Decommission forge compatibility pointers

workplans/RAILIANCE-WP-0006-railiance-forge-extraction.md

@@ -4,7 +4,7 @@ type: workplan
 title: "Extract railiance-forge and formalize forge-layer contracts"
 domain: railiance
 repo: railiance-apps
-status: active
+status: finished
 owner: codex
 topic_slug: railiance
 planning_priority: high
@@ -158,8 +158,9 @@ compatibility pointers left in `railiance-apps`. Deploy-capable Gitea
 Helm/SOPS/manifests and Makefile deploy/status targets also moved to
 `railiance-forge` after the review in
 `/home/worsch/railiance-forge/docs/deploy-capable-gitea-move-review.md`.
-`railiance-apps` now keeps compatibility wrappers only. No live deploy, SOPS
-decryption, or Kubernetes apply was run.
+`railiance-apps` temporarily kept compatibility wrappers until
+`RAILIANCE-WP-0006-T10`. No live deploy, SOPS decryption, or Kubernetes apply
+was run.
 
 ---
 
@@ -196,7 +197,7 @@ Done when a new operator can answer "is this S4, S5, or forge?" from the scope
 documents without inspecting historical workplans.
 
 Completed 2026-06-05: `railiance-apps/SCOPE.md` now treats forge as an upstream
-service and keeps only compatibility wrappers for moved Gitea operations.
+service and keeps app release ownership separate from moved Gitea operations.
 `railiance-enablement/SCOPE.md` and `railiance-enablement/INTENT.md` now
 separate reusable S4 workflow templates and paved paths from forge-owned
 runtime, registries, runner substrate, labels, credentials, and artifact
@@ -385,7 +386,7 @@ cycle. Validation passed with `0 error(s), 0 warning(s)`.
 
 ```task
 id: RAILIANCE-WP-0006-T10
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "5bca2a11-453c-4cd0-b86a-7ed269564dfb"
 ```
@@ -404,3 +405,10 @@ Steps:
 
 Done when no active railiance workplan asks operators to modify forge runtime
 state from the wrong repo.
+
+Completed 2026-06-05: removed the app-side Gitea deploy/status compatibility
+wrappers, deleted local registry pointer docs, changed `make check-sops` to
+require an explicit `SOPS_SENTINEL`, refreshed active workplans so package
+registry and token ownership point to `railiance-forge` and source repos,
+archived `RAIL-AP-WP-0001`, and recorded the final source-of-truth decision in
+`docs/forge-source-of-truth-decision.md` and State Hub.