coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
flex-auth/WORK-RECORDS.md
tegwick 3dc6223cc2
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Roll flex-auth-tenant-engine onto the FLEX-WP-0010 policy image 
CI-built image from e9911eb, digest
sha256:9320df394a642eff24da8af4a0ee8886a7bb78b0f14d8ee1deeb30ea8eeeaba7,
verified in a throwaway container before pinning and then probed again
against the live Service after rollout:

  tenant.retire    allow write_api_policy_matched  decision:491bbef2db999c02
  tenant.create    allow write_api_policy_matched  decision:fa3ba90e9cccb5aa
  tenant.retired   deny  unknown_action            decision:c5ee185de439ffe5
  unknown subject  deny  unknown_subject           decision:a98c59c6a34f84ad

tenant.retire has flipped from deny unknown_action to allow in
production, which is what TEN-WP-0005-T05 was waiting on.

Only flex-auth-tenant-engine was rolled. flex-auth-user-engine stays
pinned to a31961c4 -- its policy is unchanged and there is no reason to
move it. Previous tenant-engine digest kept in the runbook as the
rollback target.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-11 10:41:25 +02:00

7.2 KiB
Raw Blame History

Work Records — flex-auth

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind ID Status Lane Source
workplan FLEX-WP-0001 done — workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md
workplan FLEX-WP-0002 completed — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
workplan FLEX-WP-0003 completed — workplans/FLEX-WP-0003-markitect-consumer-integration.md
workplan FLEX-WP-0004 completed — workplans/FLEX-WP-0004-delegated-pdp-and-directory-adapters.md
workplan FLEX-WP-0005 done — workplans/FLEX-WP-0005-foundations-and-topaz-alignment.md
workplan FLEX-WP-0006 finished — workplans/FLEX-WP-0006-ops-warden-ssh-signing-policy-gate.md
workplan FLEX-WP-0007 finished — workplans/FLEX-WP-0007-ops-warden-policy-gate-production-deployment.md
workplan FLEX-WP-0008 finished — workplans/FLEX-WP-0008-tenant-engine-consumer-integration.md
workplan FLEX-WP-0009 active — workplans/FLEX-WP-0009-user-engine-production-policy-service.md
workplan FLEX-WP-0010 finished — workplans/FLEX-WP-0010-tenant-lifecycle-policy-actions.md
workplan FLEX-WP-0011 proposed — workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md
task FLEX-WP-0001-T001 done — workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md
task FLEX-WP-0001-T002 done — workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md
task FLEX-WP-0001-T003 done — workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md
task FLEX-WP-0001-T004 done — workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md
task FLEX-WP-0002-T001 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0002-T002 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0002-T003 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0002-T004 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0002-T005 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0002-T006 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0002-T007 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0002-T008 done — workplans/FLEX-WP-0002-standalone-policy-as-code-core.md
task FLEX-WP-0003-T001 done — workplans/FLEX-WP-0003-markitect-consumer-integration.md
task FLEX-WP-0003-T002 done — workplans/FLEX-WP-0003-markitect-consumer-integration.md
task FLEX-WP-0003-T003 done — workplans/FLEX-WP-0003-markitect-consumer-integration.md
task FLEX-WP-0003-T004 done — workplans/FLEX-WP-0003-markitect-consumer-integration.md
task FLEX-WP-0003-T005 done — workplans/FLEX-WP-0003-markitect-consumer-integration.md
task FLEX-WP-0003-T006 done — workplans/FLEX-WP-0003-markitect-consumer-integration.md
task FLEX-WP-0004-T001 done — workplans/FLEX-WP-0004-delegated-pdp-and-directory-adapters.md
task FLEX-WP-0004-T002 done — workplans/FLEX-WP-0004-delegated-pdp-and-directory-adapters.md
task FLEX-WP-0004-T003 done — workplans/FLEX-WP-0004-delegated-pdp-and-directory-adapters.md
task FLEX-WP-0004-T004 done — workplans/FLEX-WP-0004-delegated-pdp-and-directory-adapters.md
task FLEX-WP-0004-T005 done — workplans/FLEX-WP-0004-delegated-pdp-and-directory-adapters.md
task FLEX-WP-0004-T006 done — workplans/FLEX-WP-0004-delegated-pdp-and-directory-adapters.md
task FLEX-WP-0005-T001 done — workplans/FLEX-WP-0005-foundations-and-topaz-alignment.md
task FLEX-WP-0005-T002 done — workplans/FLEX-WP-0005-foundations-and-topaz-alignment.md
task FLEX-WP-0005-T003 done — workplans/FLEX-WP-0005-foundations-and-topaz-alignment.md
task FLEX-WP-0005-T004 done — workplans/FLEX-WP-0005-foundations-and-topaz-alignment.md
task FLEX-WP-0005-T005 done — workplans/FLEX-WP-0005-foundations-and-topaz-alignment.md
task FLEX-WP-0005-T006 done — workplans/FLEX-WP-0005-foundations-and-topaz-alignment.md
task FLEX-WP-0006-T01 done — workplans/FLEX-WP-0006-ops-warden-ssh-signing-policy-gate.md
task FLEX-WP-0006-T02 done — workplans/FLEX-WP-0006-ops-warden-ssh-signing-policy-gate.md
task FLEX-WP-0006-T03 done — workplans/FLEX-WP-0006-ops-warden-ssh-signing-policy-gate.md
task FLEX-WP-0006-T04 done — workplans/FLEX-WP-0006-ops-warden-ssh-signing-policy-gate.md
task FLEX-WP-0006-T05 done — workplans/FLEX-WP-0006-ops-warden-ssh-signing-policy-gate.md
task FLEX-WP-0007-T01 done — workplans/FLEX-WP-0007-ops-warden-policy-gate-production-deployment.md
task FLEX-WP-0007-T02 done — workplans/FLEX-WP-0007-ops-warden-policy-gate-production-deployment.md
task FLEX-WP-0007-T03 done — workplans/FLEX-WP-0007-ops-warden-policy-gate-production-deployment.md
task FLEX-WP-0007-T04 done — workplans/FLEX-WP-0007-ops-warden-policy-gate-production-deployment.md
task FLEX-WP-0007-T05 done — workplans/FLEX-WP-0007-ops-warden-policy-gate-production-deployment.md
task FLEX-WP-0008-T01 done — workplans/FLEX-WP-0008-tenant-engine-consumer-integration.md
task FLEX-WP-0008-T02 done — workplans/FLEX-WP-0008-tenant-engine-consumer-integration.md
task FLEX-WP-0008-T03 done — workplans/FLEX-WP-0008-tenant-engine-consumer-integration.md
task FLEX-WP-0008-T04 done — workplans/FLEX-WP-0008-tenant-engine-consumer-integration.md
task FLEX-WP-0009-T01 done — workplans/FLEX-WP-0009-user-engine-production-policy-service.md
task FLEX-WP-0009-T02 done — workplans/FLEX-WP-0009-user-engine-production-policy-service.md
task FLEX-WP-0009-T03 done — workplans/FLEX-WP-0009-user-engine-production-policy-service.md
task FLEX-WP-0009-T04 progress — workplans/FLEX-WP-0009-user-engine-production-policy-service.md
task FLEX-WP-0010-T01 done — workplans/FLEX-WP-0010-tenant-lifecycle-policy-actions.md
task FLEX-WP-0010-T02 done — workplans/FLEX-WP-0010-tenant-lifecycle-policy-actions.md
task FLEX-WP-0010-T03 done — workplans/FLEX-WP-0010-tenant-lifecycle-policy-actions.md
task FLEX-WP-0010-T04 done — workplans/FLEX-WP-0010-tenant-lifecycle-policy-actions.md
task FLEX-WP-0011-T01 todo — workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md
task FLEX-WP-0011-T02 todo — workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md
task FLEX-WP-0011-T03 todo — workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md