--- id: FLEX-WP-0033 type: workplan title: "Initial Informed Decision lifecycle policy and production candidate" domain: infotech repo: access-engine status: finished owner: codex topic_slug: netkingdom created: "2026-10-04" updated: "2026-10-05" related: [INFD-WP-0007, INFD-WP-0005, FLEX-WP-0028] state_hub_workstream_id: "cc97d906-68df-537c-a88f-fb2dcf7285c9" --- Founder selected net-kingdom-admins humans and the State Hub workload for the first release. Source work was prepared in an isolated checkout and pushed to main; no live grants applied. ## Define and prove the initial lifecycle authorization contract ```task id: FLEX-WP-0033-T01 status: done priority: high state_hub_task_id: "026515bd-e7c9-5edf-8ea3-18295a3f2b17" ``` Separate informed-decision.lifecycle v1 package admits twelve authoring/retrieval operations. It requires platform tenant, authenticated identity provenance, KeyCape AAL2 for humans or the exact State Hub service account and lifecycle audience for workloads. Immutable owner/editor/publication facts scope access. No accept action. Contract profiles declare fact keys; they do not authenticate real identities. Consumer attribution remains unsigned (FLEX-WP-0024). 21 Go cases and actual HTTP evaluator integration prove authoring, publication, human refinement, successor draft access, restart and rejection of other callers. ## Prepare human review admission without per-decision policy rollout ```task id: FLEX-WP-0033-T02 status: done priority: high state_hub_task_id: "7f99bd2d-a7fa-5e1f-bf9e-0f451dda664d" ``` examples/informed-decision-lifecycle-review is the v12 candidate of compact-sitting. It preserves all v11 exact mandates and adds generated state-hub / decision-record sets from the candidate intake registry. The deployed v11 directory/values remain unchanged rollback references. New records are admitted by verified attributes, not ids. Consumer checks the live Approval Engine requester/human-control and pin. 28 embedded tests and four fixtures pass; policy pins are checked by Go tests. ## Produce a scanned immutable policy image and deployment proposal ```task id: FLEX-WP-0033-T03 status: done priority: high state_hub_task_id: "fec0c5ea-50b0-5c25-a709-11e073cfc570" ``` The inherited production binary failed its HIGH/CRITICAL scan (25 findings in Go, OPA and telemetry). Fix dependency/build pins, run full engine regression, rebuild, scan and retain immutable image/package pins. Render the separate lifecycle PDP and v12 review proposal. CARING remains advisory as in deployed review packages; no new claim of signed attribution or complete production close-down. ## Approved policy deployment and native verification ```task id: FLEX-WP-0033-T04 status: done priority: high state_hub_task_id: "9d275270-1521-5635-bf46-e451292534e5" ``` Part of the concrete INFD-WP-0007 rollout approval. Verify actual consumer caller TokenReview and positive/negative lifecycle/human review behavior. No agent binds. Retain v11 rollback while preserving decisions and audit evidence. Do not mark finished while live acceptance or security findings remain open. ## Published candidate evidence — 2026-10-04 Patched Go 1.26.7, OPA 1.4.0 and telemetry SDK 1.43.0; pinned builder/runtime images and aligned CI setup with go.mod. Full engine tests, race-enabled tests and vet pass. Both container-loaded policy packages validate; review has 28 tests/four fixtures. Actual consumer-to-PDP tests pass after rebuilding this binary. Published image: forgejo.coulomb.social/coulomb/flex-auth@sha256:f6ed8af69af766d7e9498465a23c292d91185b79352065736a2132216aac1d37 HIGH/CRITICAL scan: zero findings, retained under docs/evidence/2026-10-04-infd-lifecycle/. Candidate Helm values passed server dry-run for both PDPs (12 objects); no cluster state changed. Full review packet and migration/recovery procedure are in informed-decision deploy/lifecycle. The existing chart's port-only API egress, advisory CARING dimensions and unsigned consumer assertions are explicitly retained limitations, not newly enforced controls. T04 remains open; requester projection and State Hub production forwarding also remain prerequisites in their owner workplans. Forgejo run 316 built committed source d2d0b6f. Final candidate values now pin forgejo.coulomb.social/coulomb/flex-auth@sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99 This supersedes the local candidate above for rollout. Both embedded packages validate in the CI artifact. No deployed values or cluster objects changed. ## Native deployment — 2026-10-05 Founder-approved cutover installed lifecycle Helm release revision 1 and upgraded sitting release to revision 12 using CI image bdac62bc. Native consumer checks authorize selected State Hub lifecycle operations and refuse missing/crossed audience and unregistered same-audience callers. Two records and a revision retain unchanged image/config/package pins; audit delivery is settled. Human review of approval 22b30fe7-c565-46f2-8193-d8875975ad9e remains pending; T04 stays open for that native human evidence. ## Native human acceptance — 2026-10-05 The platform-root human opened the retained review, acknowledged its required highlight and accepted at 2026-10-04T22:17:19Z (00:17:19 Europe/Berlin). Approval Engine 22b30fe7-c565-46f2-8193-d8875975ad9e has a confirmed human entry, linked to presentation pres-484c0ef3-0a87-4dbf-aa30-05fd21e19c91 and source infd-20261005-lifecycle-production-proof revision 2. Independent Audit Core reconciliation matches with pending 0. The selected workload retrieves that confirmed outcome. No agent bound or consumed. Initial scope complete. Broader browser/discovery profiles remain with the live INFD-WP-0007-T02/T05 work records; no new caller or public delegation is admitted. Root receipts: informed-decision/docs/evidence/2026-10-05-lifecycle-cutover/.