coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compile compact sitting review package without widening T03.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m8s
Details

Browse source 
Seven exact-record pins from the 2026-09-15 sitting-create receipt.
c01 is omitted. Identity bar matches T03. 147 local evaluator checks
pass. Deploy waits on a CI image that contains the new package.

Assistant: grok
Assistant-Session: 01a0a6cb-0334-72c0-83b0-2df57474a0f6
This commit is contained in:
tegwick 2026-09-15 22:45:46 +02:00
parent a689bc2645
commit 8007edecc4
10 changed files with 1261 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

593
docs/evidence/2026-09-15-sitting-review-policy.json Normal file
View file

@ -0,0 +1,593 @@
{
"scope": "local actual evaluator with synthetic identity; no live human approvals; T03 package untouched",
"checks": [
{
"check": "c02:read",
"effect": "allow"
},
{
"check": "c02:acknowledge",
"effect": "allow"
},
{
"check": "c02:accept",
"effect": "allow"
},
{
"check": "c02:return",
"effect": "allow"
},
{
"check": "c02:discuss",
"effect": "allow"
},
{
"check": "c02:decline",
"effect": "allow"
},
{
"check": "c02:wrong-group",
"effect": "deny"
},
{
"check": "c02:no-group",
"effect": "deny"
},
{
"check": "c02:service",
"effect": "deny"
},
{
"check": "c02:stale-mfa",
"effect": "deny"
},
{
"check": "c02:future-mfa",
"effect": "deny"
},
{
"check": "c02:no-mfa",
"effect": "deny"
},
{
"check": "c02:forged-human-route",
"effect": "deny"
},
{
"check": "c02:wrong-tenant",
"effect": "deny"
},
{
"check": "c02:other-memo",
"effect": "deny"
},
{
"check": "c02:omitted-c01",
"effect": "deny"
},
{
"check": "c02:t03-memo",
"effect": "deny"
},
{
"check": "c02:changed-version",
"effect": "deny"
},
{
"check": "c02:changed-approval",
"effect": "deny"
},
{
"check": "c02:changed-digest",
"effect": "deny"
},
{
"check": "c02:consume",
"effect": "deny"
},
{
"check": "c03:read",
"effect": "allow"
},
{
"check": "c03:acknowledge",
"effect": "allow"
},
{
"check": "c03:accept",
"effect": "allow"
},
{
"check": "c03:return",
"effect": "allow"
},
{
"check": "c03:discuss",
"effect": "allow"
},
{
"check": "c03:decline",
"effect": "allow"
},
{
"check": "c03:wrong-group",
"effect": "deny"
},
{
"check": "c03:no-group",
"effect": "deny"
},
{
"check": "c03:service",
"effect": "deny"
},
{
"check": "c03:stale-mfa",
"effect": "deny"
},
{
"check": "c03:future-mfa",
"effect": "deny"
},
{
"check": "c03:no-mfa",
"effect": "deny"
},
{
"check": "c03:forged-human-route",
"effect": "deny"
},
{
"check": "c03:wrong-tenant",
"effect": "deny"
},
{
"check": "c03:other-memo",
"effect": "deny"
},
{
"check": "c03:omitted-c01",
"effect": "deny"
},
{
"check": "c03:t03-memo",
"effect": "deny"
},
{
"check": "c03:changed-version",
"effect": "deny"
},
{
"check": "c03:changed-approval",
"effect": "deny"
},
{
"check": "c03:changed-digest",
"effect": "deny"
},
{
"check": "c03:consume",
"effect": "deny"
},
{
"check": "c04:read",
"effect": "allow"
},
{
"check": "c04:acknowledge",
"effect": "allow"
},
{
"check": "c04:accept",
"effect": "allow"
},
{
"check": "c04:return",
"effect": "allow"
},
{
"check": "c04:discuss",
"effect": "allow"
},
{
"check": "c04:decline",
"effect": "allow"
},
{
"check": "c04:wrong-group",
"effect": "deny"
},
{
"check": "c04:no-group",
"effect": "deny"
},
{
"check": "c04:service",
"effect": "deny"
},
{
"check": "c04:stale-mfa",
"effect": "deny"
},
{
"check": "c04:future-mfa",
"effect": "deny"
},
{
"check": "c04:no-mfa",
"effect": "deny"
},
{
"check": "c04:forged-human-route",
"effect": "deny"
},
{
"check": "c04:wrong-tenant",
"effect": "deny"
},
{
"check": "c04:other-memo",
"effect": "deny"
},
{
"check": "c04:omitted-c01",
"effect": "deny"
},
{
"check": "c04:t03-memo",
"effect": "deny"
},
{
"check": "c04:changed-version",
"effect": "deny"
},
{
"check": "c04:changed-approval",
"effect": "deny"
},
{
"check": "c04:changed-digest",
"effect": "deny"
},
{
"check": "c04:consume",
"effect": "deny"
},
{
"check": "d01:read",
"effect": "allow"
},
{
"check": "d01:acknowledge",
"effect": "allow"
},
{
"check": "d01:accept",
"effect": "allow"
},
{
"check": "d01:return",
"effect": "allow"
},
{
"check": "d01:discuss",
"effect": "allow"
},
{
"check": "d01:decline",
"effect": "allow"
},
{
"check": "d01:wrong-group",
"effect": "deny"
},
{
"check": "d01:no-group",
"effect": "deny"
},
{
"check": "d01:service",
"effect": "deny"
},
{
"check": "d01:stale-mfa",
"effect": "deny"
},
{
"check": "d01:future-mfa",
"effect": "deny"
},
{
"check": "d01:no-mfa",
"effect": "deny"
},
{
"check": "d01:forged-human-route",
"effect": "deny"
},
{
"check": "d01:wrong-tenant",
"effect": "deny"
},
{
"check": "d01:other-memo",
"effect": "deny"
},
{
"check": "d01:omitted-c01",
"effect": "deny"
},
{
"check": "d01:t03-memo",
"effect": "deny"
},
{
"check": "d01:changed-version",
"effect": "deny"
},
{
"check": "d01:changed-approval",
"effect": "deny"
},
{
"check": "d01:changed-digest",
"effect": "deny"
},
{
"check": "d01:consume",
"effect": "deny"
},
{
"check": "d02:read",
"effect": "allow"
},
{
"check": "d02:acknowledge",
"effect": "allow"
},
{
"check": "d02:accept",
"effect": "allow"
},
{
"check": "d02:return",
"effect": "allow"
},
{
"check": "d02:discuss",
"effect": "allow"
},
{
"check": "d02:decline",
"effect": "allow"
},
{
"check": "d02:wrong-group",
"effect": "deny"
},
{
"check": "d02:no-group",
"effect": "deny"
},
{
"check": "d02:service",
"effect": "deny"
},
{
"check": "d02:stale-mfa",
"effect": "deny"
},
{
"check": "d02:future-mfa",
"effect": "deny"
},
{
"check": "d02:no-mfa",
"effect": "deny"
},
{
"check": "d02:forged-human-route",
"effect": "deny"
},
{
"check": "d02:wrong-tenant",
"effect": "deny"
},
{
"check": "d02:other-memo",
"effect": "deny"
},
{
"check": "d02:omitted-c01",
"effect": "deny"
},
{
"check": "d02:t03-memo",
"effect": "deny"
},
{
"check": "d02:changed-version",
"effect": "deny"
},
{
"check": "d02:changed-approval",
"effect": "deny"
},
{
"check": "d02:changed-digest",
"effect": "deny"
},
{
"check": "d02:consume",
"effect": "deny"
},
{
"check": "d03:read",
"effect": "allow"
},
{
"check": "d03:acknowledge",
"effect": "allow"
},
{
"check": "d03:accept",
"effect": "allow"
},
{
"check": "d03:return",
"effect": "allow"
},
{
"check": "d03:discuss",
"effect": "allow"
},
{
"check": "d03:decline",
"effect": "allow"
},
{
"check": "d03:wrong-group",
"effect": "deny"
},
{
"check": "d03:no-group",
"effect": "deny"
},
{
"check": "d03:service",
"effect": "deny"
},
{
"check": "d03:stale-mfa",
"effect": "deny"
},
{
"check": "d03:future-mfa",
"effect": "deny"
},
{
"check": "d03:no-mfa",
"effect": "deny"
},
{
"check": "d03:forged-human-route",
"effect": "deny"
},
{
"check": "d03:wrong-tenant",
"effect": "deny"
},
{
"check": "d03:other-memo",
"effect": "deny"
},
{
"check": "d03:omitted-c01",
"effect": "deny"
},
{
"check": "d03:t03-memo",
"effect": "deny"
},
{
"check": "d03:changed-version",
"effect": "deny"
},
{
"check": "d03:changed-approval",
"effect": "deny"
},
{
"check": "d03:changed-digest",
"effect": "deny"
},
{
"check": "d03:consume",
"effect": "deny"
},
{
"check": "d04:read",
"effect": "allow"
},
{
"check": "d04:acknowledge",
"effect": "allow"
},
{
"check": "d04:accept",
"effect": "allow"
},
{
"check": "d04:return",
"effect": "allow"
},
{
"check": "d04:discuss",
"effect": "allow"
},
{
"check": "d04:decline",
"effect": "allow"
},
{
"check": "d04:wrong-group",
"effect": "deny"
},
{
"check": "d04:no-group",
"effect": "deny"
},
{
"check": "d04:service",
"effect": "deny"
},
{
"check": "d04:stale-mfa",
"effect": "deny"
},
{
"check": "d04:future-mfa",
"effect": "deny"
},
{
"check": "d04:no-mfa",
"effect": "deny"
},
{
"check": "d04:forged-human-route",
"effect": "deny"
},
{
"check": "d04:wrong-tenant",
"effect": "deny"
},
{
"check": "d04:other-memo",
"effect": "deny"
},
{
"check": "d04:omitted-c01",
"effect": "deny"
},
{
"check": "d04:t03-memo",
"effect": "deny"
},
{
"check": "d04:changed-version",
"effect": "deny"
},
{
"check": "d04:changed-approval",
"effect": "deny"
},
{
"check": "d04:changed-digest",
"effect": "deny"
},
{
"check": "d04:consume",
"effect": "deny"
}
]
}