approval-engine/docs
tegwick a0a602976e Principal is the requesting party, not the approver
informed-decision asked whether its binding.principal and ours name the same
field, since both GH rulings said its slice canonicalizes "two of the five".
They do not: ours is the party on whose behalf the act is performed, taken from
the decision request's subject, while theirs is the approver — which appears
here only as an entry and never in binding. Only target overlaps.

Records the four-role distinction normatively in docs/approval-claim.md and
guards it with a test asserting the act digest is insensitive to the approver
while the approver stays recorded on the entry. Folding approver identity into
the digest would now break view_hash's assumption here rather than silently in
that repository.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QDzGbdDFnVJBxDgdp7RvpH

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2191554@bnt-lap001
Assistant-Session: d69bb7c3-b7b2-41c4-8287-6baef48c0993
2026-09-10 22:43:33 +02:00
..
evidence Publish and pin the verified schema-v5 approval candidate 2026-09-10 19:35:05 +02:00
reviews Return the v0.8 text review gate-house asked for 2026-09-07 00:19:40 +02:00
approval-claim.md Principal is the requesting party, not the approver 2026-09-10 22:43:33 +02:00
approval-consumption.md Record GH-DEC-2026-005; strike the spent G3 revisit trigger 2026-09-06 01:36:03 +02:00
approver-surface-requirements.md Enforce declared human controls at approval binding 2026-09-10 19:26:12 +02:00
audit-source-registration.md Heartbeat per event class, not per source 2026-09-10 20:36:21 +02:00
caller-authentication.md Enforce declared human controls at approval binding 2026-09-10 19:26:12 +02:00
emission-cadence.md Implement approval engine production readiness 2026-09-02 00:52:04 +02:00
flex-auth-handoff.md Finish approval engine spine 2026-09-01 23:45:48 +02:00
gate-house-decision-request-claim-envelope.md chore(consistency): record decision id for GH-DEC-2026-005 2026-09-06 08:05:00 +02:00
image-scan-2026-09-06.md Reconcile the release record; guard the image pin with tests 2026-09-07 09:04:34 +02:00
keycape-service-registrations.md Disable the live operator client, keep its custody 2026-09-10 20:49:36 +02:00
outbox-contract.md docs(admission): resolve approval audit tenant and redaction inputs 2026-09-08 17:01:42 +02:00
pep-integration.md Harden the PEP harness and KeyCape registration request 2026-09-02 15:46:06 +02:00
storage-operations.md Enforce declared human controls at approval binding 2026-09-10 19:26:12 +02:00