Preserve fractional approval expiry through atomic consumption

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786

workplans/APPROVAL-WP-0006-fractional-consumption-time.md

@@ -0,0 +1,65 @@
+---
+id: APPROVAL-WP-0006
+type: workplan
+title: "Preserve fractional authoritative approval and consumption time"
+domain: infotech
+repo: approval-engine
+status: active
+flavor: implementation
+owner: codex
+topic_slug: netkingdom
+created: "2026-10-16"
+updated: "2026-10-16"
+depends_on: []
+---
+
+Explicit CUST-WP-0080 precision defect demand: actual clock .750 was rounded to
+.000, accepting consume beyond a .500 expiry and recording evidence earlier than
+the actual signed decision. INTENT basis: valid right now, exact-bound atomic
+consumption and faithful source evidence. Fix source time, not Access backdating
+or a consumer waiver. This does not promote native issuer/deployment authority.
+
+## Preserve clock precision and one post-lock consumption instant
+
+```task
+id: APPROVAL-WP-0006-T01
+status: done
+priority: high
+```
+
+Preserve aware UTC microseconds through clock/ISO formatting. After acquisition
+of the SQLite consume lock, sample one time for validity, stored consumption
+receipt/update and use-event occurrence. Preserve old second-precision rows,
+original idempotent receipt/decision and local transactional atomicity.
+
+Seven added regressions: baseline five failed/two passed; repaired 89 focused
+checks pass. Full source suite: 298 passed, one pre-existing deployment pin vs
+historical release-evidence mismatch retained. One initial test attempted issue
+after expiry and was corrected to issue before expiry, then advance the clock;
+the repaired source correctly refused that expired setup. Source change needs no
+schema migration and preserves old rows/idempotent timestamps exactly.
+
+## Review temporal source successor and hand off independently pinned repair
+
+```task
+id: APPROVAL-WP-0006-T02
+status: progress
+priority: high
+```
+
+Supply exact patch/test/source review evidence for coordinator integration and
+Access/Secrets immediate strict CAS remeasurement. Review only Approval facts,
+normalized preapproval correspondence and temporal bounds on the exact successor
+source. Existing WP0005 closure/R1 review remain historical; native issuer,
+audit receiver, served-PEP/CAS/effect and cleanup gates remain WP0002 T01/T04/T05
+and the existing Access/Secrets/Platform records. No native gate is closed here.
+
+Source owner review and handoff are prepared in
+`docs/reviews/2026-10-16-fractional-consumption-temporal-approval-owner-review.json`.
+Standalone repair patch is frozen separately from the Access R3 fact review;
+89 focused source checks and 298 full checks pass, with one known image-evidence
+mismatch. Access precise NotBefore remains unchanged and original claim freshness
+is never renewed. Exact R3 normalized-preapproval/temporal source review covers
+Approval facts only; native freshness120 configuration is not granted. Independent
+integration/publication and actual immediate strict CAS successor remeasurement
+remain pending coordinator/consumer evidence, not a reason to backdate or waive.