coulomb/approval-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
approval-engine/docs
History
tegwick e9e9f93317 APPROVAL-WP-0007-T01 done: required_assurance floor; executor ingress; alignment answer 
- Optional required_assurance {"level": aal1|aal2|aal3} at issue, schema v7.
  Enforced at add_entry (403), claim (assurance_unsatisfied) and consume (409)
  from the verified token level only; inherited on supersession; legacy rows
  NULL. Served only when declared so undeclared claims keep exact bytes.
- deploy/networkpolicies.yaml: pod-scoped ingress for sso +
  app.kubernetes.io/name=bounded-executor on 8080 (hub 39a3bffa). Not applied.
- docs/decision-services-alignment-answer.md: owner answer to the NetKingdom
  decision services review (hub 81cafbf3): roles accepted, T02 split proposed,
  presentation_ref at create declined with an entry-level counter-proposal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-10-31 23:07:05 +01:00
..
evidence Deploy approval service and verify native persistence and audit 2026-09-14 01:08:50 +02:00
reviews Preserve fractional approval expiry through atomic consumption 2026-10-16 17:35:53 +02:00
access-claim-fact-reader.md Add producer-owned Go approval fact validation and canonical vectors 2026-10-16 16:25:54 +02:00
approval-claim.md APPROVAL-WP-0007-T01 done: required_assurance floor; executor ingress; alignment answer 2026-10-31 23:07:05 +01:00
approval-consumption.md Preserve fractional approval expiry through atomic consumption 2026-10-16 17:35:53 +02:00
approver-surface-requirements.md Retain verified tenant provenance and reconcile production blockers 2026-10-04 11:26:32 +02:00
audit-source-registration.md Derive heartbeat cadence from the shared coordination frame 2026-10-15 20:41:49 +02:00
bounded-execution-admission-carrier.md APPROVAL-WP-0007-T01 done: required_assurance floor; executor ingress; alignment answer 2026-10-31 23:07:05 +01:00
caller-authentication.md Retain verified tenant provenance and reconcile production blockers 2026-10-04 11:26:32 +02:00
decision-services-alignment-answer.md APPROVAL-WP-0007-T01 done: required_assurance floor; executor ingress; alignment answer 2026-10-31 23:07:05 +01:00
emission-cadence.md Derive heartbeat cadence from the shared coordination frame 2026-10-15 20:41:49 +02:00
flex-auth-handoff.md Finish approval engine spine 2026-09-01 23:45:48 +02:00
gate-house-decision-request-claim-envelope.md chore(consistency): record decision id for GH-DEC-2026-005 2026-09-06 08:05:00 +02:00
image-scan-2026-09-06.md Reconcile the release record; guard the image pin with tests 2026-09-07 09:04:34 +02:00
keycape-service-registrations.md Record the approval-engine coordination follow-up. 2026-10-23 15:43:26 +02:00
outbox-contract.md fix(audit): retain authenticated consume identity and exact binding 2026-10-16 07:51:39 +02:00
pep-integration.md Harden the PEP harness and KeyCape registration request 2026-09-02 15:46:06 +02:00
production-dependencies.md Derive heartbeat cadence from the shared coordination frame 2026-10-15 20:41:49 +02:00
storage-operations.md Retain verified tenant provenance and reconcile production blockers 2026-10-04 11:26:32 +02:00
t03-review-deployment.md Record T03 review admission and measured CPU request 2026-09-14 02:47:31 +02:00
task-execution-consumption-contract.md Bound approval transport and refuse redirects and proxies 2026-10-11 16:45:18 +02:00