From 297e866e2cfcdf546e3d68ff3cea60e4a37fcae2 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Fri, 23 Oct 2026 15:49:46 +0200
Subject: [PATCH] Declare the live release units for this owner.

The claims name the workloads covered by RELREG-WP-0004. Each pin is a digest the live object already shows.

Assistant: grok
Assistant-Session: 01a16880-25e0-7031-b553-a1e0321ff397
---
 registry/release-units/approval-engine.yaml | 46 +++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 registry/release-units/approval-engine.yaml

diff --git a/registry/release-units/approval-engine.yaml b/registry/release-units/approval-engine.yaml
new file mode 100644
index 0000000..06195ff
--- /dev/null
+++ b/registry/release-units/approval-engine.yaml
@@ -0,0 +1,46 @@
+# No owner classification file. Recorded confidential/high for this wave.
+kind: release-unit
+unit_id: approval-engine
+owner: approval-engine
+contract_version: 1.0.0
+data_classification: confidential
+criticality: high
+composition:
+  purpose: Covers the live approval-engine workloads as one release unit.
+  member_repos:
+  - repo: approval-engine
+    role: rollout owner
+    deployables:
+    - approval-engine
+rollout_contract:
+  default_mode: owner-deploy
+smoke_contract:
+  required:
+  - workload-ready
+rollback_contract:
+  order:
+  - owner-rollback
+workloads:
+- kind: StatefulSet
+  namespace: approval-engine
+  name: approval-engine
+pins:
+  component:
+    name: ocm.railiance.dev/approval-engine
+    version: live
+  resources:
+  - name: approval-engine
+    type: ociImage
+    version: live
+    digest:
+      hashAlgorithm: SHA-256
+      normalisationAlgorithm: ociArtifactDigest/v1
+      value: sha256:16e5d222d58e179f4836f649e8f8128321a8b644d29dc426b4d21a65ff97845d
+  sources:
+  - name: approval-engine
+    type: git
+    version: live
+    digest:
+      hashAlgorithm: SHA-1
+      normalisationAlgorithm: gitCommit/v1
+      value: 01abbe192816fa10a50eb13796480ae1de47db92