coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FLEX-WP-0035: T05 waits on informed-decision; record readback pin URL and audience promised to user-engine
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc
This commit is contained in:
tegwick 2026-10-10 10:27:22 +02:00
parent 2106335f9f
commit cb48d0702c
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/FLEX-WP-0035-per-identity-application-readback.md
View file

@ -169,5 +169,12 @@ Add `values/flex-auth-application-readback.yaml` (or a deploy manifest) for a
dedicated `flex-auth-application-readback` pin, plus a test asserting that its
package paths match each participant's own pin values (digest-equality, §4).
Add the user-engine ingress rule, then get the founder's go for the rollout.
Promised to user-engine (reply to `d7e02758`, 2026-10-10), so the values file
must match: URL
`http://flex-auth-application-readback.flex-auth.svc.cluster.local.:8080`
(trailing dot, in-cluster only), caller token audience `flex-auth`
(`serve-readback --caller-audience` default), readback caller
`system:serviceaccount:user-engine:user-engine`.
The pin ships with the image that contains `serve-readback`. Hand user-engine
the evidence that unblocks `USER-WP-0026-T03`.