Admit initial decision lifecycle audience and patch evaluator dependencies

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f

workplans/FLEX-WP-0033-informed-decision-lifecycle.md

@@ -0,0 +1,97 @@
+---
+id: FLEX-WP-0033
+type: workplan
+title: "Initial Informed Decision lifecycle policy and production candidate"
+domain: infotech
+repo: access-engine
+status: active
+owner: codex
+topic_slug: netkingdom
+created: "2026-10-04"
+updated: "2026-10-04"
+related: [INFD-WP-0007, INFD-WP-0005, FLEX-WP-0028]
+---
+
+Founder selected net-kingdom-admins humans and the State Hub workload for the
+first release. Source work is on infd-wp0007-lifecycle; no live grants applied.
+
+## Define and prove the initial lifecycle authorization contract
+
+```task
+id: FLEX-WP-0033-T01
+status: done
+priority: high
+```
+
+Separate informed-decision.lifecycle v1 package admits twelve authoring/retrieval
+operations. It requires platform tenant, authenticated identity provenance,
+KeyCape AAL2 for humans or the exact State Hub service account and lifecycle
+audience for workloads. Immutable owner/editor/publication facts scope access.
+No accept action. Contract profiles declare fact keys; they do not authenticate
+real identities. Consumer attribution remains unsigned (FLEX-WP-0024).
+
+21 Go cases and actual HTTP evaluator integration prove authoring, publication,
+human refinement, successor draft access, restart and rejection of other callers.
+
+## Prepare human review admission without per-decision policy rollout
+
+```task
+id: FLEX-WP-0033-T02
+status: done
+priority: high
+```
+
+examples/informed-decision-lifecycle-review is the v12 candidate of compact-sitting.
+It preserves all v11 exact mandates and adds generated state-hub / decision-record
+sets from the candidate intake registry. The deployed v11 directory/values remain
+unchanged rollback references. New records are admitted by verified attributes,
+not ids. Consumer checks the live Approval Engine requester/human-control and pin.
+28 embedded tests and four fixtures pass; policy pins are checked by Go tests.
+
+## Produce a scanned immutable policy image and deployment proposal
+
+```task
+id: FLEX-WP-0033-T03
+status: done
+priority: high
+```
+
+The inherited production binary failed its HIGH/CRITICAL scan (25 findings in Go,
+OPA and telemetry). Fix dependency/build pins, run full engine regression, rebuild,
+scan and retain immutable image/package pins. Render the separate lifecycle PDP
+and v12 review proposal. CARING remains advisory as in deployed review packages;
+no new claim of signed attribution or complete production close-down.
+
+## Approved policy deployment and native verification
+
+```task
+id: FLEX-WP-0033-T04
+status: todo
+priority: high
+```
+
+Part of the concrete INFD-WP-0007 rollout approval. Verify actual consumer caller
+TokenReview and positive/negative lifecycle/human review behavior. No agent binds.
+Retain v11 rollback while preserving decisions and audit evidence. Do not mark
+finished while live acceptance or security findings remain open.
+
+
+## Published candidate evidence — 2026-10-04
+
+Patched Go 1.26.7, OPA 1.4.0 and telemetry SDK 1.43.0; pinned builder/runtime
+images and aligned CI setup with go.mod. Full engine tests, race-enabled tests and vet pass. Both
+container-loaded policy packages validate; review has 28 tests/four fixtures.
+Actual consumer-to-PDP tests pass after rebuilding this binary.
+
+Published image:
+forgejo.coulomb.social/coulomb/flex-auth@sha256:f6ed8af69af766d7e9498465a23c292d91185b79352065736a2132216aac1d37
+
+HIGH/CRITICAL scan: zero findings, retained under
+docs/evidence/2026-10-04-infd-lifecycle/. Candidate Helm values passed server
+dry-run for both PDPs (12 objects); no cluster state changed. Full review packet
+and migration/recovery procedure are in informed-decision deploy/lifecycle.
+
+The existing chart's port-only API egress, advisory CARING dimensions and unsigned
+consumer assertions are explicitly retained limitations, not newly enforced
+controls. T04 remains open; requester projection and State Hub production
+forwarding also remain prerequisites in their owner workplans.