Values (direct edit; not applied): sitting release -> CI image main-2de0f86
sha256:154726d25ba2ce88ef41551dcb3bb395557095eff19e767a29d0331fafec4776 and the
v14 policy path; access-engine twin regenerated for this pin only. The image's
policy directory is byte-identical to 2de0f86 and its package digest is
sha256:8911458f...0fde. Image in force per FLEX-WP-0034 rev 13 is 6c6dc263
(v13); rollback values are values/informed-decision-lifecycle-review.candidate.yaml.
Scan: the same four Go 1.26.7 stdlib HIGH CVEs as the image in force (founder
gate in the runbook). Runbook: docs/compact-sitting-v14-release-runbook.md,
coordinated with informed-decision's v14 pin.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
44 lines
1.2 KiB
JSON
44 lines
1.2 KiB
JSON
{
|
|
"id": "v14-verify-self-approval",
|
|
"tenant": "tenant:platform",
|
|
"subject": {
|
|
"id": "service:nk-bind-executor",
|
|
"type": "human",
|
|
"tenant": "tenant:platform",
|
|
"attributes": {
|
|
"principal_type_source": "authentication-derived",
|
|
"tenant_source": "registration-supplied",
|
|
"groups": [
|
|
"net-kingdom-admins"
|
|
],
|
|
"assurance": {
|
|
"level": "aal2",
|
|
"mfa": true,
|
|
"source": "key-cape",
|
|
"methods": [
|
|
"pwd",
|
|
"otp"
|
|
],
|
|
"at": 0
|
|
}
|
|
}
|
|
},
|
|
"resource": {
|
|
"id": "memo:v14-release-verify",
|
|
"type": "decision-memo",
|
|
"system": "informed-decision",
|
|
"tenant": "tenant:platform"
|
|
},
|
|
"action": "read",
|
|
"context": {
|
|
"review_group": "net-kingdom-admins",
|
|
"memo_class": "bounded-execution",
|
|
"intake_submitter": "nk-bind-executor",
|
|
"approval_requester": "service:nk-bind-executor",
|
|
"approval_human_control": true,
|
|
"approval_action": "bounded-execution",
|
|
"memo_version": 1,
|
|
"approval_id": "00000000-0000-4000-8000-000000000014",
|
|
"approval_binding_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
|
|
}
|
|
}
|