Record approved lifecycle policy deployment and native caller checks

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f

workplans/FLEX-WP-0033-informed-decision-lifecycle.md

@@ -8,7 +8,7 @@ status: active
 owner: codex
 topic_slug: netkingdom
 created: "2026-10-04"
-updated: "2026-10-04"
+updated: "2026-10-05"
 related: [INFD-WP-0007, INFD-WP-0005, FLEX-WP-0028]
 state_hub_workstream_id: "cc97d906-68df-537c-a88f-fb2dcf7285c9"
 ---
@@ -70,7 +70,7 @@ no new claim of signed attribution or complete production close-down.
 
 ```task
 id: FLEX-WP-0033-T04
-status: todo
+status: progress
 priority: high
 state_hub_task_id: "9d275270-1521-5635-bf46-e451292534e5"
 ```
@@ -106,3 +106,13 @@ Forgejo run 316 built committed source d2d0b6f. Final candidate values now pin
 forgejo.coulomb.social/coulomb/flex-auth@sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99
 This supersedes the local candidate above for rollout. Both embedded packages
 validate in the CI artifact. No deployed values or cluster objects changed.
+
+## Native deployment — 2026-10-05
+
+Founder-approved cutover installed lifecycle Helm release revision 1 and upgraded
+sitting release to revision 12 using CI image bdac62bc. Native consumer checks
+authorize selected State Hub lifecycle operations and refuse missing/crossed
+audience and unregistered same-audience callers. Two records and a revision
+retain unchanged image/config/package pins; audit delivery is settled.
+Human review of approval 22b30fe7-c565-46f2-8193-d8875975ad9e remains pending;
+T04 stays open for that native human evidence.