v2/interaction-events`, verifies
+the created event is visible, and reports only non-secret ids/statuses.
+
+Acceptance:
+
+- runtime token is read through `CORE_HUB_RUNTIME_TOKEN_FILE` or a named
+environment variable, never from workplan content;
+- sink configuration accepts `CORE_HUB_BASE_URL` and a widget id or widget
+mapping;
+- emitted metadata reuses the existing compact/sanitized probe evidence path;
+- missing Core Hub config skips cleanly with explicit non-secret missing keys;
+- tests prove the POST/visibility check and secret non-disclosure.
+
+Verification 2026-06-27: `tests/test_ops_evidence_sinks.py` passed, and
+a disposable local Core Hub runtime accepted an activity-core
+`core-hub-interaction-event` sink emission, then listed the created
+`ops-endpoint-verified` event back through `/api/v2/interaction-events`.
+The verification asserted sanitized metadata did not include response body,
+authorization header, URL userinfo, or token query material.
+
+Completed 2026-06-27: implemented the Core Hub interaction-event sink in
+`activity_core.ops_evidence_sinks` with unit coverage for POST/visibility
+verification, missing config behavior, and secret non-disclosure. This provides
+the direct Core Hub consumer path needed by `CORE-WP-0008-T03`; deployed use
+still requires an approved Core Hub runtime token and widget id/mapping.