tegwick
d8aaa91f4c
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
63 lines
2.5 KiB
Markdown
63 lines
2.5 KiB
Markdown
---
|
|
id: FLEX-WP-0034
|
|
type: workplan
|
|
title: "Named-recipient discovery for lifecycle reviews"
|
|
domain: infotech
|
|
repo: access-engine
|
|
status: finished
|
|
owner: codex
|
|
topic_slug: netkingdom
|
|
created: "2026-10-05"
|
|
updated: "2026-10-05"
|
|
origin: demand
|
|
origin_ref: INFD-WP-0007-T05
|
|
state_hub_workstream_id: "a3b751be-b5e4-56e5-bfcf-241d05e9a0ba"
|
|
---
|
|
|
|
## Implement and verify recipient-scoped list admission
|
|
|
|
```task
|
|
id: FLEX-WP-0034-T01
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "c70d193a-6fa8-5aef-8942-2ceaef13e4a9"
|
|
```
|
|
|
|
Compact-sitting v13 extends the admitted lifecycle attribute branch to list.
|
|
It requires the carried immutable review recipient to equal the authenticated
|
|
human subject, existing class/submitter/group admission and live native approval
|
|
checks in the consumer. Existing exact records retain precedence. Listing uses
|
|
the existing twelve-hour assurance window; read/acts retain fifteen minutes.
|
|
32 embedded policy tests and owner InformedDecision regressions pass. Consumer
|
|
integration covers list/read separation, another recipient and engine outage.
|
|
Attribution remains unsigned; no new control claim is made.
|
|
|
|
## Release through the owning Helm workflow
|
|
|
|
```task
|
|
id: FLEX-WP-0034-T02
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "4934d3ad-adb7-5fc9-aa39-5d1626420b46"
|
|
```
|
|
|
|
Founder requested deploying the authoring increment and implementing the rest of
|
|
INFD-WP-0007. Authority for its continuation: ADMINISTER @
|
|
realm:kubernetes/railiance01, activation=APPROVED. Build immutable owner artifact,
|
|
scan, dry-run/diff, then update the existing review Helm release. The consumer's
|
|
pinned version/digest must match. Retain the previous artifact/config as rollback.
|
|
No anonymous publication, additional workload identity or non-approval bind is
|
|
admitted by this change.
|
|
|
|
## Native release verified — 2026-10-05
|
|
|
|
Owner CI image 6c6dc263 (source f234d01) has zero HIGH/CRITICAL scan findings.
|
|
Server dry-run and namespace-correct client diff showed only the image change.
|
|
Helm release flex-auth-informed-decision-sitting revision 13 deployed with
|
|
--atomic. Consumer Argo source 9207a51 pins matching v13 digest 31be5985 and
|
|
service image 7f5c6cb2. Both are healthy. Native authenticated service-caller
|
|
replay of retained human claims permits recipient list, denies a different
|
|
recipient, and refuses read with stale original assurance. No fresh human login
|
|
or disposition is claimed. Evidence is retained in informed-decision
|
|
/docs/evidence/2026-10-05-lifecycle-discovery/. No residual for this scoped owner
|
|
workplan; broader profile expansion belongs to INFD-WP-0008.
|