tegwick
58026ea34a
Version v10 pins approvals 974eae4d, 77993081, 4ae04c8e and b75752d1 from informed-decision docs/evidence/2026-10-04-state-hub-wp0094-approval-create.json. All earlier exact records, including v9's profile memo, stay. The attribute branch still admits nobody. Package digest sha256:ede11f888d57809dfce1b04d2323708c7244f36187fd5a58dd738437a05e7e91. The values pin stays on the v9 image until CI builds this commit. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 692292@bnt-lap001 Assistant-Session: 89c7d8e8-e1b3-47eb-9411-a0ab227fca2f
444 lines
16 KiB
JSON
444 lines
16 KiB
JSON
{
|
|
"memo:infd-20260914-c02": {
|
|
"approval_id": "ccfd8007-2061-48fd-9356-99b16279dac1",
|
|
"binding_digest": "sha256:942cf7d5e6805987df2077a0cc6cde75b148e1729a96dd0692153287820b6a0a",
|
|
"label": "c02",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "railiance-platform",
|
|
"purpose": "Accept provisioning of the secrets-engine service JWT login on the reviewed credential lane",
|
|
"target": {
|
|
"id": "rpf-wp-0035-t02",
|
|
"type": "credential-lane",
|
|
"system": "railiance-platform"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260914-c03": {
|
|
"approval_id": "a0611d0d-b9ef-4b9a-aa79-e94a9e3fcd5f",
|
|
"binding_digest": "sha256:95cae135b994acea6dad9da978dd3df1aa3354de900a1f43c2e5a03a20e8e844",
|
|
"label": "c03",
|
|
"binding": {
|
|
"action": "apply",
|
|
"actor": "informed-decision",
|
|
"principal": "netkingdom",
|
|
"purpose": "Apply the live OpenBao role addition already specified for the operator-tunneled browser callback",
|
|
"target": {
|
|
"id": "nk-wp-0032-t03",
|
|
"type": "openbao-role",
|
|
"system": "netkingdom"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260914-c04": {
|
|
"approval_id": "22ac6df3-e6a9-472b-a68e-c8caca4289a7",
|
|
"binding_digest": "sha256:dec960b30efaf654abbdcd8a2cdd20d4ff6bf52e170744f817dc55845d9cb192",
|
|
"label": "c04",
|
|
"binding": {
|
|
"action": "attend",
|
|
"actor": "informed-decision",
|
|
"principal": "ops-warden",
|
|
"purpose": "Attend the graded lockdown / break-glass seal for ops-warden trust-root work",
|
|
"target": {
|
|
"id": "warden-wp-0027-t02",
|
|
"type": "trust-root",
|
|
"system": "ops-warden"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260914-d01": {
|
|
"approval_id": "9f7c3506-68de-4826-86ff-e301f428408d",
|
|
"binding_digest": "sha256:8cb7cc93f38db9d19b49e201e0554b50af1891fec853fef333a06ea078541d15",
|
|
"label": "d01",
|
|
"binding": {
|
|
"action": "retire",
|
|
"actor": "informed-decision",
|
|
"principal": "the-custodian",
|
|
"purpose": "After HA failover and restore drills pass, retire WSL2 as a State Hub fallback",
|
|
"target": {
|
|
"id": "cust-wp-0038-t08",
|
|
"type": "operating-model",
|
|
"system": "the-custodian"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260914-d02": {
|
|
"approval_id": "b3ce2c01-0a3b-401e-b4ed-c1954af169c9",
|
|
"binding_digest": "sha256:be0c7de123216740d2c2eeaed80384e03e6b6d1668104f94bb8f9cbae7dfe30f",
|
|
"label": "d02",
|
|
"binding": {
|
|
"action": "confirm",
|
|
"actor": "informed-decision",
|
|
"principal": "helixforge-factory",
|
|
"purpose": "Confirm the existing operator-group claim for CCR-2026-0019 as required by the factory identity/audit/approval path",
|
|
"target": {
|
|
"id": "ccr-2026-0019",
|
|
"type": "ccr",
|
|
"system": "helixforge-factory"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260914-d03": {
|
|
"approval_id": "3b483e6b-0b92-45ff-83b6-bc5057c0a496",
|
|
"binding_digest": "sha256:3c562278e86bb5e7f747452cf2e99d3a136853ab748676e8359262b835cd1425",
|
|
"label": "d03",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "mason",
|
|
"purpose": "Accept the fluid-telegram operator credential lane plan so construction may proceed",
|
|
"target": {
|
|
"id": "mason-wp-0005",
|
|
"type": "workplan",
|
|
"system": "mason"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260914-d04": {
|
|
"approval_id": "356e67a3-5539-46a1-922a-f5591fd38ee5",
|
|
"binding_digest": "sha256:3c2d7759679d871cb7c5cac8999542a365e64c918d59d0c4ce864ffb837453e4",
|
|
"label": "d04",
|
|
"binding": {
|
|
"action": "confirm",
|
|
"actor": "informed-decision",
|
|
"principal": "railiance-clock",
|
|
"purpose": "Confirm ecosystem ownership and the security role for Railiance Clock as specified",
|
|
"target": {
|
|
"id": "rclk-wp-0002-t01",
|
|
"type": "workplan",
|
|
"system": "railiance-clock"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260921-b01": {
|
|
"approval_id": "ba5ce2d8-8b6d-40be-af89-2e8c147029a3",
|
|
"binding_digest": "sha256:e9eaf454e94871ec2060855fcfbd327bcaec873d2c61cae031bec9f95a34bcae",
|
|
"label": "b01",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "helixforge-factory",
|
|
"purpose": "Accept the spend envelope for metered Glas runs on the Anthropic key",
|
|
"target": {
|
|
"id": "spend-envelope:hfact-glas-anthropic-2026-09",
|
|
"type": "spend-envelope",
|
|
"system": "rein-aharness"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260927-b01": {
|
|
"approval_id": "e9521804-8fce-4fbc-bfdf-8a1aa959fd61",
|
|
"binding_digest": "sha256:7aefcee9b79eb3285997066b323ae1772e13d58f875aacc6eb5e9407bd1c1185",
|
|
"label": "20260927-b01",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "helixforge-factory",
|
|
"purpose": "Accept one EUR 10 metered tool proof; no retry or publication; 2026-09-27T16:35:00Z through 2026-09-27T17:35:00Z",
|
|
"target": {
|
|
"id": "spend-envelope:hfact-glas-tool-proof-20260927-one-attempt",
|
|
"system": "rein-aharness",
|
|
"type": "spend-envelope"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20260927-b02": {
|
|
"approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c",
|
|
"binding_digest": "sha256:3e5951847e1909abe1561f561b4591228848a2e1a939b9bf5acab61e2db42773",
|
|
"label": "20260927-b02",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "helixforge-factory",
|
|
"purpose": "Accept one EUR 10 metered tool proof; no retry or publication; 2026-09-27T18:20:00Z through 2026-09-28T18:20:00Z",
|
|
"target": {
|
|
"id": "spend-envelope:hfact-glas-tool-proof-20260927-renewed-one-attempt",
|
|
"system": "rein-aharness",
|
|
"type": "spend-envelope"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:metered-20260927-provider-apply": {
|
|
"approval_id": "0c05bd0a-f81f-451d-840c-5565628e2edc",
|
|
"binding_digest": "sha256:a36b88244c26b1ffcd765cbadc201ff79260c7bcbd71d20d1584c3c0a3b1c3de",
|
|
"label": "metered-20260927-provider-apply",
|
|
"binding": {
|
|
"action": "apply",
|
|
"actor": "secrets-engine",
|
|
"principal": "secrets-engine",
|
|
"purpose": "Owner-admitted glas-harness agt run through the reviewed local profile; no caller-facing key fetch",
|
|
"target": {
|
|
"attributes": {
|
|
"auth_targets": [
|
|
"se-prod-glas-claude-agent-dev-anthropic"
|
|
],
|
|
"fields": [],
|
|
"policy_targets": [
|
|
"se-prod-glas-claude-agent-dev-anthropic"
|
|
],
|
|
"stage": "prod"
|
|
},
|
|
"id": "catalog:glas-claude-agent-dev-anthropic",
|
|
"system": "secrets-engine",
|
|
"type": "secret-catalog-lane"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:metered-20260927-provider-verify": {
|
|
"approval_id": "47f118a3-a86c-43ad-969d-42e09a0f45bb",
|
|
"binding_digest": "sha256:98636335ccd36286c02fe018f296fd7d4dfd091ee89d27fe1b629e3db00cf121",
|
|
"label": "metered-20260927-provider-verify",
|
|
"binding": {
|
|
"action": "verify",
|
|
"actor": "secrets-engine",
|
|
"principal": "secrets-engine",
|
|
"purpose": "Owner-admitted glas-harness agt run through the reviewed local profile; no caller-facing key fetch",
|
|
"target": {
|
|
"attributes": {
|
|
"auth_targets": [
|
|
"se-prod-glas-claude-agent-dev-anthropic"
|
|
],
|
|
"fields": [
|
|
"ANTHROPIC_API_KEY"
|
|
],
|
|
"policy_targets": [
|
|
"se-prod-glas-claude-agent-dev-anthropic"
|
|
],
|
|
"stage": "prod"
|
|
},
|
|
"id": "catalog:glas-claude-agent-dev-anthropic",
|
|
"system": "secrets-engine",
|
|
"type": "secret-catalog-lane"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:metered-20260927-provider-exec": {
|
|
"approval_id": "7b32443a-a817-400c-a130-01b9ef04c8ee",
|
|
"binding_digest": "sha256:8b31dd5911552b901b1f807a8cd6348d09547f3dbb2a52e3b42ad9fd948a2b01",
|
|
"label": "metered-20260927-provider-exec",
|
|
"binding": {
|
|
"action": "exec",
|
|
"actor": "secrets-engine",
|
|
"principal": "secrets-engine",
|
|
"purpose": "Owner-admitted glas-harness agt run through the reviewed local profile; no caller-facing key fetch",
|
|
"target": {
|
|
"attributes": {
|
|
"auth_targets": [
|
|
"se-prod-glas-claude-agent-dev-anthropic"
|
|
],
|
|
"fields": [
|
|
"ANTHROPIC_API_KEY"
|
|
],
|
|
"policy_targets": [
|
|
"se-prod-glas-claude-agent-dev-anthropic"
|
|
],
|
|
"stage": "prod"
|
|
},
|
|
"id": "catalog:glas-claude-agent-dev-anthropic",
|
|
"system": "secrets-engine",
|
|
"type": "secret-catalog-lane"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:metered-20260927-worker-apply": {
|
|
"approval_id": "2ce76d7f-01c3-4b63-8476-8d1230679769",
|
|
"binding_digest": "sha256:412b79fb537d4444e52e3358820b6ea204fa17173a4420ab6372c52d010ee018",
|
|
"label": "metered-20260927-worker-apply",
|
|
"binding": {
|
|
"action": "apply",
|
|
"actor": "secrets-engine",
|
|
"principal": "secrets-engine",
|
|
"purpose": "Claim the admitted hfact-metered ops_run as rein-aharness-metered@railiance01 inside the catalog-bound Glas metered owner",
|
|
"target": {
|
|
"attributes": {
|
|
"auth_targets": [
|
|
"se-prod-activity-core-metered-worker-token"
|
|
],
|
|
"fields": [],
|
|
"policy_targets": [
|
|
"se-prod-activity-core-metered-worker-token"
|
|
],
|
|
"stage": "prod"
|
|
},
|
|
"id": "catalog:activity-core-metered-worker-token",
|
|
"system": "secrets-engine",
|
|
"type": "secret-catalog-lane"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:metered-20260927-worker-verify": {
|
|
"approval_id": "c2af4bcf-15b4-4305-aac1-acc7e4dcb099",
|
|
"binding_digest": "sha256:bce6e2091ed076ec0040804d24c822078ac1eda18cd62703801fc9da77898303",
|
|
"label": "metered-20260927-worker-verify",
|
|
"binding": {
|
|
"action": "verify",
|
|
"actor": "secrets-engine",
|
|
"principal": "secrets-engine",
|
|
"purpose": "Claim the admitted hfact-metered ops_run as rein-aharness-metered@railiance01 inside the catalog-bound Glas metered owner",
|
|
"target": {
|
|
"attributes": {
|
|
"auth_targets": [
|
|
"se-prod-activity-core-metered-worker-token"
|
|
],
|
|
"fields": [
|
|
"token"
|
|
],
|
|
"policy_targets": [
|
|
"se-prod-activity-core-metered-worker-token"
|
|
],
|
|
"stage": "prod"
|
|
},
|
|
"id": "catalog:activity-core-metered-worker-token",
|
|
"system": "secrets-engine",
|
|
"type": "secret-catalog-lane"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:metered-20260927-worker-exec": {
|
|
"approval_id": "dc22666a-d5d7-46bc-9490-ebe9fe09dc38",
|
|
"binding_digest": "sha256:ae261c9271a21b626be354646054f493d0951f69aecdbde3cfce3ac0c5667e8f",
|
|
"label": "metered-20260927-worker-exec",
|
|
"binding": {
|
|
"action": "exec",
|
|
"actor": "secrets-engine",
|
|
"principal": "secrets-engine",
|
|
"purpose": "Claim the admitted hfact-metered ops_run as rein-aharness-metered@railiance01 inside the catalog-bound Glas metered owner",
|
|
"target": {
|
|
"attributes": {
|
|
"auth_targets": [
|
|
"se-prod-activity-core-metered-worker-token"
|
|
],
|
|
"fields": [
|
|
"token"
|
|
],
|
|
"policy_targets": [
|
|
"se-prod-activity-core-metered-worker-token"
|
|
],
|
|
"stage": "prod"
|
|
},
|
|
"id": "catalog:activity-core-metered-worker-token",
|
|
"system": "secrets-engine",
|
|
"type": "secret-catalog-lane"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:emergent-profile-adoption-0-2-6": {
|
|
"approval_id": "05751e09-3a5b-4a41-a4e8-b79e96de6484",
|
|
"binding_digest": "sha256:7843e660694dcd7c806dc02ee0cca05dd3a96488f614b1946291496259a02001",
|
|
"label": "emergent-profile-0-2-6",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "emergent-security",
|
|
"purpose": "Accept only the non-normative knowledge profile boundary",
|
|
"target": {
|
|
"id": "emergent-security:knowledge:0.2.6:8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02",
|
|
"type": "knowledge-profile",
|
|
"system": "emergent-security"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:infd-20261003-p01": {
|
|
"approval_id": "706f4205-aaa7-44f6-be30-d0f57664d69c",
|
|
"binding_digest": "sha256:c8a1a9c8fb22616e3aacfb877ba7974feb5eedaed491f856a6c90719c502ebe4",
|
|
"label": "p01",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "railiance-platform",
|
|
"purpose": "Accept the 2026-09-13 scoped delivery proof for the CCR-2026-0019 secrets-engine approval-client reader",
|
|
"target": {
|
|
"id": "ccr:CCR-2026-0019-delivery-proof",
|
|
"type": "credential-lane",
|
|
"system": "railiance-platform"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:state-hub-edge-receiving-rollout-c287ed8": {
|
|
"approval_id": "974eae4d-782d-41ed-93be-e34433b5fe59",
|
|
"binding_digest": "sha256:84735b88b2db20d9445af369e28a8d40bd495dd20c0303ff3a764666ec976dde",
|
|
"label": "wp0094-m1-state-hub-c287ed8",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "state-hub",
|
|
"purpose": "Production rollout of tested source; rollback is helm rollback to revision 72 without schema downgrade.",
|
|
"target": {
|
|
"id": "state-hub:source:c287ed82594313394ca8e67ce40714c90e744af6",
|
|
"system": "state-hub",
|
|
"type": "service-release"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:owner-return-pickup-plan-b6222af": {
|
|
"approval_id": "77993081-1db2-4bba-99f2-74ca1f8652b1",
|
|
"binding_digest": "sha256:e745ef64658e77e41b2a5ef569ec0f6986e120d338656d75749425f5f29b7ca0",
|
|
"label": "wp0094-m2-owner-return-b6222af",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "activity-core",
|
|
"purpose": "Plan approval plus a gated single-repo trial; the definition stays disabled and wakeups never clear waits.",
|
|
"target": {
|
|
"id": "activity-core:source:b6222af2cfd1094360a0d430e3907e8788a3acf9:owner-return-pickup",
|
|
"system": "activity-core",
|
|
"type": "activity-plan"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:freshness-runner-deploy-trial-e77f8b4": {
|
|
"approval_id": "4ae04c8e-d604-4d8b-b166-693eef855da8",
|
|
"binding_digest": "sha256:f8ff89dd353c1d2006622c45996c0f05f050865f8c203373dc74da1ba3f05e24",
|
|
"label": "wp0094-m3-freshness-runner-e77f8b4",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "repo-manager",
|
|
"purpose": "Deployment and limited data-writing trials; no schedule.",
|
|
"target": {
|
|
"id": "repo-manager:source:e77f8b457647ff23697e45a74615edde5f42d39d",
|
|
"system": "repo-manager",
|
|
"type": "service-release"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
},
|
|
"memo:freshness-schedule-enable-retire-sweep": {
|
|
"approval_id": "b75752d1-bab6-4cf3-9308-5368c1d5aa91",
|
|
"binding_digest": "sha256:cc3e8fe6ace5438f19d647d3de226407c8b009985c82ad9a993e81226e6f316f",
|
|
"label": "wp0094-m4-freshness-schedule",
|
|
"binding": {
|
|
"action": "accept",
|
|
"actor": "informed-decision",
|
|
"principal": "activity-core",
|
|
"purpose": "Recurring schedule activation after clean trials, and permanent retirement of the legacy sweep.",
|
|
"target": {
|
|
"id": "activity-core:definition:repo-manager-bounded-freshness:b2c6c5613218dea9dbaef303aff22a8d1b07f074",
|
|
"system": "activity-core",
|
|
"type": "activity-schedule"
|
|
}
|
|
},
|
|
"memo_version": 1
|
|
}
|
|
}
|