access-engine/workplans/FLEX-WP-0033-informed-decision-lifecycle.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	related	state_hub_workstream_id
FLEX-WP-0033	workplan	Initial Informed Decision lifecycle policy and production candidate	infotech	access-engine	finished	codex	netkingdom	2026-10-04	2026-10-05	INFD-WP-0007 INFD-WP-0005 FLEX-WP-0028	cc97d906-68df-537c-a88f-fb2dcf7285c9

Founder selected net-kingdom-admins humans and the State Hub workload for the first release. Source work was prepared in an isolated checkout and pushed to main; no live grants applied.

Define and prove the initial lifecycle authorization contract

id: FLEX-WP-0033-T01
status: done
priority: high
state_hub_task_id: "026515bd-e7c9-5edf-8ea3-18295a3f2b17"

Separate informed-decision.lifecycle v1 package admits twelve authoring/retrieval operations. It requires platform tenant, authenticated identity provenance, KeyCape AAL2 for humans or the exact State Hub service account and lifecycle audience for workloads. Immutable owner/editor/publication facts scope access. No accept action. Contract profiles declare fact keys; they do not authenticate real identities. Consumer attribution remains unsigned (FLEX-WP-0024).

21 Go cases and actual HTTP evaluator integration prove authoring, publication, human refinement, successor draft access, restart and rejection of other callers.

Prepare human review admission without per-decision policy rollout

id: FLEX-WP-0033-T02
status: done
priority: high
state_hub_task_id: "7f99bd2d-a7fa-5e1f-bf9e-0f451dda664d"

examples/informed-decision-lifecycle-review is the v12 candidate of compact-sitting. It preserves all v11 exact mandates and adds generated state-hub / decision-record sets from the candidate intake registry. The deployed v11 directory/values remain unchanged rollback references. New records are admitted by verified attributes, not ids. Consumer checks the live Approval Engine requester/human-control and pin. 28 embedded tests and four fixtures pass; policy pins are checked by Go tests.

Produce a scanned immutable policy image and deployment proposal

id: FLEX-WP-0033-T03
status: done
priority: high
state_hub_task_id: "fec0c5ea-50b0-5c25-a709-11e073cfc570"

The inherited production binary failed its HIGH/CRITICAL scan (25 findings in Go, OPA and telemetry). Fix dependency/build pins, run full engine regression, rebuild, scan and retain immutable image/package pins. Render the separate lifecycle PDP and v12 review proposal. CARING remains advisory as in deployed review packages; no new claim of signed attribution or complete production close-down.

Approved policy deployment and native verification

id: FLEX-WP-0033-T04
status: done
priority: high
state_hub_task_id: "9d275270-1521-5635-bf46-e451292534e5"

Part of the concrete INFD-WP-0007 rollout approval. Verify actual consumer caller TokenReview and positive/negative lifecycle/human review behavior. No agent binds. Retain v11 rollback while preserving decisions and audit evidence. Do not mark finished while live acceptance or security findings remain open.

Published candidate evidence — 2026-10-04

Patched Go 1.26.7, OPA 1.4.0 and telemetry SDK 1.43.0; pinned builder/runtime images and aligned CI setup with go.mod. Full engine tests, race-enabled tests and vet pass. Both container-loaded policy packages validate; review has 28 tests/four fixtures. Actual consumer-to-PDP tests pass after rebuilding this binary.

Published image: forgejo.coulomb.social/coulomb/flex-auth@sha256:f6ed8af69af766d7e9498465a23c292d91185b79352065736a2132216aac1d37

HIGH/CRITICAL scan: zero findings, retained under docs/evidence/2026-10-04-infd-lifecycle/. Candidate Helm values passed server dry-run for both PDPs (12 objects); no cluster state changed. Full review packet and migration/recovery procedure are in informed-decision deploy/lifecycle.

The existing chart's port-only API egress, advisory CARING dimensions and unsigned consumer assertions are explicitly retained limitations, not newly enforced controls. T04 remains open; requester projection and State Hub production forwarding also remain prerequisites in their owner workplans.

Forgejo run 316 built committed source d2d0b6f. Final candidate values now pin forgejo.coulomb.social/coulomb/flex-auth@sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99 This supersedes the local candidate above for rollout. Both embedded packages validate in the CI artifact. No deployed values or cluster objects changed.

Native deployment — 2026-10-05

Founder-approved cutover installed lifecycle Helm release revision 1 and upgraded sitting release to revision 12 using CI image bdac62bc. Native consumer checks authorize selected State Hub lifecycle operations and refuse missing/crossed audience and unregistered same-audience callers. Two records and a revision retain unchanged image/config/package pins; audit delivery is settled. Human review of approval 22b30fe7-c565-46f2-8193-d8875975ad9e remains pending; T04 stays open for that native human evidence.

Native human acceptance — 2026-10-05

The platform-root human opened the retained review, acknowledged its required highlight and accepted at 2026-10-04T22:17:19Z (00:17:19 Europe/Berlin). Approval Engine 22b30fe7-c565-46f2-8193-d8875975ad9e has a confirmed human entry, linked to presentation pres-484c0ef3-0a87-4dbf-aa30-05fd21e19c91 and source infd-20261005-lifecycle-production-proof revision 2. Independent Audit Core reconciliation matches with pending 0. The selected workload retrieves that confirmed outcome. No agent bound or consumed.

Initial scope complete. Broader browser/discovery profiles remain with the live INFD-WP-0007-T02/T05 work records; no new caller or public delegation is admitted. Root receipts: informed-decision/docs/evidence/2026-10-05-lifecycle-cutover/.