FLEX-WP-0040-T07: compact-sitting v14 release candidate and founder runbook

Values (direct edit; not applied): sitting release -> CI image main-2de0f86
sha256:154726d25ba2ce88ef41551dcb3bb395557095eff19e767a29d0331fafec4776 and the
v14 policy path; access-engine twin regenerated for this pin only. The image's
policy directory is byte-identical to 2de0f86 and its package digest is
sha256:8911458f...0fde. Image in force per FLEX-WP-0034 rev 13 is 6c6dc263
(v13); rollback values are values/informed-decision-lifecycle-review.candidate.yaml.
Scan: the same four Go 1.26.7 stdlib HIGH CVEs as the image in force (founder
gate in the runbook). Runbook: docs/compact-sitting-v14-release-runbook.md,
coordinated with informed-decision's v14 pin.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
This commit is contained in:
tegwick 2026-11-01 11:26:26 +01:00
parent 2cdce7eb8a
commit 58a12d258f
6 changed files with 461 additions and 6 deletions

View file

@ -2,7 +2,7 @@
name: access-engine-informed-decision-sitting
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99
digest: sha256:154726d25ba2ce88ef41551dcb3bb395557095eff19e767a29d0331fafec4776
args:
- serve
- --addr
@ -10,7 +10,7 @@ args:
- --registry
- /opt/flex-auth/examples/informed-decision-lifecycle-review/registry.json
- --policy
- /opt/flex-auth/examples/informed-decision-lifecycle-review/policy.md
- /opt/flex-auth/examples/informed-decision-present-existing-review/policy.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
@ -23,7 +23,7 @@ consumer:
resources:
requests:
cpu: 5m
memory: 32Mi
memory: 40Mi
limits:
cpu: 300m
memory: 192Mi

View file

@ -1,8 +1,12 @@
# Founder-approved INFD-WP-0007 / FLEX-WP-0033 cutover, 2026-10-04.
# FLEX-WP-0040-T07 release candidate (founder-approved 2026-11-01; NOT yet applied):
# compact-sitting v14 sha256:8911458f36f1a60598aa19592a2d752a74dffe2617fd86238407ac87bc300fde,
# CI image main-2de0f86. Runbook: docs/compact-sitting-v14-release-runbook.md.
# In force before this release (Helm rev 13, FLEX-WP-0034, v13): image 6c6dc263...168e,
# exact values values/informed-decision-lifecycle-review.candidate.yaml (rollback).
name: flex-auth-informed-decision-sitting
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99
digest: sha256:154726d25ba2ce88ef41551dcb3bb395557095eff19e767a29d0331fafec4776
args:
- serve
- --addr
@ -10,7 +14,7 @@ args:
- --registry
- /opt/flex-auth/examples/informed-decision-lifecycle-review/registry.json
- --policy
- /opt/flex-auth/examples/informed-decision-lifecycle-review/policy.md
- /opt/flex-auth/examples/informed-decision-present-existing-review/policy.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1