Admit exact T03 human review mandate with caller-bound policy

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6

values/informed-decision-t03.yaml

@@ -0,0 +1,24 @@
+# Operator-admitted exact T03 human review, SECRETS-WP-0010-T03.
+name: flex-auth-informed-decision-t03
+image:
+  repository: forgejo.coulomb.social/coulomb/flex-auth
+  digest: sha256:c9f028b49dfcede930a9cc48757ec8371ecc71d20b1bfee2733e55298dffcc7c
+args:
+  - serve
+  - --addr
+  - 0.0.0.0:8080
+  - --registry
+  - /opt/flex-auth/examples/informed-decision-t03/registry.json
+  - --policy
+  - /opt/flex-auth/examples/informed-decision-t03/policy.md
+callerAuth:
+  mode: enforce
+  kubernetesURL: https://10.43.0.1
+  binding: informed-decision=system:serviceaccount:informed-decision:review
+consumer:
+  isolated: false
+  namespace: informed-decision
+  podName: informed-decision
+resources:
+  requests: {cpu: 5m, memory: 32Mi}
+  limits: {cpu: 300m, memory: 192Mi}