tegwick
910d85b54b
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
132 lines
5.8 KiB
Markdown
132 lines
5.8 KiB
Markdown
---
|
|
id: FLEX-WP-0033
|
|
type: workplan
|
|
title: "Initial Informed Decision lifecycle policy and production candidate"
|
|
domain: infotech
|
|
repo: access-engine
|
|
status: finished
|
|
owner: codex
|
|
topic_slug: netkingdom
|
|
created: "2026-10-04"
|
|
updated: "2026-10-05"
|
|
related: [INFD-WP-0007, INFD-WP-0005, FLEX-WP-0028]
|
|
state_hub_workstream_id: "cc97d906-68df-537c-a88f-fb2dcf7285c9"
|
|
---
|
|
|
|
Founder selected net-kingdom-admins humans and the State Hub workload for the
|
|
first release. Source work was prepared in an isolated checkout and pushed to main; no live grants applied.
|
|
|
|
## Define and prove the initial lifecycle authorization contract
|
|
|
|
```task
|
|
id: FLEX-WP-0033-T01
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "026515bd-e7c9-5edf-8ea3-18295a3f2b17"
|
|
```
|
|
|
|
Separate informed-decision.lifecycle v1 package admits twelve authoring/retrieval
|
|
operations. It requires platform tenant, authenticated identity provenance,
|
|
KeyCape AAL2 for humans or the exact State Hub service account and lifecycle
|
|
audience for workloads. Immutable owner/editor/publication facts scope access.
|
|
No accept action. Contract profiles declare fact keys; they do not authenticate
|
|
real identities. Consumer attribution remains unsigned (FLEX-WP-0024).
|
|
|
|
21 Go cases and actual HTTP evaluator integration prove authoring, publication,
|
|
human refinement, successor draft access, restart and rejection of other callers.
|
|
|
|
## Prepare human review admission without per-decision policy rollout
|
|
|
|
```task
|
|
id: FLEX-WP-0033-T02
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "7f99bd2d-a7fa-5e1f-bf9e-0f451dda664d"
|
|
```
|
|
|
|
examples/informed-decision-lifecycle-review is the v12 candidate of compact-sitting.
|
|
It preserves all v11 exact mandates and adds generated state-hub / decision-record
|
|
sets from the candidate intake registry. The deployed v11 directory/values remain
|
|
unchanged rollback references. New records are admitted by verified attributes,
|
|
not ids. Consumer checks the live Approval Engine requester/human-control and pin.
|
|
28 embedded tests and four fixtures pass; policy pins are checked by Go tests.
|
|
|
|
## Produce a scanned immutable policy image and deployment proposal
|
|
|
|
```task
|
|
id: FLEX-WP-0033-T03
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "fec0c5ea-50b0-5c25-a709-11e073cfc570"
|
|
```
|
|
|
|
The inherited production binary failed its HIGH/CRITICAL scan (25 findings in Go,
|
|
OPA and telemetry). Fix dependency/build pins, run full engine regression, rebuild,
|
|
scan and retain immutable image/package pins. Render the separate lifecycle PDP
|
|
and v12 review proposal. CARING remains advisory as in deployed review packages;
|
|
no new claim of signed attribution or complete production close-down.
|
|
|
|
## Approved policy deployment and native verification
|
|
|
|
```task
|
|
id: FLEX-WP-0033-T04
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "9d275270-1521-5635-bf46-e451292534e5"
|
|
```
|
|
|
|
Part of the concrete INFD-WP-0007 rollout approval. Verify actual consumer caller
|
|
TokenReview and positive/negative lifecycle/human review behavior. No agent binds.
|
|
Retain v11 rollback while preserving decisions and audit evidence. Do not mark
|
|
finished while live acceptance or security findings remain open.
|
|
|
|
|
|
## Published candidate evidence — 2026-10-04
|
|
|
|
Patched Go 1.26.7, OPA 1.4.0 and telemetry SDK 1.43.0; pinned builder/runtime
|
|
images and aligned CI setup with go.mod. Full engine tests, race-enabled tests and vet pass. Both
|
|
container-loaded policy packages validate; review has 28 tests/four fixtures.
|
|
Actual consumer-to-PDP tests pass after rebuilding this binary.
|
|
|
|
Published image:
|
|
forgejo.coulomb.social/coulomb/flex-auth@sha256:f6ed8af69af766d7e9498465a23c292d91185b79352065736a2132216aac1d37
|
|
|
|
HIGH/CRITICAL scan: zero findings, retained under
|
|
docs/evidence/2026-10-04-infd-lifecycle/. Candidate Helm values passed server
|
|
dry-run for both PDPs (12 objects); no cluster state changed. Full review packet
|
|
and migration/recovery procedure are in informed-decision deploy/lifecycle.
|
|
|
|
The existing chart's port-only API egress, advisory CARING dimensions and unsigned
|
|
consumer assertions are explicitly retained limitations, not newly enforced
|
|
controls. T04 remains open; requester projection and State Hub production
|
|
forwarding also remain prerequisites in their owner workplans.
|
|
|
|
|
|
Forgejo run 316 built committed source d2d0b6f. Final candidate values now pin
|
|
forgejo.coulomb.social/coulomb/flex-auth@sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99
|
|
This supersedes the local candidate above for rollout. Both embedded packages
|
|
validate in the CI artifact. No deployed values or cluster objects changed.
|
|
|
|
## Native deployment — 2026-10-05
|
|
|
|
Founder-approved cutover installed lifecycle Helm release revision 1 and upgraded
|
|
sitting release to revision 12 using CI image bdac62bc. Native consumer checks
|
|
authorize selected State Hub lifecycle operations and refuse missing/crossed
|
|
audience and unregistered same-audience callers. Two records and a revision
|
|
retain unchanged image/config/package pins; audit delivery is settled.
|
|
Human review of approval 22b30fe7-c565-46f2-8193-d8875975ad9e remains pending;
|
|
T04 stays open for that native human evidence.
|
|
|
|
## Native human acceptance — 2026-10-05
|
|
|
|
The platform-root human opened the retained review, acknowledged its required
|
|
highlight and accepted at 2026-10-04T22:17:19Z (00:17:19 Europe/Berlin).
|
|
Approval Engine 22b30fe7-c565-46f2-8193-d8875975ad9e has a confirmed human entry,
|
|
linked to presentation pres-484c0ef3-0a87-4dbf-aa30-05fd21e19c91 and source
|
|
infd-20261005-lifecycle-production-proof revision 2. Independent Audit Core
|
|
reconciliation matches with pending 0. The selected workload retrieves that
|
|
confirmed outcome. No agent bound or consumed.
|
|
|
|
Initial scope complete. Broader browser/discovery profiles remain with the live
|
|
INFD-WP-0007-T02/T05 work records; no new caller or public delegation is admitted.
|
|
Root receipts: informed-decision/docs/evidence/2026-10-05-lifecycle-cutover/.
|