coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare reviewed audit delivery chart and native acceptance packet
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 18:35:20 +02:00
parent c8a3766884
commit 94fda23546
9 changed files with 382 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
workplans/ADHOC-2026-10-11.md
View file

@ -102,3 +102,13 @@ this completed source-characterization/repair record does not close T08, issue
credentials, approve native rollout or grant owner acceptance. Persist this own
record before formal Access review of the revised source. T06 reconciliation
and T04 G2 remain open; open-for-scope consumers may proceed on PDP 503.
After T03 persistence in commit `c8a376688402c817bc4c26195c61626a676abef9`,
prepared the bounded Access maker/source receipt in
`docs/reviews/2026-10-11-audit-delivery-chart-maker.md` for exact immutable v2
manifest `90d5b7e962da046f205cdfa3267c25d22539c500c537c89033aefa568c3c5e16`.
Independent Platform delta acceptance remains external. Prepared unsigned exact
native proof field/sequence packet `docs/audit-delivery-native-proof-packet.md`;
no CI/image, custody, route, owner go or native receiver result is fabricated.
T08/T06/T04 stay open and unavailable PDP/open-stance behavior remains explicit.

19
workplans/FLEX-WP-0031-decision-record-emission.md
View file

@ -319,3 +319,22 @@ stances rather than claim that a 503 enforces denial. T02 native sender/custody,
T06 compatible reconciliation windows, T08 exact approved rollout and silence
proof, and T04 G2 closure remain unfinished. `cadence.yaml` remains declared,
and the emission completeness gap remains open until native acceptance.
### T08 independent chart delivery preparation — 2026-10-11
Prepared inert chart `auditDelivery` configuration for existing admitted per-pin
Secret/key directory mount, explicit /v1/events endpoint and narrow receiver/DNS
egress. Supports existing `serve` pins only; unsupported readback flags refuse.
No pin defaults, native rollout, credential or sender registration changes.
Renderer tests pass for auth on/off, safe mounts/scoped peers, disabled defaults
and invalid/partial configurations. Mandatory-commit/emission/readback/HTTP/API
Go suites pass. Exact remaining image/PVC/custody/network/receiver and same-trial
native receipts are in `docs/audit-delivery-rollout-preparation.md`.
T08 remains wait; T06 receiver time basis and T04 native G2 acceptance remain open.
T08 preparation revision 2: independent Platform review found fractional YAML/
JSON receiver ports could survive integer truncation and render invalid Kubernetes
NetworkPolicy. Corrected integer-shape guard plus 22 YAML/JSON rejection cases
and integer boundary rendering passed. Original stage retained; no native change.