coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Accept native Qonto sender admission and hourly receiver registration
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
tegwick 2026-10-15 21:41:46 +02:00
parent 1269a0efc6
commit 2e97f37c01
10 changed files with 323 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

41
workplans/AUDIT-WP-0013-cross-repo-sender-admission.md
View file

@ -78,10 +78,8 @@ Optional stream_instance_id on GET /v1/reconciliation selects exact retained det
```task
id: AUDIT-WP-0013-T05
status: wait
status: done
priority: high
blocking_reason: "rapp-qonto must supply the actual collector binding, scope/selectors, mapping/lag rules and receiver receipts; qonto-assistant must approve classification and per-class cadence."
blocked_on: message-from:rapp-qonto
state_hub_task_id: "76b59808-abc3-5b8d-b31a-e3fb611f2cbe"
```
@ -98,5 +96,38 @@ and process-instance filtering; database migration ledger is0006, source adds
additive0007-import-receipts. Current-source receiver release/migration is therefore
required before registration acceptance. See docs/cadence-registration.md for
execution gates. No protected registry was fetched or changed, no sender token
was minted and no live resource was mutated by this readiness work. T05 stays
wait pending source delivery and actual native custody/mapping receipts.
was minted and no live resource was mutated by this readiness work. The readiness note above describes the initial state; the native admission
follow-up below supersedes that T05 waiting state.
### Native Qonto receiver admission accepted, 2026-10-15
T05 is done for sender-native custody and mapping admission. Independent
KG-WP-0005-T03 operational acceptance is deliberately separate and remains open.
The protected registry CAS advanced15→16 with exact readback, preserving every
existing sender/credential/scope and unrelated KV field. Approval Engine's full
source declaration SHA256cc58c8d53ebf50acf540d73b7607d579942bda7734c3e8722108e9c9204af655
and issuance/use/supersession/revocation waits7200 are delivered and loaded after
receiver reload. Effective deadline is10800 with grace1.5; this registration
receipt is not yet evidence of four fresh Approval heartbeat observations.
Receiver b479801b (built from5227fb1) is ready with native cadence/heartbeat and
both-backend process-instance capabilities verified. Migration0007 completed
after the narrow DNS/PostgreSQL migration egress repair (source1269a0e). The
complete local PostgreSQL suite passed333 tests with no skips or failures.
Actual collector image82bfd410 captured source qonto-assistant in approved tenant
tenant:friendly:binky. Instanceb351fa6b-e0d6-4f88-b7c9-6bacb1a112b7 has original
sequence1 audit.heartbeat mapped one-to-one to audit-core.heartbeat covering
audit.deny and sequence2 audit.deny; both accepted202. Same-instance own
reconciliation returns one of each, duplicate200, wrong source400, wrong
tenant400, archive read403 and invalid bearer401. Pending queue0; first202
receipts survived collector pod replacement using its persistent outbox.
Audit.allow mapping/classification remains source-tested; no native allow
record or bank operation is claimed by this bounded receipt.
Exact metadata receipts and SHA256 index are retained in
docs/evidence/2026-10-15-cadence-admission/. These are native sender receipts,
not independent receiver readback. Real elapsed hourly observation, independent
active-instance/class-silence/sequence/count/lag assessment and Approval lifecycle
acceptance remain with NK-WP-0035/KG-WP-0005. Source-global receiver findings must
not misclassify intentional Qonto scale-to-zero as an active-instance omission.