From 3a13a05073a00c5d2e3351fcca174a2e9dbfbc63 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 11 Sep 2026 16:35:14 +0200 Subject: [PATCH] Accept independent readback of both native factory sender probes Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc --- .../2026-09-11-factory-native-readback.json | 45 +++++++++++++++++++ ...AUDIT-WP-0009-evidence-role-conformance.md | 34 +++++++++++--- 2 files changed, 73 insertions(+), 6 deletions(-) create mode 100644 docs/evidence/2026-09-11-factory-native-readback.json diff --git a/docs/evidence/2026-09-11-factory-native-readback.json b/docs/evidence/2026-09-11-factory-native-readback.json new file mode 100644 index 0000000..4303045 --- /dev/null +++ b/docs/evidence/2026-09-11-factory-native-readback.json @@ -0,0 +1,45 @@ +{ + "schema": "hfact.native-audit-readback-return.v1", + "observed_at": "2026-09-11T13:11:08.775531+00:00", + "owner_receipt": "railiance-platform/docs/evidence/2026-09-11-factory-native-readback.json", + "owner_receipt_sha256": "f8fc818b23759192eb0633b28f147d4501a271f3c55499c4f44343f36844e0da", + "status": "native_producer_delivery_verified_pending_bearer_revocation_and_service_admission", + "reader": "operator", + "registry_version": 8, + "events": [ + { + "event_id": "factory-audit-20260911104152-94aced-approval-engine", + "accepted_at": "2026-09-11T10:42:19+00:00", + "source": "approval-engine", + "tenant": "tenant:platform", + "synthetic": true + }, + { + "event_id": "factory-audit-20260911104152-94aced-informed-decision", + "accepted_at": "2026-09-11T10:42:20+00:00", + "source": "informed-decision", + "tenant": "tenant:platform", + "synthetic": true + } + ], + "integrity": { + "intact": true, + "events": 36, + "head": "ec50d25a1298a83ed1b82ede473ebd792acf6e2b3e78b13d19df958717d3fb83", + "head_event_id": "factory-audit-20260911104152-94aced-informed-decision", + "head_accepted_at": "2026-09-11T10:42:20+00:00", + "first_break": null, + "attestation_match": null + }, + "attended_execution": { + "wrapper_exit_code": 0, + "session_self_revocation_confirmed": true, + "private_helper_cleanup_confirmed": true, + "earlier_failed_session_revocation_resolved": false + }, + "credential_values_emitted": false, + "audit_bearer_revocation_tested": false, + "producer_services_admitted": false, + "factory_attempts": 0, + "paid_model_calls": 0 +} diff --git a/workplans/AUDIT-WP-0009-evidence-role-conformance.md b/workplans/AUDIT-WP-0009-evidence-role-conformance.md index 7cd5be8..2676b30 100644 --- a/workplans/AUDIT-WP-0009-evidence-role-conformance.md +++ b/workplans/AUDIT-WP-0009-evidence-role-conformance.md @@ -288,11 +288,12 @@ priority: high state_hub_task_id: "fd4a4ac3-e525-57c1-9179-e0fcd0226913" ``` -**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery, +**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery, source-adapter accepted write, duplicate-after-process-restart, exact scope/read refusals and own reconciliation count one passed. Independent archive readback -and audit bearer revocation remain; service/domain-transaction/human operation -is separate. See the retained native producer receipt and attempt history below. +also passed at 13:11 UTC: both retained events have exact source/tenant and the +36-event chain is intact. Audit bearer revocation remains; service/domain- +transaction/human operation is separate. See the dated readback return below. Register `approval-engine` as a distinct source under §9.4 and `AUDIT-IN-0001`: sender registration, the four event classes (issuance, use, supersession, @@ -399,11 +400,12 @@ priority: high state_hub_task_id: "96e0cbd5-e3ce-5807-8f64-41244671327b" ``` -**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery, +**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery, source-adapter accepted write, duplicate-after-process-restart, exact scope/read refusals and own reconciliation count one passed. Independent archive readback -and audit bearer revocation remain; service/domain-transaction/human operation -is separate. See the retained native producer receipt and attempt history below. +also passed at 13:11 UTC: both retained events have exact source/tenant and the +36-event chain is intact. Audit bearer revocation remains; service/domain- +transaction/human operation is separate. See the dated readback return below. Register `informed-decision` as a distinct load-bearing source under `AUDIT-IN-0003`, and answer the doctrine question `GH-DEC-2026-014` put to @@ -616,3 +618,23 @@ a copy independent of the cluster and Barman data. Record the operating owner, cadence and failure handling there; no Nextcloud credential belongs in the receiver. Until that return exists, describe an in-cluster attestation as a database-owner boundary only. Do not relabel the source-complete T02 as undone. + + +## Independent audit readback — 2026-09-11 13:11 UTC + +The existing attended readback command completed with exit 0 while the user +was present. Independent read-only identity `operator` found both retained +`factory-audit-20260911104152-94aced` producer events with exact source and +`tenant:platform`; receiver integrity is intact across 36 events. The wrapper +confirmed this session's self-revocation and private-helper cleanup. Prior +failed sessions' unconfirmed revocation remains historical unresolved evidence. + +This supersedes the earlier readback-login wait. No producer jobs were rerun, +no credentials were reseeded and no event was written by the reader. The +inherited zero registry-read count belongs to the producer phase; the attended +reader did consume registry version 8. CCR21/22 stay applied and owner tasks +stay progress pending formerly-valid audit-bearer revocation acceptance. +Service/domain-transaction/human and factory runtime/spend admission remain +separate; factory attempts and paid model calls remain zero. + +Receipt: [native readback](../docs/evidence/2026-09-11-factory-native-readback.json).