approval-engine/workplans/ADHOC-2026-10-16.md
tegwick eece796b8b fix: confirm exact canonical consumed act binding
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
2026-10-16 09:20:33 +02:00

1.9 KiB

id type title domain repo status flavor owner topic_slug created updated
APPROVAL-WP-ADHOC-2026-10-16 workplan Repair exact consume-confirmation native binding comparison infotech approval-engine finished implementation codex netkingdom 2026-10-16 2026-10-16

Refuse Python-equal JSON-distinct consumed act bindings

id: APPROVAL-WP-ADHOC-2026-10-16-T01
status: done
priority: high

Bounded source repair demanded by the CUST-WP-0080 strict execution-seam proof. INTENT basis: exact binding and authenticated consumption evidence; no authority or native grant is added. Existing canonical native-five-field digest is reused. ExecutionConfirmationClient now recomputes the served and expected digests and requires the served digest field to correspond, replacing Python dict equality which accepted nested True/1, False/0 and integer/float substitutions.

Before repair seven regression cases wrongly confirmed (four target type substitutions and three absent/wrong/type-invalid served digest fields); valid nested types with reordered keys passed. The repair retains this failure history. Twelve added regression cases cover exact native JSON correspondence, including substitutions with both retained and recomputed served digests, without changing the native digest algorithm, request/PDP digest contract or API schema. Canonical integration/publication and the Platform mediator's final provider client source pin remain with the coordinator; preparation does not claim them.

Existing APPROVAL-WP-0004 closure and generated identifiers are untouched. APPROVAL-WP-0002-T01/T04/T05 remain existing live native acceptance obligations; none is promoted or completed here. No production auth, approval mutation, credential, deployment or backend operation was used. This completed low-risk local source repair introduces no residual native obligation beyond those existing records and the coordinator's integration of this exact artifact.