coulomb/approval-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add bounded source reconciliation counts and clarify receiver dependencies

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1046e-fdbf-7b93-a267-5f72b9b24526
This commit is contained in:
tegwick 2026-10-04 11:34:42 +02:00
parent 1044a5f36d
commit 24a5ecd56b
8 changed files with 231 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

28
workplans/APPROVAL-WP-0002-production-readiness-and-consumer-adoption.md
View file

@ -551,7 +551,7 @@ status: wait
flavor: residual
priority: high
blocked_on: message-from:audit-core
blocking_reason: "Sender custody, native synthetic delivery/readback and service deployment are delivered. Await audit-core acceptance of current cadence/class inventory, actual lifecycle drain and same-window reconciliation, class-silence/lag findings and scoped bearer-revocation receipt. Existing AUDIT-WP-0009 implementation is complete and reused."
blocking_reason: "Sender custody, native synthetic delivery/readback and service deployment are delivered. Await audit-core acceptance of current cadence/class inventory, actual lifecycle drain and reconciliation accounting for occurrence/acceptance-time lag, duplicates and boundaries, class-silence/lag findings and scoped bearer-revocation receipt. Existing AUDIT-WP-0009 implementation is complete and reused."
state_hub_task_id: "777a5cf5-c1db-5e07-8de6-ab109db5ccdc"
```
@ -845,3 +845,29 @@ Validation: 181 tests pass, including 12 new signed-HTTP, malformed-claim,
persistent migration/restart and transactional rollback cases. Repository
implementation is complete for these open tasks; native owner acceptance and
the per-change release/rollout gate remain. Workplan stays blocked.
## Bounded reconciliation follow-up — 2026-10-04
Repeated the blocked-task review after c9ad5c2. No new owner admission receipt
arrived. T04 had a reachable source gap: cadence.yaml promised bounded local
counts, but `/v1/cadence` returned only lifetime totals and outbox stats lacked
a time window. Implemented optional explicit since/until on the authenticated
source route, retaining lifetime behavior. A single read snapshot returns
per-class committed/drained/pending occurrence counts and separate local
acknowledgment-window counts, without payloads, identity data or receiver calls.
Receiver contract review exposed a temporal dependency: audit-core counts
acceptance time. Updated the declaration and production dependency requirements
to require lag, duplicate and boundary accounting before comparison; matching
window text does not align occurrence, acknowledgment and acceptance. Corrected
the stale approval.heartbeat alias in docs/outbox-contract.md.
T01/T04/T05 remain wait with their named owner bindings; the workplan remains
blocked after this source work. Release/rollout, receiver acceptance and a served
PEP remain external gates. No production change, packet or other-repo edit.
Validation: full suite 195 passed (14 new bounded-count/API cases); imported
owner cadence schema and NetKingdom profile returned contract_valid,
profile_assessed and conformant true with zero findings. git diff --check
passed. No remaining local implementation was identified in this review.