APPROVAL-WP-0007: record the verified revoker and park the inactive plans
Schema v9 stores who revoked an approval and an optional bounded reason. The bounded-execution carrier example is proven in process. APPROVAL-WP-0005, 0006, and 0007 are blocked because they are not current work. Task statuses stay as they were, apart from T03 and T04, which are done in source. Assistant: grok Assistant-Session: 01a1b5fd-0c33-7ba1-b383-53937d525595
This commit is contained in:
parent
f41a9ca82c
commit
4aa0b75449
17 changed files with 599 additions and 36 deletions
|
|
@ -27,10 +27,11 @@ provenance. The prior v5 image was
|
|||
`sha256:251941a5cb2724b57cc32cff6b693b1ab0be695bee4f56f02d51961189c0fa49`.
|
||||
It refuses a v6 store: rollback requires the matching verified pre-v6 backup
|
||||
and the stopped-single-writer restore procedure in `docs/storage-operations.md`.
|
||||
Source has since moved to schema v8 (v7 `approvals.required_assurance`,
|
||||
APPROVAL-WP-0007-T01; v8 `approvals.actor_consumes`, APPROVAL-WP-0007-T02); the
|
||||
pinned image predates schema v8 (and v7). Deploying needs a new release, a
|
||||
verified pre-v7 backup and a founder-run rollout like the v6 one.
|
||||
Source has since moved to schema v9 (v7 `approvals.required_assurance`,
|
||||
APPROVAL-WP-0007-T01; v8 `approvals.actor_consumes`, APPROVAL-WP-0007-T02;
|
||||
v9 `revoked_by_*`, APPROVAL-WP-0007-T03); the pinned image predates schema v9
|
||||
(and v7). Deploying needs a new release, a verified pre-v7 backup and a
|
||||
founder-run rollout like the v6 one.
|
||||
|
||||
The earlier September v5 release evidence remains historical at
|
||||
[the image evidence](../docs/evidence/2026-09-10-human-control-image.json).
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue