approval-engine/docs
tegwick fec4eaeb1b Hold the pinned image against the repository's schema
Schema v4 gave the deployment a silent drift surface: the pinned pair is
self-consistent, migrating to 3 and serving 3, while this repository has
moved to 4. That reads as healthy, which makes it worse than an error —
the failure is the assumption that the deployment records approver
principal type.

Document v4 in storage-operations, state in the deploy runbook that the
pin predates it, and add a test that requires the statement whenever the
release record's schema version differs from this repository's. Verified
to fail when the acknowledgement is removed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HyybaE7DUXrWYrhbnESCTe

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1275879@bnt-lap001
Assistant-Session: eb464208-f821-41b2-bc5a-a6c33d92a8ad
2026-09-09 14:38:21 +02:00
..
reviews Return the v0.8 text review gate-house asked for 2026-09-07 00:19:40 +02:00
approval-claim.md Publish the valid-but-unbound claim; the missing shape was confounded 2026-09-07 13:48:00 +02:00
approval-consumption.md Record GH-DEC-2026-005; strike the spent G3 revisit trigger 2026-09-06 01:36:03 +02:00
approver-surface-requirements.md Record the verified principal type on approver entries (schema v4) 2026-09-09 14:09:54 +02:00
audit-source-registration.md docs(admission): resolve approval audit tenant and redaction inputs 2026-09-08 17:01:42 +02:00
caller-authentication.md Record the verified principal type on approver entries (schema v4) 2026-09-09 14:09:54 +02:00
emission-cadence.md Implement approval engine production readiness 2026-09-02 00:52:04 +02:00
flex-auth-handoff.md Finish approval engine spine 2026-09-01 23:45:48 +02:00
gate-house-decision-request-claim-envelope.md chore(consistency): record decision id for GH-DEC-2026-005 2026-09-06 08:05:00 +02:00
image-scan-2026-09-06.md Reconcile the release record; guard the image pin with tests 2026-09-07 09:04:34 +02:00
keycape-service-registrations.md Refuse to invent the human approver client_id and callback URI 2026-09-08 14:47:40 +02:00
outbox-contract.md docs(admission): resolve approval audit tenant and redaction inputs 2026-09-08 17:01:42 +02:00
pep-integration.md Harden the PEP harness and KeyCape registration request 2026-09-02 15:46:06 +02:00
storage-operations.md Hold the pinned image against the repository's schema 2026-09-09 14:38:21 +02:00