coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Accept independent readback of both native factory sender probes
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-11 16:35:14 +02:00
parent a400b9d3da
commit 3a13a05073
2 changed files with 73 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

34
workplans/AUDIT-WP-0009-evidence-role-conformance.md
View file

@ -288,11 +288,12 @@ priority: high
state_hub_task_id: "fd4a4ac3-e525-57c1-9179-e0fcd0226913"
```
**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery,
**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery,
source-adapter accepted write, duplicate-after-process-restart, exact scope/read
refusals and own reconciliation count one passed. Independent archive readback
and audit bearer revocation remain; service/domain-transaction/human operation
is separate. See the retained native producer receipt and attempt history below.
also passed at 13:11 UTC: both retained events have exact source/tenant and the
36-event chain is intact. Audit bearer revocation remains; service/domain-
transaction/human operation is separate. See the dated readback return below.
Register `approval-engine` as a distinct source under §9.4 and `AUDIT-IN-0001`:
sender registration, the four event classes (issuance, use, supersession,
@ -399,11 +400,12 @@ priority: high
state_hub_task_id: "96e0cbd5-e3ce-5807-8f64-41244671327b"
```
**Current native return, 2026-09-11 10:42 UTC:** custody/ESO delivery,
**Current native return, 2026-09-11 13:11 UTC:** custody/ESO delivery,
source-adapter accepted write, duplicate-after-process-restart, exact scope/read
refusals and own reconciliation count one passed. Independent archive readback
and audit bearer revocation remain; service/domain-transaction/human operation
is separate. See the retained native producer receipt and attempt history below.
also passed at 13:11 UTC: both retained events have exact source/tenant and the
36-event chain is intact. Audit bearer revocation remains; service/domain-
transaction/human operation is separate. See the dated readback return below.
Register `informed-decision` as a distinct load-bearing source under
`AUDIT-IN-0003`, and answer the doctrine question `GH-DEC-2026-014` put to
@ -616,3 +618,23 @@ a copy independent of the cluster and Barman data. Record the operating owner,
cadence and failure handling there; no Nextcloud credential belongs in the
receiver. Until that return exists, describe an in-cluster attestation as a
database-owner boundary only. Do not relabel the source-complete T02 as undone.
## Independent audit readback — 2026-09-11 13:11 UTC
The existing attended readback command completed with exit 0 while the user
was present. Independent read-only identity `operator` found both retained
`factory-audit-20260911104152-94aced` producer events with exact source and
`tenant:platform`; receiver integrity is intact across 36 events. The wrapper
confirmed this session's self-revocation and private-helper cleanup. Prior
failed sessions' unconfirmed revocation remains historical unresolved evidence.
This supersedes the earlier readback-login wait. No producer jobs were rerun,
no credentials were reseeded and no event was written by the reader. The
inherited zero registry-read count belongs to the producer phase; the attended
reader did consume registry version 8. CCR21/22 stay applied and owner tasks
stay progress pending formerly-valid audit-bearer revocation acceptance.
Service/domain-transaction/human and factory runtime/spend admission remain
separate; factory attempts and paid model calls remain zero.
Receipt: [native readback](../docs/evidence/2026-09-11-factory-native-readback.json).