---
id: FLEX-WP-0033
type: workplan
title: "Initial Informed Decision lifecycle policy and production candidate"
domain: infotech
repo: access-engine
status: active
owner: codex
topic_slug: netkingdom
created: "2026-10-04"
updated: "2026-10-04"
related: [INFD-WP-0007, INFD-WP-0005, FLEX-WP-0028]
state_hub_workstream_id: "cc97d906-68df-537c-a88f-fb2dcf7285c9"
---

Founder selected net-kingdom-admins humans and the State Hub workload for the
first release. Source work is on infd-wp0007-lifecycle; no live grants applied.

## Define and prove the initial lifecycle authorization contract

```task
id: FLEX-WP-0033-T01
status: done
priority: high
state_hub_task_id: "026515bd-e7c9-5edf-8ea3-18295a3f2b17"
```

Separate informed-decision.lifecycle v1 package admits twelve authoring/retrieval
operations. It requires platform tenant, authenticated identity provenance,
KeyCape AAL2 for humans or the exact State Hub service account and lifecycle
audience for workloads. Immutable owner/editor/publication facts scope access.
No accept action. Contract profiles declare fact keys; they do not authenticate
real identities. Consumer attribution remains unsigned (FLEX-WP-0024).

21 Go cases and actual HTTP evaluator integration prove authoring, publication,
human refinement, successor draft access, restart and rejection of other callers.

## Prepare human review admission without per-decision policy rollout

```task
id: FLEX-WP-0033-T02
status: done
priority: high
state_hub_task_id: "7f99bd2d-a7fa-5e1f-bf9e-0f451dda664d"
```

examples/informed-decision-lifecycle-review is the v12 candidate of compact-sitting.
It preserves all v11 exact mandates and adds generated state-hub / decision-record
sets from the candidate intake registry. The deployed v11 directory/values remain
unchanged rollback references. New records are admitted by verified attributes,
not ids. Consumer checks the live Approval Engine requester/human-control and pin.
28 embedded tests and four fixtures pass; policy pins are checked by Go tests.

## Produce a scanned immutable policy image and deployment proposal

```task
id: FLEX-WP-0033-T03
status: done
priority: high
state_hub_task_id: "fec0c5ea-50b0-5c25-a709-11e073cfc570"
```

The inherited production binary failed its HIGH/CRITICAL scan (25 findings in Go,
OPA and telemetry). Fix dependency/build pins, run full engine regression, rebuild,
scan and retain immutable image/package pins. Render the separate lifecycle PDP
and v12 review proposal. CARING remains advisory as in deployed review packages;
no new claim of signed attribution or complete production close-down.

## Approved policy deployment and native verification

```task
id: FLEX-WP-0033-T04
status: todo
priority: high
state_hub_task_id: "9d275270-1521-5635-bf46-e451292534e5"
```

Part of the concrete INFD-WP-0007 rollout approval. Verify actual consumer caller
TokenReview and positive/negative lifecycle/human review behavior. No agent binds.
Retain v11 rollback while preserving decisions and audit evidence. Do not mark
finished while live acceptance or security findings remain open.


## Published candidate evidence — 2026-10-04

Patched Go 1.26.7, OPA 1.4.0 and telemetry SDK 1.43.0; pinned builder/runtime
images and aligned CI setup with go.mod. Full engine tests, race-enabled tests and vet pass. Both
container-loaded policy packages validate; review has 28 tests/four fixtures.
Actual consumer-to-PDP tests pass after rebuilding this binary.

Published image:
forgejo.coulomb.social/coulomb/flex-auth@sha256:f6ed8af69af766d7e9498465a23c292d91185b79352065736a2132216aac1d37

HIGH/CRITICAL scan: zero findings, retained under
docs/evidence/2026-10-04-infd-lifecycle/. Candidate Helm values passed server
dry-run for both PDPs (12 objects); no cluster state changed. Full review packet
and migration/recovery procedure are in informed-decision deploy/lifecycle.

The existing chart's port-only API egress, advisory CARING dimensions and unsigned
consumer assertions are explicitly retained limitations, not newly enforced
controls. T04 remains open; requester projection and State Hub production
forwarding also remain prerequisites in their owner workplans.