coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
flex-auth/workplans/FLEX-WP-0027-t03-human-review.md
tegwick e62c0cfc36
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m1s
Details
Admit exact T03 human review mandate with caller-bound policy 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
2026-09-14 02:47:31 +02:00

1.6 KiB
Raw Blame History

id type title domain repo status owner topic_slug created updated state_hub_workstream_id
FLEX-WP-0027 workplan Admit scoped human review for the three T03 actions infotech flex-auth active codex netkingdom 2026-09-14 2026-09-14 954635b2-8377-5227-ab4f-10607b2a02c6

Implement the explicit group and exact-record mandate

id: FLEX-WP-0027-T01
status: done
priority: high
state_hub_task_id: "7b5af88b-2630-5f94-a085-78180690e08c"

The operator admitted net-kingdom-admins for the three T03 reviews only. examples/informed-decision-t03 pins record IDs, versions and native bindings. Fresh verified KeyCape MFA and groups are mandatory. 57 evaluator checks pass. Reproduce with python3 tools/exercise_t03_review_policy.py --binary /path/to/flex-auth --receipt /tmp/t03-checks.json.

Deploy the isolated caller-bound policy

id: FLEX-WP-0027-T02
status: done
priority: high
state_hub_task_id: "129568a0-cb1c-5f7b-8f5d-f44f1d2bcfff"

values/informed-decision-t03.yaml pins the live image and policy. TokenReview admits only system:serviceaccount:informed-decision:review. Six native caller checks pass with synthetic identities; evidence is retained in docs/evidence.

Verify actual human review through the native service

id: FLEX-WP-0027-T03
status: wait
priority: high
state_hub_task_id: "9417d64a-308c-566f-af29-217c5c45d294"

Wait for the operator's exact signed-in account, then address the three memos and verify actual human acknowledgements/entries. Synthetic policy checks are not acceptance evidence. SECRETS-WP-0010-T03 retains live consume and execution.