Founder decision 2026-11-01, relayed by the net-kingdom coordinator: "Agree to
split APPROVAL-WP-0007-T02: build actor_consumes now (opt-in at issue; the
bounded executor will set it); principal_approves keeps waiting for the KeyCape
subject mapping."
- Optional actor_consumes (boolean) at issue, schema v8. Consume refuses with
403 unless the consuming subject equals binding.actor, also on idempotent
retries; internal calls without a consumer fail closed. Inherited on
supersession (existing-successor mismatch 409), in audit details, served in
GET/claim only when declared so undeclared claims keep exact bytes. Legacy
rows migrate without the flag.
- GH-DEC-2026-026 Ruling 6: under human_control, add_entry refuses (403) the
binding actor as approver. human_control already covered a service actor;
this covers a human actor.
- Workplan: T02 done (actor_consumes); new T05 principal_approves (wait).
- Not released or deployed: needs a v8 image and founder-run rollout.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
tegwick
5c45d3c157