coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit the four STATE-WP-0094 sitting memos as exact records (v10).
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m14s
Details

Browse source 
Version v10 pins approvals 974eae4d, 77993081, 4ae04c8e and b75752d1 from
informed-decision docs/evidence/2026-10-04-state-hub-wp0094-approval-create.json.
All earlier exact records, including v9's profile memo, stay. The attribute
branch still admits nobody. Package digest
sha256:ede11f888d57809dfce1b04d2323708c7244f36187fd5a58dd738437a05e7e91.
The values pin stays on the v9 image until CI builds this commit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 692292@bnt-lap001
Assistant-Session: 89c7d8e8-e1b3-47eb-9411-a0ab227fca2f
This commit is contained in:
tegwick 2026-10-04 14:26:14 +02:00
parent 58e33d29c9
commit 58026ea34a
5 changed files with 213 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
examples/informed-decision-sitting/attribute_admission_v8.json
View file

@ -1,6 +1,6 @@
{
"policy_id": "informed-decision.compact-sitting",
"policy_version": "v9",
"policy_version": "v10",
"note": "Offline request/response fixtures. Shipped admitted sets are empty, so attribute_eligible is not in this file. An allow here is an exact-record pin, not proof of a live approval.",
"cases": [
{

29
examples/informed-decision-sitting/policy.md
View file

@ -2,7 +2,7 @@
id: informed-decision.compact-sitting
name: Compact sitting exact-record human review
namespace: informed-decision:decision-memo
version: v9
version: v10
status: ready
package: flexauth.informed_decision.compact_sitting
allow_ttl: 30s
@ -88,6 +88,17 @@ v9 (2026-10-04, EMERGENT-WP-0002 profile adoption) adds exactly one record,
attribute branch remains beside them and still admits nobody, because the
shipped submitter and class sets are empty.
v10 (2026-10-04, STATE-WP-0094 production-steps sitting) adds exactly four
records: `memo:state-hub-edge-receiving-rollout-c287ed8`,
`memo:owner-return-pickup-plan-b6222af`,
`memo:freshness-runner-deploy-trial-e77f8b4` and
`memo:freshness-schedule-enable-retire-sweep`. Native pins come from
informed-decision `docs/evidence/2026-10-04-state-hub-wp0094-approval-create.json`,
approvals `974eae4d-782d-41ed-93be-e34433b5fe59`,
`77993081-1db2-4bba-99f2-74ca1f8652b1`, `4ae04c8e-d604-4d8b-b166-693eef855da8`
and `b75752d1-bab6-4cf3-9308-5368c1d5aa91`. Existing exact records, including
v9's, stay. The v8 attribute branch still admits nobody.
`admitted_submitters` and `admitted_classes` are generated from
informed-decision `deploy/intake-submitters.json`. The shipped registry is
empty, so both sets are empty and this branch admits nobody. Regenerate with
@ -106,6 +117,22 @@ approval. Native pins: `docs/evidence/2026-09-15-sitting-approval-creates.json`.
import rego.v1
records := {
"memo:state-hub-edge-receiving-rollout-c287ed8": {
"approval_id": "974eae4d-782d-41ed-93be-e34433b5fe59",
"binding_digest": "sha256:84735b88b2db20d9445af369e28a8d40bd495dd20c0303ff3a764666ec976dde"
},
"memo:owner-return-pickup-plan-b6222af": {
"approval_id": "77993081-1db2-4bba-99f2-74ca1f8652b1",
"binding_digest": "sha256:e745ef64658e77e41b2a5ef569ec0f6986e120d338656d75749425f5f29b7ca0"
},
"memo:freshness-runner-deploy-trial-e77f8b4": {
"approval_id": "4ae04c8e-d604-4d8b-b166-693eef855da8",
"binding_digest": "sha256:f8ff89dd353c1d2006622c45996c0f05f050865f8c203373dc74da1ba3f05e24"
},
"memo:freshness-schedule-enable-retire-sweep": {
"approval_id": "b75752d1-bab6-4cf3-9308-5368c1d5aa91",
"binding_digest": "sha256:cc3e8fe6ace5438f19d647d3de226407c8b009985c82ad9a993e81226e6f316f"
},
"memo:infd-20261003-p01": {
"approval_id": "706f4205-aaa7-44f6-be30-d0f57664d69c",
"binding_digest": "sha256:c8a1a9c8fb22616e3aacfb877ba7974feb5eedaed491f856a6c90719c502ebe4"

68
examples/informed-decision-sitting/records.json
View file

@ -372,5 +372,73 @@
}
},
"memo_version": 1
},
"memo:state-hub-edge-receiving-rollout-c287ed8": {
"approval_id": "974eae4d-782d-41ed-93be-e34433b5fe59",
"binding_digest": "sha256:84735b88b2db20d9445af369e28a8d40bd495dd20c0303ff3a764666ec976dde",
"label": "wp0094-m1-state-hub-c287ed8",
"binding": {
"action": "accept",
"actor": "informed-decision",
"principal": "state-hub",
"purpose": "Production rollout of tested source; rollback is helm rollback to revision 72 without schema downgrade.",
"target": {
"id": "state-hub:source:c287ed82594313394ca8e67ce40714c90e744af6",
"system": "state-hub",
"type": "service-release"
}
},
"memo_version": 1
},
"memo:owner-return-pickup-plan-b6222af": {
"approval_id": "77993081-1db2-4bba-99f2-74ca1f8652b1",
"binding_digest": "sha256:e745ef64658e77e41b2a5ef569ec0f6986e120d338656d75749425f5f29b7ca0",
"label": "wp0094-m2-owner-return-b6222af",
"binding": {
"action": "accept",
"actor": "informed-decision",
"principal": "activity-core",
"purpose": "Plan approval plus a gated single-repo trial; the definition stays disabled and wakeups never clear waits.",
"target": {
"id": "activity-core:source:b6222af2cfd1094360a0d430e3907e8788a3acf9:owner-return-pickup",
"system": "activity-core",
"type": "activity-plan"
}
},
"memo_version": 1
},
"memo:freshness-runner-deploy-trial-e77f8b4": {
"approval_id": "4ae04c8e-d604-4d8b-b166-693eef855da8",
"binding_digest": "sha256:f8ff89dd353c1d2006622c45996c0f05f050865f8c203373dc74da1ba3f05e24",
"label": "wp0094-m3-freshness-runner-e77f8b4",
"binding": {
"action": "accept",
"actor": "informed-decision",
"principal": "repo-manager",
"purpose": "Deployment and limited data-writing trials; no schedule.",
"target": {
"id": "repo-manager:source:e77f8b457647ff23697e45a74615edde5f42d39d",
"system": "repo-manager",
"type": "service-release"
}
},
"memo_version": 1
},
"memo:freshness-schedule-enable-retire-sweep": {
"approval_id": "b75752d1-bab6-4cf3-9308-5368c1d5aa91",
"binding_digest": "sha256:cc3e8fe6ace5438f19d647d3de226407c8b009985c82ad9a993e81226e6f316f",
"label": "wp0094-m4-freshness-schedule",
"binding": {
"action": "accept",
"actor": "informed-decision",
"principal": "activity-core",
"purpose": "Recurring schedule activation after clean trials, and permanent retirement of the legacy sweep.",
"target": {
"id": "activity-core:definition:repo-manager-bounded-freshness:b2c6c5613218dea9dbaef303aff22a8d1b07f074",
"system": "activity-core",
"type": "activity-schedule"
}
},
"memo_version": 1
}
}