Bound approval transport and refuse redirects and proxies

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 16:45:18 +02:00
parent 2eb045bfbf
commit b428ffecb1
8 changed files with 552 additions and 16 deletions

View file

@ -133,3 +133,24 @@ identity, credential custody, transport/server identity and ingress admission ar
unproved. Fresh claim/PDP validation, returned original consumption tuple and a
separate live one-shot execution journal remain mandatory. Existing adoption/
native obligations retain their owners/statuses; no residual is promoted.
## Formal T02 transport source review after persisted preparation
The approval-engine owner worker reviewed the exact unchanged T02 staged sources
from the actual owner checkout after commit
2eb045bfbfab08ce3a642d6f0ee3800af1151873 persisted its completed source-preparation
anchor (SHA256 3e09a565dca3b7ffcff8bed209e39f56a158dcaa63945007a096f244b9d86088).
Decision: approved for bounded source repair only. Review entry:
`docs/reviews/2026-10-11-confirmation-transport-repair-owner-review.md`.
The original T01 review, redirect failure, T02 preparation outcome, task statuses
and generated identifiers remain unchanged; this is a refinement of the same
bounded repair, not another claimed success.
Exact reviewed sources/tests/contract and limitations are pinned in that entry.
Default transport is the reviewed fixed child; injected opener remains solely
an owner-controlled test seam and is not admitted authoritative transport.
No review establishes actual credential path, mediator scope/custody, server
identity/ingress, deployment, native effect, new grant, residual promotion or
adoption closure. Fresh claim/PDP plus original exact consumption and a separate
one-shot journal remain mandatory.