From c5f916997205abb5b9e1c3bcb1acfca1a1b3281d Mon Sep 17 00:00:00 2001
From: repo-manager <repo-manager@local>
Date: Sat, 29 Aug 2026 14:50:04 +0200
Subject: [PATCH] repo.work.create_decision GH-DEC-2026-002

correlation_id: 1fd8961e-6174-4479-8bd8-ca17ee5f9040
reason: GH-WP-0002-T03: record the revocation failure mode so it is not an implementation accident
source: repo-manager

Assistant: grok
Assistant-Session: 01a04d89-aaa5-7443-945e-b3055cd4b7e4
---
 decisions/decisions.md | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/decisions/decisions.md b/decisions/decisions.md
index fe615a1..0055382 100644
--- a/decisions/decisions.md
+++ b/decisions/decisions.md
@@ -160,3 +160,27 @@ The falsifiers that should trigger reconsideration are in
 `gate-house/INTENT.md` § "What Would Make This Repository Wrong" — principally
 gate-house becoming a paper generator whose conformance loop never turns, or
 the estate declining to adopt the authority vocabulary.
+
+## GH-DEC-2026-002 — Revocation fails closed only when approval-engine's own store is down
+
+```yaml
+id: GH-DEC-2026-002
+kind: decision
+title: Revocation fails closed only when approval-engine's own store is down
+status: open
+owner: Bernd Worsch
+repo: gate-house
+standard: net-kingdom/canon/standards/security-layer-model_v0.7.md
+source_note: history/2026-08-29-approval-evidence-integrity-contracts.md
+requested_dispositions:
+- approved
+- revised
+- rejected
+affects:
+- gate-house
+- approval-engine
+- audit-core
+- flex-auth
+created: '2026-08-29T12:50:04.747439Z'
+updated: '2026-08-29T12:50:04.747439Z'
+```