From 2692fa6f132b954947a13ebe449637a7c75a7945 Mon Sep 17 00:00:00 2001 From: tegwick Date: Wed, 16 Sep 2026 01:08:56 +0200 Subject: [PATCH] Publish renewed T03 memo versions with the admitted review policy Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6 --- deploy/t03-admission.json | 4 +- ...2026-09-16-t03-renewed-review-handoff.json | 42 +++++++++++++++++++ tools/prepare_t03_memos.py | 6 +-- 3 files changed, 47 insertions(+), 5 deletions(-) create mode 100644 docs/evidence/2026-09-16-t03-renewed-review-handoff.json diff --git a/deploy/t03-admission.json b/deploy/t03-admission.json index c9a385c..eb490a2 100644 --- a/deploy/t03-admission.json +++ b/deploy/t03-admission.json @@ -3,8 +3,8 @@ "policy": { "origin": "http://flex-auth-informed-decision-t03.flex-auth.svc.cluster.local:8080", "package": "informed-decision.t03-review", - "version": "v1", - "package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e", + "version": "v2", + "package_digest": "sha256:c47899cb3044fe705a34bb93147c060cc3885967983ade5a52a3c93cda7aa400", "pod_name": "flex-auth-informed-decision-t03" }, "keycape_egress_ips": [ diff --git a/docs/evidence/2026-09-16-t03-renewed-review-handoff.json b/docs/evidence/2026-09-16-t03-renewed-review-handoff.json new file mode 100644 index 0000000..efe0836 --- /dev/null +++ b/docs/evidence/2026-09-16-t03-renewed-review-handoff.json @@ -0,0 +1,42 @@ +{ + "status": "installed", + "memos": [ + { + "memo_id": "SECRETS-WP-0010-T03-apply", + "version": 2, + "approval_id": "9935335c-8e9a-566e-a48e-6a5b5f4882eb", + "principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local", + "packet_hashes": [ + "sha256:9cfe61753f025b3ab476afb16a877caa57081fec94e34313452b2f057be208cf" + ] + }, + { + "memo_id": "SECRETS-WP-0010-T03-verify", + "version": 2, + "approval_id": "273d6882-6253-5dc9-ac54-544f92ef5e56", + "principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local", + "packet_hashes": [ + "sha256:1238cb6fd2dd3c07990b3aa4a30352bea7cf387e82e27cf655235c8c1baacaba" + ] + }, + { + "memo_id": "SECRETS-WP-0010-T03-exec", + "version": 2, + "approval_id": "7ba0c13b-68cd-5b3e-9481-42ba9e385e68", + "principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local", + "packet_hashes": [ + "sha256:105f5f2d589a8ce35b0cae1d429e013789f2b5bb07a177b58c1d4f0f0e2a1cc9" + ] + } + ], + "approval_entries_created": 0, + "human_dispositions_created": 0, + "review_origin": "https://decisions.coulomb.social", + "policy_version": "v2", + "policy_package_digest": "sha256:c47899cb3044fe705a34bb93147c060cc3885967983ade5a52a3c93cda7aa400", + "policy_image": "sha256:e9ade12f1ee3130b4e8d9796d993b2c7234ef51d4fa38981c949802c1422f824", + "readiness": "ready", + "requester_contained_session_exit_code": 0, + "original_approvals_expired": true, + "old_human_entries_reused": false +} diff --git a/tools/prepare_t03_memos.py b/tools/prepare_t03_memos.py index 3b94124..2959212 100644 --- a/tools/prepare_t03_memos.py +++ b/tools/prepare_t03_memos.py @@ -21,14 +21,14 @@ def prepare(principal, receipt, request_root): request=json.loads((request_root/f'2026-09-14-openrouter-final-{action}-request.json').read_text()) packet=json.dumps({'task':'SECRETS-WP-0010-T03','question':question,'consequences':brief,'approval':approval,'exact_execution_request':request},indent=2,ensure_ascii=False)+'\n' digest='sha256:'+hashlib.sha256(packet.encode()).hexdigest() - memo=Memo(id=row['memo_id'],version=1,question=question,requested_act='approve',binding_level=BindingLevel.ORGANIZATIONAL,brief=brief,binding=BindingSlice(principal=Principal(id=principal,kind='person',display_name=principal,role='T03 reviewer'),target=Scope(kind='secret-catalog-lane',id='catalog:openrouter-llm-connect',label='Existing llm-connect OpenRouter credential',environment='prod')),step_kind=StepKind.APPROVE,packet=(PacketItem('t03-'+action,'Exact action and consequences',digest),),highlights=(Highlight('scope-'+action,'t03-'+action,brief,required_ack=True,severity='critical'),),approval_id=approval['id'],approval_binding_digest=approval['binding']['digest']) + memo=Memo(id=row['memo_id'],version=row.get('memo_version',1),question=question,requested_act='approve',binding_level=BindingLevel.ORGANIZATIONAL,brief=brief,binding=BindingSlice(principal=Principal(id=principal,kind='person',display_name=principal,role='T03 reviewer'),target=Scope(kind='secret-catalog-lane',id='catalog:openrouter-llm-connect',label='Existing llm-connect OpenRouter credential',environment='prod')),step_kind=StepKind.APPROVE,packet=(PacketItem('t03-'+action,'Exact action and consequences',digest),),highlights=(Highlight('scope-'+action,'t03-'+action,brief,required_ack=True,severity='critical'),),approval_id=approval['id'],approval_binding_digest=approval['binding']['digest']) documents.append({'hash':digest,'media_type':'text/plain','content':packet});memos.append(json.loads(dumps(memo))) if {r['action'] for r in receipt['requests']}!={'apply','verify','exec'}:raise ValueError('exact action set required') return {'kind':'t03-review-packets','principal':principal,'documents':documents,'memos':memos} if __name__=='__main__': - p=argparse.ArgumentParser(description=__doc__);p.add_argument('--principal',required=True);p.add_argument('--output',type=Path,required=True);a=p.parse_args() - receipt=json.loads(Path('/home/worsch/railiance-platform/docs/evidence/2026-09-14-t03-native-approval-requests.json').read_text()) + p=argparse.ArgumentParser(description=__doc__);p.add_argument('--principal',required=True);p.add_argument('--output',type=Path,required=True);p.add_argument('--receipt',type=Path,required=True);a=p.parse_args() + receipt=json.loads(a.receipt.read_text()) output=prepare(a.principal,receipt,Path('/home/worsch/secrets-engine/docs/evidence')) with a.output.open('x') as f:json.dump(output,f,indent=2);f.write('\n') print('Prepared three packets; no presentations, dispositions or approval entries created.')