coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Publish renewed T03 memo versions with the admitted review policy

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
tegwick 2026-09-16 01:08:56 +02:00
parent d4b77a8c0e
commit 2692fa6f13
3 changed files with 47 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
deploy/t03-admission.json
View file

@ -3,8 +3,8 @@
"policy": {
"origin": "http://flex-auth-informed-decision-t03.flex-auth.svc.cluster.local:8080",
"package": "informed-decision.t03-review",
"version": "v1",
"package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
"version": "v2",
"package_digest": "sha256:c47899cb3044fe705a34bb93147c060cc3885967983ade5a52a3c93cda7aa400",
"pod_name": "flex-auth-informed-decision-t03"
},
"keycape_egress_ips": [

42
docs/evidence/2026-09-16-t03-renewed-review-handoff.json Normal file
View file

@ -0,0 +1,42 @@
{
"status": "installed",
"memos": [
{
"memo_id": "SECRETS-WP-0010-T03-apply",
"version": 2,
"approval_id": "9935335c-8e9a-566e-a48e-6a5b5f4882eb",
"principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local",
"packet_hashes": [
"sha256:9cfe61753f025b3ab476afb16a877caa57081fec94e34313452b2f057be208cf"
]
},
{
"memo_id": "SECRETS-WP-0010-T03-verify",
"version": 2,
"approval_id": "273d6882-6253-5dc9-ac54-544f92ef5e56",
"principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local",
"packet_hashes": [
"sha256:1238cb6fd2dd3c07990b3aa4a30352bea7cf387e82e27cf655235c8c1baacaba"
]
},
{
"memo_id": "SECRETS-WP-0010-T03-exec",
"version": 2,
"approval_id": "7ba0c13b-68cd-5b3e-9481-42ba9e385e68",
"principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local",
"packet_hashes": [
"sha256:105f5f2d589a8ce35b0cae1d429e013789f2b5bb07a177b58c1d4f0f0e2a1cc9"
]
}
],
"approval_entries_created": 0,
"human_dispositions_created": 0,
"review_origin": "https://decisions.coulomb.social",
"policy_version": "v2",
"policy_package_digest": "sha256:c47899cb3044fe705a34bb93147c060cc3885967983ade5a52a3c93cda7aa400",
"policy_image": "sha256:e9ade12f1ee3130b4e8d9796d993b2c7234ef51d4fa38981c949802c1422f824",
"readiness": "ready",
"requester_contained_session_exit_code": 0,
"original_approvals_expired": true,
"old_human_entries_reused": false
}

6
tools/prepare_t03_memos.py
View file

@ -21,14 +21,14 @@ def prepare(principal, receipt, request_root):
request=json.loads((request_root/f'2026-09-14-openrouter-final-{action}-request.json').read_text())
packet=json.dumps({'task':'SECRETS-WP-0010-T03','question':question,'consequences':brief,'approval':approval,'exact_execution_request':request},indent=2,ensure_ascii=False)+'\n'
digest='sha256:'+hashlib.sha256(packet.encode()).hexdigest()
memo=Memo(id=row['memo_id'],version=1,question=question,requested_act='approve',binding_level=BindingLevel.ORGANIZATIONAL,brief=brief,binding=BindingSlice(principal=Principal(id=principal,kind='person',display_name=principal,role='T03 reviewer'),target=Scope(kind='secret-catalog-lane',id='catalog:openrouter-llm-connect',label='Existing llm-connect OpenRouter credential',environment='prod')),step_kind=StepKind.APPROVE,packet=(PacketItem('t03-'+action,'Exact action and consequences',digest),),highlights=(Highlight('scope-'+action,'t03-'+action,brief,required_ack=True,severity='critical'),),approval_id=approval['id'],approval_binding_digest=approval['binding']['digest'])
memo=Memo(id=row['memo_id'],version=row.get('memo_version',1),question=question,requested_act='approve',binding_level=BindingLevel.ORGANIZATIONAL,brief=brief,binding=BindingSlice(principal=Principal(id=principal,kind='person',display_name=principal,role='T03 reviewer'),target=Scope(kind='secret-catalog-lane',id='catalog:openrouter-llm-connect',label='Existing llm-connect OpenRouter credential',environment='prod')),step_kind=StepKind.APPROVE,packet=(PacketItem('t03-'+action,'Exact action and consequences',digest),),highlights=(Highlight('scope-'+action,'t03-'+action,brief,required_ack=True,severity='critical'),),approval_id=approval['id'],approval_binding_digest=approval['binding']['digest'])
documents.append({'hash':digest,'media_type':'text/plain','content':packet});memos.append(json.loads(dumps(memo)))
if {r['action'] for r in receipt['requests']}!={'apply','verify','exec'}:raise ValueError('exact action set required')
return {'kind':'t03-review-packets','principal':principal,'documents':documents,'memos':memos}
if __name__=='__main__':
p=argparse.ArgumentParser(description=__doc__);p.add_argument('--principal',required=True);p.add_argument('--output',type=Path,required=True);a=p.parse_args()
receipt=json.loads(Path('/home/worsch/railiance-platform/docs/evidence/2026-09-14-t03-native-approval-requests.json').read_text())
p=argparse.ArgumentParser(description=__doc__);p.add_argument('--principal',required=True);p.add_argument('--output',type=Path,required=True);p.add_argument('--receipt',type=Path,required=True);a=p.parse_args()
receipt=json.loads(a.receipt.read_text())
output=prepare(a.principal,receipt,Path('/home/worsch/secrets-engine/docs/evidence'))
with a.output.open('x') as f:json.dump(output,f,indent=2);f.write('\n')
print('Prepared three packets; no presentations, dispositions or approval entries created.')