coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FLEX-WP-0035: T05 done on founder agreement; T04 awaiting operator rollout

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc
This commit is contained in:
tegwick 2026-10-10 12:39:32 +02:00
parent bb14ec679c
commit e34241ec78
1 changed files with 13 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

18
workplans/FLEX-WP-0035-per-identity-application-readback.md
View file

@ -124,10 +124,8 @@ and `readback_systems` are checked against live service output
```task
id: FLEX-WP-0035-T05
status: wait
status: done
priority: high
blocked_on: message-from:informed-decision
blocking_reason: "Source side done; informed-decision must agree to lifecycle v2 (its own lifecycle pin will run the same digest at the next rollout)."
state_hub_task_id: "701cbd99-1a84-5290-8f66-15fa7f407d3b"
```
@ -151,7 +149,10 @@ without the readback purpose. The catalogue `examples/application-readback/`
binds informed-decision to `https://kc.coulomb.social` /
`informed-decision-approver`. `TestReadbackInformedDecisionCatalogue` proves the
readback over the shipped files. The live lifecycle pin still runs v1 (image
`bdac62bc`) until the T04 rollout. Waiting on informed-decision's agreement.
`bdac62bc`) until the T04 rollout.
2026-10-10 done. Founder agreed to lifecycle v2 for informed-decision
(informed-decision itself had not replied to `7fcb1eb7`).
## Deploy the readback pin
@ -160,7 +161,7 @@ id: FLEX-WP-0035-T04
status: wait
needs_human: true
depends_on: [FLEX-WP-0035-T05]
blocking_reason: "Live pin change on railiance01 needs founder go."
blocking_reason: "Founder go given 2026-10-10; repo side done (bb14ec6). The helm rollout must be run by the operator."
priority: medium
state_hub_task_id: "82a8a7e6-54e9-5262-a271-24ce2f161362"
```
@ -176,5 +177,12 @@ must match: URL
(trailing dot, in-cluster only), caller token audience `flex-auth`
(`serve-readback --caller-audience` default), readback caller
`system:serviceaccount:user-engine:user-engine`.
2026-10-10 repo side done (`bb14ec6`). `values/application-readback.yaml` and the
chart's `readback.enabled` mode, which renders `--readback-caller`. The lifecycle
pin moves to `e8c57c18` (`main-b5da745`, v2). Rollback target is `bdac62bc`.
`TestReadbackPinMatchesParticipantPins` checks that the readback pin uses the same
image and package path as each participant's own pin. Rollout order: the lifecycle
pin, then the readback pin.
The pin ships with the image that contains `serve-readback`. Hand user-engine
the evidence that unblocks `USER-WP-0026-T03`.