access-engine/workplans/FLEX-WP-0027-t03-human-review.md

id	type	title	domain	repo	status	flavor	owner	topic_slug	created	updated	state_hub_workstream_id
FLEX-WP-0027	workplan	Admit scoped human review for the three T03 actions	infotech	flex-auth	finished	implementation	codex	netkingdom	2026-09-14	2026-10-04	954635b2-8377-5227-ab4f-10607b2a02c6

Implement the explicit group and exact-record mandate

id: FLEX-WP-0027-T01
status: done
priority: high
state_hub_task_id: "7b5af88b-2630-5f94-a085-78180690e08c"

The operator admitted net-kingdom-admins for the three T03 reviews only. examples/informed-decision-t03 pins record IDs, versions and native bindings. Fresh verified KeyCape MFA and groups are mandatory. 57 evaluator checks pass. Reproduce with python3 tools/exercise_t03_review_policy.py --binary /path/to/flex-auth --receipt /tmp/t03-checks.json.

Deploy the isolated caller-bound policy

id: FLEX-WP-0027-T02
status: done
priority: high
state_hub_task_id: "129568a0-cb1c-5f7b-8f5d-f44f1d2bcfff"

values/informed-decision-t03.yaml pins the live image and policy. TokenReview admits only system:serviceaccount:informed-decision:review. Six native caller checks pass with synthetic identities; evidence is retained in docs/evidence.

Verify actual human review through the native service

id: FLEX-WP-0027-T03
status: done
needs_human: false
priority: high
state_hub_task_id: "9417d64a-308c-566f-af29-217c5c45d294"
decision_id: "e1868a8d-cad7-48c6-84d1-78a5a566d4a4"

Wait for the operator's exact signed-in account, then address the three memos and verify actual human acknowledgements/entries. Synthetic policy checks are not acceptance evidence. SECRETS-WP-0010-T03 retains live consume and execution.

2026-09-27: no operator sign-in has occurred yet. This is the only remaining task and it is irreducibly a human action (the operator's own signed-in account exercising the review), so the workplan is marked blocked rather than active until that happens.

2026-10-04 CUST-WP-0075 owner routing: FLEX-WP-0027-T03 remains a human wait under open decision e1868a8d-cad7-48c6-84d1-78a5a566d4a4. Exact scoped human act and native receipts remain required; this metadata records no approval or execution.

2026-10-04 owner-evidence review: the historical wait above is superseded. SECRETS-WP-0010-T03 is done; its 2026-09-16 completion record explicitly records real human acceptance of all three renewed version-2 memos. The native receipt retains actor worsch, approved human-controlled CAS consumption and decision/request bindings for apply, verify and exec; all three approvals are consumed. Reviewed receipt hash and action references are retained in docs/evidence/2026-10-04-t03-owner-completion-review.json. This closes the original scoped review task and finishes this workplan without new execution. The version-3 records now in examples/informed-decision-t03/records.json serve the next IR-WP-0005-T02 cycle; they do not reopen this original task or permit reuse of the consumed approvals. The old decision link is retained as history, not a claim that the later human decision has been answered.