---
id: FLEX-WP-0034
type: workplan
title: "Named-recipient discovery for lifecycle reviews"
domain: infotech
repo: access-engine
status: finished
owner: codex
topic_slug: netkingdom
created: "2026-10-05"
updated: "2026-10-05"
origin: demand
origin_ref: INFD-WP-0007-T05
state_hub_workstream_id: "a3b751be-b5e4-56e5-bfcf-241d05e9a0ba"
---

## Implement and verify recipient-scoped list admission

```task
id: FLEX-WP-0034-T01
status: done
priority: high
state_hub_task_id: "c70d193a-6fa8-5aef-8942-2ceaef13e4a9"
```

Compact-sitting v13 extends the admitted lifecycle attribute branch to list.
It requires the carried immutable review recipient to equal the authenticated
human subject, existing class/submitter/group admission and live native approval
checks in the consumer. Existing exact records retain precedence. Listing uses
the existing twelve-hour assurance window; read/acts retain fifteen minutes.
32 embedded policy tests and owner InformedDecision regressions pass. Consumer
integration covers list/read separation, another recipient and engine outage.
Attribution remains unsigned; no new control claim is made.

## Release through the owning Helm workflow

```task
id: FLEX-WP-0034-T02
status: done
priority: high
state_hub_task_id: "4934d3ad-adb7-5fc9-aa39-5d1626420b46"
```

Founder requested deploying the authoring increment and implementing the rest of
INFD-WP-0007. Authority for its continuation: ADMINISTER @
realm:kubernetes/railiance01, activation=APPROVED. Build immutable owner artifact,
scan, dry-run/diff, then update the existing review Helm release. The consumer's
pinned version/digest must match. Retain the previous artifact/config as rollback.
No anonymous publication, additional workload identity or non-approval bind is
admitted by this change.

## Native release verified — 2026-10-05

Owner CI image 6c6dc263 (source f234d01) has zero HIGH/CRITICAL scan findings.
Server dry-run and namespace-correct client diff showed only the image change.
Helm release flex-auth-informed-decision-sitting revision 13 deployed with
--atomic. Consumer Argo source 9207a51 pins matching v13 digest 31be5985 and
service image 7f5c6cb2. Both are healthy. Native authenticated service-caller
replay of retained human claims permits recipient list, denies a different
recipient, and refuses read with stale original assurance. No fresh human login
or disposition is claimed. Evidence is retained in informed-decision
/docs/evidence/2026-10-05-lifecycle-discovery/. No residual for this scoped owner
workplan; broader profile expansion belongs to INFD-WP-0008.