FLEX-WP-0040-T07: v14 release candidate is the Go 1.26.10 image (main-f4c9f2b)

Candidate image forgejo.coulomb.social/coulomb/flex-auth@sha256:dce2ce6f1def41d162c999818caeee09dc5404331f305b0d20306fade450dd6c
(revision label f4c9f2b). Read-only checks: v14 and v13 policy directories
byte-identical to source, package digests 8911458f (v14) and 31be5985 (v13),
in-image validate 46/46 and 32/32, offline verify requests answer
self_approval_refused / approval_action_not_admitted on v14, Trivy
HIGH/CRITICAL = 0 (same pinned scanner). Values, twin, pin test, runbook
(scan gate passed; informed-decision side ready at RELEASE_SHA 005709a3,
image ca75f0be, carrying 80ef840) and evidence move to this digest; the
154726d2 image is superseded.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196

internal/policy/informed_decision_attribute_test.go

@@ -103,10 +103,10 @@ func TestSittingImagePinMatchesRecordedBuild(t *testing.T) {
 	text := string(raw)
 	// values/informed-decision-sitting.yaml records the founder-approved
 	// FLEX-WP-0040-T07 compact-sitting v14 release candidate (CI image of
-	// 2de0f86, docs/compact-sitting-v14-release-runbook.md). The FLEX-WP-0034
+	// f4c9f2b, Go 1.26.10; docs/compact-sitting-v14-release-runbook.md). The FLEX-WP-0034
 	// v13 image (6c6dc263) is the rollback, kept in
 	// values/informed-decision-lifecycle-review.candidate.yaml.
-	if !strings.Contains(text, "sha256:154726d25ba2ce88ef41551dcb3bb395557095eff19e767a29d0331fafec4776") {
+	if !strings.Contains(text, "sha256:dce2ce6f1def41d162c999818caeee09dc5404331f305b0d20306fade450dd6c") {
 		t.Fatal("sitting image digest differs from the recorded release candidate build")
 	}
 	if !strings.Contains(text, "/opt/flex-auth/examples/informed-decision-present-existing-review/policy.md") {