fix(contract): pin action authorization digest
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 36s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e47-6aac-7ee1-914d-0584c75d3c81
This commit is contained in:
tegwick 2026-08-23 14:24:24 +02:00
parent 0eb46d61b5
commit d4024083f8
3 changed files with 12 additions and 1 deletions

View file

@ -47,6 +47,12 @@ Publish `schemas/action_authorization.schema.json` and
`docs/action-bound-authorization-contract.md`, including exact target mapping,
validity, distinct approvals, supersession, and fail-closed outage semantics.
Corrective verification 2026-08-23: secrets-engine detected that the example's
stored request digest predated its final request shape. The fixture now carries
the digest produced by `NewDecisionBinding`, and the API test compares the full
published binding to a freshly generated canonical binding so future fixture
drift fails the suite.
## Add durable storage and authenticated approval evidence
```task