From e34241ec78b6e57318b83234d4fd47d58071a73d Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 10 Oct 2026 12:39:32 +0200 Subject: [PATCH] FLEX-WP-0035: T05 done on founder agreement; T04 awaiting operator rollout Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 735967@bnt-lap001 Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc --- ...P-0035-per-identity-application-readback.md | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/workplans/FLEX-WP-0035-per-identity-application-readback.md b/workplans/FLEX-WP-0035-per-identity-application-readback.md index 7aa301e..fad9509 100644 --- a/workplans/FLEX-WP-0035-per-identity-application-readback.md +++ b/workplans/FLEX-WP-0035-per-identity-application-readback.md @@ -124,10 +124,8 @@ and `readback_systems` are checked against live service output ```task id: FLEX-WP-0035-T05 -status: wait +status: done priority: high -blocked_on: message-from:informed-decision -blocking_reason: "Source side done; informed-decision must agree to lifecycle v2 (its own lifecycle pin will run the same digest at the next rollout)." state_hub_task_id: "701cbd99-1a84-5290-8f66-15fa7f407d3b" ``` @@ -151,7 +149,10 @@ without the readback purpose. The catalogue `examples/application-readback/` binds informed-decision to `https://kc.coulomb.social` / `informed-decision-approver`. `TestReadbackInformedDecisionCatalogue` proves the readback over the shipped files. The live lifecycle pin still runs v1 (image -`bdac62bc`) until the T04 rollout. Waiting on informed-decision's agreement. +`bdac62bc`) until the T04 rollout. + +2026-10-10 done. Founder agreed to lifecycle v2 for informed-decision +(informed-decision itself had not replied to `7fcb1eb7`). ## Deploy the readback pin @@ -160,7 +161,7 @@ id: FLEX-WP-0035-T04 status: wait needs_human: true depends_on: [FLEX-WP-0035-T05] -blocking_reason: "Live pin change on railiance01 needs founder go." +blocking_reason: "Founder go given 2026-10-10; repo side done (bb14ec6). The helm rollout must be run by the operator." priority: medium state_hub_task_id: "82a8a7e6-54e9-5262-a271-24ce2f161362" ``` @@ -176,5 +177,12 @@ must match: URL (trailing dot, in-cluster only), caller token audience `flex-auth` (`serve-readback --caller-audience` default), readback caller `system:serviceaccount:user-engine:user-engine`. + +2026-10-10 repo side done (`bb14ec6`). `values/application-readback.yaml` and the +chart's `readback.enabled` mode, which renders `--readback-caller`. The lifecycle +pin moves to `e8c57c18` (`main-b5da745`, v2). Rollback target is `bdac62bc`. +`TestReadbackPinMatchesParticipantPins` checks that the readback pin uses the same +image and package path as each participant's own pin. Rollout order: the lifecycle +pin, then the readback pin. The pin ships with the image that contains `serve-readback`. Hand user-engine the evidence that unblocks `USER-WP-0026-T03`.