coulomb/gate-house
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

repo.work.resolve_decision GH-DEC-2026-003

Browse source 
correlation_id: e147a6ab-0644-405e-bdbd-b9dff117d7a8
reason: GH-WP-0002-T06: settle consumption ordering
source: repo-manager

Assistant: grok
Assistant-Session: 01a04d89-aaa5-7443-945e-b3055cd4b7e4
This commit is contained in:
repo-manager 2026-08-29 14:51:01 +02:00
parent 23cbefcb7b
commit 2ae611d2ad
1 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
decisions/decisions.md
View file

@ -257,7 +257,7 @@ missing, which is worse.
id: GH-DEC-2026-003 id: GH-DEC-2026-003
kind: decision kind: decision
title: The PEP consumes an approval before the protected side effect title: The PEP consumes an approval before the protected side effect
status: open status: resolved
owner: Bernd Worsch owner: Bernd Worsch
repo: gate-house repo: gate-house
standard: net-kingdom/canon/standards/security-layer-model_v0.7.md standard: net-kingdom/canon/standards/security-layer-model_v0.7.md
@ -273,7 +273,13 @@ affects:
- secrets-engine - secrets-engine
- ops-warden - ops-warden
created: '2026-08-29T12:50:06.944092Z' created: '2026-08-29T12:50:06.944092Z'
updated: '2026-08-29T12:50:06.944092Z' updated: '2026-08-29T12:51:01.355583Z'
rationale: Approved as GH-WP-0002-T06. The PEP consumes by compare-and-swap before
the protected side effect; the PDP never mutates; there is no unconsume. Same request
digest is idempotent success; a different digest against a consumed object is conflict.
This closes the three named races and unblocks APPROVAL-WP-0001-T05 and FLEX-WP-0017-T05.
decided_by: Bernd Worsch
decided_at: '2026-08-29T12:51:01.355583Z'
``` ```
## Context ## Context