emergent-security/docs/evidence/2026-10-03-025-informed-decision-repin.md

Informed Decision re-pin — knowledge 0.2.5

The live seal is now 0.2.6. See docs/evidence/2026-10-03-026-route-clarification.md. This 0.2.5 record stays historical.

Historical pilot: 0.2.5, manifest digest 9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f. Release 0.2.4, digest 025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3, remains the historical seal for its provider probes, resume reloads, and four Claude pilots. This release does not extend that evidence or Whitehat's 0.2.3 library acceptance.

Reviewed source

0.2.4 withheld startup after Informed Decision moved past 15c330ccd049cd19c76040e54dae41cd15d1359e. The published revision is now b4f637326ba3c2526f4648c4c90544948408d53f, matching origin/main. Inventoried file bytes match that commit. README, INTENT, the memo schema, and informed_decision/intake.py are unchanged since 0.2.4. SCOPE and the intake spec changed at ff59199. The workplan changed again in b4f6373.

The owner records that INFD-WP-0006 completed the Authelia fresh-login request, with live fresh-login/p01 acceptance. An actionable browser freshness error remains open. INFD-WP-0005 has local intake, opt-in scheduled delivery, empty registries, notification without a URL, and local posed audit evidence. INFD_HUB_WRITEBACK stays off. No listener is deployed. T07 is done locally. T05, T06, T08, and T10 stay waiting.

Boolean contract

state-hub 49eeddb rejected requires_new_bind, required_ack, and sealed because type(True) is bool, not int. state-hub d61ba327fa575269a0ea2d7372cd3c62a10d0cc9 accepts a boolean leaf before the numeric allow-list. Unknown leaves still raise invalid_type. The informed-decision cross-repo check submits the real p01 envelope and expects those three booleans to survive delivery. Focused state-hub memo tests: 20 passed. Focused informed-decision intake tests: 46 passed, 3 skipped. A later full informed-decision run was 449 passed, 64 skipped, and 4 failed outside this change (waitress missing, and one access-token audience case). No submitter was registered, no token was minted, and the write-back flag stays unset. T08 still waits on the service account, reviewed grant, runtime forwarding, and T05/T06.

Package change

knowledge/cards/decisions.md now carries the fresh-login acceptance, the open browser freshness error, local delivery limits, and boolean-preserving dev forwarding. The intake-readiness scenario still asks whether an agent may assume POST /v1/memos is deployed and register itself. The integration map, operational contract, and decision/runbook limit row match this scope. The unsigned adoption draft was regenerated for this digest and was not submitted. Decision d20a9750-2b29-534e-8227-fb866581a6ca remains open.

Checks

Source check: 24 owners verified-files, ok: true, live_state_verified: false. Startup and the decisions card both retrieve as verified-files for the Grok audience. Seal and unsigned-draft checks pass. Portable tests: 332 passed, 9 skipped. With EMERGENT_OWNER_ROOT=/home/worsch, the 9 owner-contract tests passed. File agreement is not deployment, permission, provider readiness, or adoption.

Still open

0.2.4 provider probes, resume reloads, and pilots stay on that digest. Compaction, a governed harness session, owner feedback, RISK-F-0015, human adoption, and fleet reach remain open. EMERGENT-WP-0002 stays blocked on T02, T05, T07, T08, T09, and T10. No DoD-Ok is claimed.