From 6a5d2170a4c64e3cb1f209d5f14258f9c9770ed1 Mon Sep 17 00:00:00 2001
From: repo-manager <repo-manager@local>
Date: Sat, 29 Aug 2026 14:50:06 +0200
Subject: [PATCH] repo.work.create_decision GH-DEC-2026-003

correlation_id: e7c050fe-21e4-4529-a79b-d6137438d77a
reason: GH-WP-0002-T06: settle the consumption ordering contract that blocks APPROVAL-WP-0001-T05 and FLEX-WP-0017-T05
source: repo-manager

Assistant: grok
Assistant-Session: 01a04d89-aaa5-7443-945e-b3055cd4b7e4
---
 decisions/decisions.md | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/decisions/decisions.md b/decisions/decisions.md
index 0055382..ef2d498 100644
--- a/decisions/decisions.md
+++ b/decisions/decisions.md
@@ -184,3 +184,28 @@ affects:
 created: '2026-08-29T12:50:04.747439Z'
 updated: '2026-08-29T12:50:04.747439Z'
 ```
+
+## GH-DEC-2026-003 — The PEP consumes an approval before the protected side effect
+
+```yaml
+id: GH-DEC-2026-003
+kind: decision
+title: The PEP consumes an approval before the protected side effect
+status: open
+owner: Bernd Worsch
+repo: gate-house
+standard: net-kingdom/canon/standards/security-layer-model_v0.7.md
+source_note: docs/contracts/approval-consumption.md
+requested_dispositions:
+- approved
+- revised
+- rejected
+affects:
+- gate-house
+- approval-engine
+- flex-auth
+- secrets-engine
+- ops-warden
+created: '2026-08-29T12:50:06.944092Z'
+updated: '2026-08-29T12:50:06.944092Z'
+```