coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit named-recipient discovery for lifecycle reviews
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 58s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-05 01:01:29 +02:00
parent 1487bd901f
commit f234d0175a
3 changed files with 99 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

47
workplans/FLEX-WP-0034-informed-decision-review-discovery.md Normal file
View file

@ -0,0 +1,47 @@
---
id: FLEX-WP-0034
type: workplan
title: "Named-recipient discovery for lifecycle reviews"
domain: infotech
repo: access-engine
status: active
owner: codex
topic_slug: netkingdom
created: "2026-10-05"
updated: "2026-10-05"
origin: demand
origin_ref: INFD-WP-0007-T05
---
## Implement and verify recipient-scoped list admission
```task
id: FLEX-WP-0034-T01
status: done
priority: high
```
Compact-sitting v13 extends the admitted lifecycle attribute branch to list.
It requires the carried immutable review recipient to equal the authenticated
human subject, existing class/submitter/group admission and live native approval
checks in the consumer. Existing exact records retain precedence. Listing uses
the existing twelve-hour assurance window; read/acts retain fifteen minutes.
32 embedded policy tests and owner InformedDecision regressions pass. Consumer
integration covers list/read separation, another recipient and engine outage.
Attribution remains unsigned; no new control claim is made.
## Release through the owning Helm workflow
```task
id: FLEX-WP-0034-T02
status: progress
priority: high
```
Founder requested deploying the authoring increment and implementing the rest of
INFD-WP-0007. Authority for its continuation: ADMINISTER @
realm:kubernetes/railiance01, activation=APPROVED. Build immutable owner artifact,
scan, dry-run/diff, then update the existing review Helm release. The consumer's
pinned version/digest must match. Retain the previous artifact/config as rollback.
No anonymous publication, additional workload identity or non-approval bind is
admitted by this change.