feat: compose fresh owner facts with explicit binding and evidence
Some checks failed
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / pytest-smoke (push) Failing after 2s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929
This commit is contained in:
tegwick 2026-09-28 16:27:27 +02:00
parent f11b948e8c
commit 2a0586b4c9
5 changed files with 358 additions and 0 deletions

View file

@ -32,6 +32,11 @@ production `FactSource` is configured. The runtime will not load fixture facts,
query owner databases directly, forward Hub bearer tokens to other audiences,
or use `/me` as an account-provisioning side effect.
The follow-up [owner facts contract](owner-facts-contract.md) pins the re-reviewed
sources and owner decisions needed for actual HTTP readers. `PlatformFacts` now
provides the typed, bounded Hub-side join with live revocation and evidence
binding; it intentionally has no fabricated network endpoints or default grants.
## Audit Core adapter and sender admission
`AuditCoreSink` implements the actual `docs/event-envelope.md` contract: