repo.work.create_decision GH-DEC-2026-002

correlation_id: 1fd8961e-6174-4479-8bd8-ca17ee5f9040
reason: GH-WP-0002-T03: record the revocation failure mode so it is not an implementation accident
source: repo-manager

Assistant: grok
Assistant-Session: 01a04d89-aaa5-7443-945e-b3055cd4b7e4

decisions/decisions.md

@@ -160,3 +160,27 @@ The falsifiers that should trigger reconsideration are in
 `gate-house/INTENT.md` § "What Would Make This Repository Wrong" — principally
 gate-house becoming a paper generator whose conformance loop never turns, or
 the estate declining to adopt the authority vocabulary.
+
+## GH-DEC-2026-002 — Revocation fails closed only when approval-engine's own store is down
+
+```yaml
+id: GH-DEC-2026-002
+kind: decision
+title: Revocation fails closed only when approval-engine's own store is down
+status: open
+owner: Bernd Worsch
+repo: gate-house
+standard: net-kingdom/canon/standards/security-layer-model_v0.7.md
+source_note: history/2026-08-29-approval-evidence-integrity-contracts.md
+requested_dispositions:
+- approved
+- revised
+- rejected
+affects:
+- gate-house
+- approval-engine
+- audit-core
+- flex-auth
+created: '2026-08-29T12:50:04.747439Z'
+updated: '2026-08-29T12:50:04.747439Z'
+```