access-engine/workplans/FLEX-WP-0034-informed-decision-review-discovery.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	origin	origin_ref	state_hub_workstream_id
FLEX-WP-0034	workplan	Named-recipient discovery for lifecycle reviews	infotech	access-engine	finished	codex	netkingdom	2026-10-05	2026-10-05	demand	INFD-WP-0007-T05	a3b751be-b5e4-56e5-bfcf-241d05e9a0ba

Implement and verify recipient-scoped list admission

id: FLEX-WP-0034-T01
status: done
priority: high
state_hub_task_id: "c70d193a-6fa8-5aef-8942-2ceaef13e4a9"

Compact-sitting v13 extends the admitted lifecycle attribute branch to list. It requires the carried immutable review recipient to equal the authenticated human subject, existing class/submitter/group admission and live native approval checks in the consumer. Existing exact records retain precedence. Listing uses the existing twelve-hour assurance window; read/acts retain fifteen minutes. 32 embedded policy tests and owner InformedDecision regressions pass. Consumer integration covers list/read separation, another recipient and engine outage. Attribution remains unsigned; no new control claim is made.

Release through the owning Helm workflow

id: FLEX-WP-0034-T02
status: done
priority: high
state_hub_task_id: "4934d3ad-adb7-5fc9-aa39-5d1626420b46"

Founder requested deploying the authoring increment and implementing the rest of INFD-WP-0007. Authority for its continuation: ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED. Build immutable owner artifact, scan, dry-run/diff, then update the existing review Helm release. The consumer's pinned version/digest must match. Retain the previous artifact/config as rollback. No anonymous publication, additional workload identity or non-approval bind is admitted by this change.

Native release verified — 2026-10-05

Owner CI image 6c6dc263 (source f234d01) has zero HIGH/CRITICAL scan findings. Server dry-run and namespace-correct client diff showed only the image change. Helm release flex-auth-informed-decision-sitting revision 13 deployed with --atomic. Consumer Argo source 9207a51 pins matching v13 digest 31be5985 and service image 7f5c6cb2. Both are healthy. Native authenticated service-caller replay of retained human claims permits recipient list, denies a different recipient, and refuses read with stale original assurance. No fresh human login or disposition is claimed. Evidence is retained in informed-decision /docs/evidence/2026-10-05-lifecycle-discovery/. No residual for this scoped owner workplan; broader profile expansion belongs to INFD-WP-0008.