coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit the compact sitting review package on a dedicated pin.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
CI image 8007ede@sha256:6da9543d02ff556d5d5e33624599eb26b73ef365ed0e1ee2fac2ad7703b7dcba
now serves examples/informed-decision-sitting. T03 deployment is unchanged.
Native caller checks pass with synthetic identities; human bind stays with
INFD-WP-0002.

Assistant: grok
Assistant-Session: 01a0a6cb-0334-72c0-83b0-2df57474a0f6
This commit is contained in:
tegwick 2026-09-15 22:50:24 +02:00
parent c353f8eadd
commit 11453682cf
5 changed files with 80 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

19
workplans/FLEX-WP-0028-compact-sitting-review.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Admit scoped human review for the seven compact sitting memos"
domain: infotech
repo: flex-auth
status: active
status: finished
flavor: implementation
owner: grok
topic_slug: netkingdom
@ -13,6 +13,7 @@ updated: "2026-09-15"
related_workplans:
- FLEX-WP-0027
- INFD-WP-0002
state_hub_workstream_id: "f7491b94-9f0e-5e5c-a03c-72e70d210807"
---
Opened from informed-decision inbox `f266bf8c-072e-4a80-9a6b-ff89ee422d6b`.
@ -24,6 +25,7 @@ Do not widen `examples/informed-decision-t03` / FLEX-WP-0027.
id: FLEX-WP-0028-T01
status: done
priority: high
state_hub_task_id: "c9c28feb-d735-55a1-adc5-d229ab630f59"
```
Pins from `docs/evidence/2026-09-15-sitting-approval-creates.json`.
@ -38,13 +40,16 @@ Receipt: `docs/evidence/2026-09-15-sitting-review-policy.json`.
```task
id: FLEX-WP-0028-T02
status: wait
status: done
priority: high
state_hub_task_id: "2d9be9d6-b8a0-5018-b5f5-524e72fc6239"
```
Wait for CI to publish an image that contains `examples/informed-decision-sitting`,
then pin `values/informed-decision-sitting.yaml` by digest and helm-upgrade a
new release. Do not reuse the T03 image or change the T03 Deployment.
Dedicated release revision 1 uses CI image of `8007ede`,
`sha256:6da9543d02ff556d5d5e33624599eb26b73ef365ed0e1ee2fac2ad7703b7dcba`.
Service `flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080`.
TokenReview admits only `system:serviceaccount:informed-decision:review`.
Native caller checks with synthetic identities are required before calling
this admitted. Human bind stays with INFD-WP-0002.
T03 Deployment image and generation unchanged. Six native caller checks pass
with synthetic identities (allow c02, deny wrong group / c01 / T03 memo /
consume, 401 without token). Human bind stays with INFD-WP-0002.
Receipt: `docs/evidence/2026-09-15-sitting-native-review-policy.json`.