Pin lifecycle delivery to scanned commit-built policy image
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-04 21:46:32 +02:00
parent 7f96c7075e
commit 726e6e369b
4 changed files with 17 additions and 8 deletions

View file

@ -14,7 +14,7 @@ state_hub_workstream_id: "cc97d906-68df-537c-a88f-fb2dcf7285c9"
---
Founder selected net-kingdom-admins humans and the State Hub workload for the
first release. Source work is on infd-wp0007-lifecycle; no live grants applied.
first release. Source work was prepared in an isolated checkout and pushed to main; no live grants applied.
## Define and prove the initial lifecycle authorization contract
@ -100,3 +100,9 @@ The existing chart's port-only API egress, advisory CARING dimensions and unsign
consumer assertions are explicitly retained limitations, not newly enforced
controls. T04 remains open; requester projection and State Hub production
forwarding also remain prerequisites in their owner workplans.
Forgejo run 316 built committed source d2d0b6f. Final candidate values now pin
forgejo.coulomb.social/coulomb/flex-auth@sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99
This supersedes the local candidate above for rollout. Both embedded packages
validate in the CI artifact. No deployed values or cluster objects changed.