coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Accept independent readback of both native factory sender probes
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-11 16:35:14 +02:00
parent a400b9d3da
commit 3a13a05073
2 changed files with 73 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

45
docs/evidence/2026-09-11-factory-native-readback.json Normal file
View file

@ -0,0 +1,45 @@
{
"schema": "hfact.native-audit-readback-return.v1",
"observed_at": "2026-09-11T13:11:08.775531+00:00",
"owner_receipt": "railiance-platform/docs/evidence/2026-09-11-factory-native-readback.json",
"owner_receipt_sha256": "f8fc818b23759192eb0633b28f147d4501a271f3c55499c4f44343f36844e0da",
"status": "native_producer_delivery_verified_pending_bearer_revocation_and_service_admission",
"reader": "operator",
"registry_version": 8,
"events": [
{
"event_id": "factory-audit-20260911104152-94aced-approval-engine",
"accepted_at": "2026-09-11T10:42:19+00:00",
"source": "approval-engine",
"tenant": "tenant:platform",
"synthetic": true
},
{
"event_id": "factory-audit-20260911104152-94aced-informed-decision",
"accepted_at": "2026-09-11T10:42:20+00:00",
"source": "informed-decision",
"tenant": "tenant:platform",
"synthetic": true
}
],
"integrity": {
"intact": true,
"events": 36,
"head": "ec50d25a1298a83ed1b82ede473ebd792acf6e2b3e78b13d19df958717d3fb83",
"head_event_id": "factory-audit-20260911104152-94aced-informed-decision",
"head_accepted_at": "2026-09-11T10:42:20+00:00",
"first_break": null,
"attestation_match": null
},
"attended_execution": {
"wrapper_exit_code": 0,
"session_self_revocation_confirmed": true,
"private_helper_cleanup_confirmed": true,
"earlier_failed_session_revocation_resolved": false
},
"credential_values_emitted": false,
"audit_bearer_revocation_tested": false,
"producer_services_admitted": false,
"factory_attempts": 0,
"paid_model_calls": 0
}

34
workplans/AUDIT-WP-0009-evidence-role-conformance.md
View file

@ -288,11 +288,12 @@ priority: high
state_hub_task_id: "fd4a4ac3-e525-57c1-9179-e0fcd0226913"
```
**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery,
**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery,
source-adapter accepted write, duplicate-after-process-restart, exact scope/read
refusals and own reconciliation count one passed. Independent archive readback
and audit bearer revocation remain; service/domain-transaction/human operation
is separate. See the retained native producer receipt and attempt history below.
also passed at 13:11 UTC: both retained events have exact source/tenant and the
36-event chain is intact. Audit bearer revocation remains; service/domain-
transaction/human operation is separate. See the dated readback return below.
Register `approval-engine` as a distinct source under §9.4 and `AUDIT-IN-0001`:
sender registration, the four event classes (issuance, use, supersession,
@ -399,11 +400,12 @@ priority: high
state_hub_task_id: "96e0cbd5-e3ce-5807-8f64-41244671327b"
```
**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery,
**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery,
source-adapter accepted write, duplicate-after-process-restart, exact scope/read
refusals and own reconciliation count one passed. Independent archive readback
and audit bearer revocation remain; service/domain-transaction/human operation
is separate. See the retained native producer receipt and attempt history below.
also passed at 13:11 UTC: both retained events have exact source/tenant and the
36-event chain is intact. Audit bearer revocation remains; service/domain-
transaction/human operation is separate. See the dated readback return below.
Register `informed-decision` as a distinct load-bearing source under
`AUDIT-IN-0003`, and answer the doctrine question `GH-DEC-2026-014` put to
@ -616,3 +618,23 @@ a copy independent of the cluster and Barman data. Record the operating owner,
cadence and failure handling there; no Nextcloud credential belongs in the
receiver. Until that return exists, describe an in-cluster attestation as a
database-owner boundary only. Do not relabel the source-complete T02 as undone.
## Independent audit readback — 2026-09-11 13:11 UTC
The existing attended readback command completed with exit 0 while the user
was present. Independent read-only identity `operator` found both retained
`factory-audit-20260911104152-94aced` producer events with exact source and
`tenant:platform`; receiver integrity is intact across 36 events. The wrapper
confirmed this session's self-revocation and private-helper cleanup. Prior
failed sessions' unconfirmed revocation remains historical unresolved evidence.
This supersedes the earlier readback-login wait. No producer jobs were rerun,
no credentials were reseeded and no event was written by the reader. The
inherited zero registry-read count belongs to the producer phase; the attended
reader did consume registry version 8. CCR21/22 stay applied and owner tasks
stay progress pending formerly-valid audit-bearer revocation acceptance.
Service/domain-transaction/human and factory runtime/spend admission remain
separate; factory attempts and paid model calls remain zero.
Receipt: [native readback](../docs/evidence/2026-09-11-factory-native-readback.json).