Draft unsigned credential and decision sign-off batches.

INFD-WP-0002 T01–T02: eight one-question memos for net-kingdom-admins,
batch contract without approve-all, no live bind (T08 still open).

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-14 17:08:39 +02:00
parent 79f081850b
commit 27b8e916cc
24 changed files with 765 additions and 3 deletions

View file

@ -0,0 +1,60 @@
{
"kind": "informed-decision-batch",
"id": "infd-batch-2026-09-14-decisions",
"review_group": "net-kingdom-admins",
"status": "draft-unsigned",
"submitted": false,
"one_question_per_memo": true,
"approve_all_forbidden": true,
"agent_disposition_forbidden": true,
"ordinal": [
{
"n": 1,
"memo_id": "infd-20260914-d01",
"workplan": "CUST-WP-0038",
"task": "CUST-WP-0038-T08",
"hub_task_prefix": "57412aef",
"question": "After HA failover and restore drills pass, retire WSL2 as a State Hub fallback?",
"memo": "infd-20260914-d01.memo.json",
"packet": "infd-20260914-d01.packet.md",
"packet_hash": "sha256:29fe7445e1f6794402bda2f9c4cab4258021d892515e1922819d8b67cb9e6b46",
"required_highlight": "infd-20260914-d01-h1"
},
{
"n": 2,
"memo_id": "infd-20260914-d02",
"workplan": "HFACT-WP-0001",
"task": "HFACT-WP-0001-T03",
"hub_task_prefix": "67c80db1",
"question": "Confirm the existing operator-group claim for CCR-2026-0019 as required by the factory identity/audit/approval path?",
"memo": "infd-20260914-d02.memo.json",
"packet": "infd-20260914-d02.packet.md",
"packet_hash": "sha256:dffe006442779e3076526d72bd481a163b32b3bfe84c51952e1f2dcd53174e72",
"required_highlight": "infd-20260914-d02-h1"
},
{
"n": 3,
"memo_id": "infd-20260914-d03",
"workplan": "MASON-WP-0005",
"task": "Review the plan and obtain the decision",
"hub_task_prefix": "48a2b4ec",
"question": "Accept the fluid-telegram operator credential lane plan so construction may proceed?",
"memo": "infd-20260914-d03.memo.json",
"packet": "infd-20260914-d03.packet.md",
"packet_hash": "sha256:d44745e5a6281e3f21cfbe5ac9c758cd06b5c7ddb49fd4b468aebcbeb2d301a0",
"required_highlight": "infd-20260914-d03-h1"
},
{
"n": 4,
"memo_id": "infd-20260914-d04",
"workplan": "RCLK-WP-0002",
"task": "RCLK-WP-0002-T01",
"hub_task_prefix": "437734bd",
"question": "Confirm ecosystem ownership and the security role for Railiance Clock as specified?",
"memo": "infd-20260914-d04.memo.json",
"packet": "infd-20260914-d04.packet.md",
"packet_hash": "sha256:d7814954d261031ed61627e340d6beadecd8c559fb1a24c9fecb752b30cdbc53",
"required_highlight": "infd-20260914-d04-h1"
}
]
}

View file

@ -0,0 +1 @@
{"approval_binding_digest":null,"approval_id":null,"binding":{"justification":null,"principal":{"display_name":"Named reviewer in net-kingdom-admins","id":"pending-human-session","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"prod","id":"cust-wp-0038-t08","kind":"operating-model","label":"Retire WSL2 State Hub fallback","requires_new_bind":false},"terms":null},"binding_level":"organizational","brief":"CUST-WP-0038-T08 requires explicit approval after drills. This memo is that approval question. It does not assert that the drills have already passed.","highlights":[{"id":"infd-20260914-d01-h1","item_id":"infd-20260914-d01-packet","locator":{"kind":"work_record","task":"CUST-WP-0038-T08","workplan":"CUST-WP-0038"},"note":"Approve only if you accept that WSL2 leaves both normal and fallback operating models.","required_ack":true,"severity":"critical"}],"id":"infd-20260914-d01","locale":"en","packet":[{"hash":"sha256:29fe7445e1f6794402bda2f9c4cab4258021d892515e1922819d8b67cb9e6b46","item_id":"infd-20260914-d01-packet","label":"infd-20260914-d01-packet"}],"question":"After HA failover and restore drills pass, retire WSL2 as a State Hub fallback?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}

View file

@ -0,0 +1,15 @@
# CUST-WP-0038-T08 — retire WSL2 fallback
Blocking workplan: CUST-WP-0038
Blocking task: CUST-WP-0038-T08 (hub prefix 57412aef, needs_human)
## Question
After HA failover and restore drills pass, retire WSL2 as a State Hub fallback?
## One act
Founder/operator approval of the retirement once T05/T06 drills have passed.
This memo does not skip the drills.
## Must not
- Treat this accept as proof that drills already passed
- Keep WSL2 as an undeclared fallback after accept

View file

@ -0,0 +1 @@
{"approval_binding_digest":null,"approval_id":null,"binding":{"justification":null,"principal":{"display_name":"Named reviewer in net-kingdom-admins","id":"pending-human-session","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"prod","id":"ccr-2026-0019","kind":"ccr","label":"Existing operator-group claim for factory path","requires_new_bind":false},"terms":null},"binding_level":"organizational","brief":"HFACT-WP-0001-T03 waits on NetKingdom/KeyCape confirmation of the exact existing operator-group claim. This memo is that confirmation question. It does not mint a new group.","highlights":[{"id":"infd-20260914-d02-h1","item_id":"infd-20260914-d02-packet","locator":{"kind":"work_record","task":"HFACT-WP-0001-T03","workplan":"HFACT-WP-0001"},"note":"Confirm the existing claim. Do not invent a new group or CCR.","required_ack":true,"severity":"critical"}],"id":"infd-20260914-d02","locale":"en","packet":[{"hash":"sha256:dffe006442779e3076526d72bd481a163b32b3bfe84c51952e1f2dcd53174e72","item_id":"infd-20260914-d02-packet","label":"infd-20260914-d02-packet"}],"question":"Confirm the existing operator-group claim for CCR-2026-0019 as required by the factory identity/audit/approval path?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}

View file

@ -0,0 +1,16 @@
# HFACT-WP-0001-T03 — confirm CCR-2026-0019 operator-group
Blocking workplan: HFACT-WP-0001
Blocking task: HFACT-WP-0001-T03 (hub prefix 67c80db1, needs_human)
## Question
Confirm the existing operator-group claim for CCR-2026-0019 as required by the
factory identity, audit and approval path?
## One act
Confirm the already-named operator-group claim. Required-owner review and
attended apply remain separate acts.
## Must not
- Create a new CCR in this memo
- Collapse T03 with T05 live worker proof

View file

@ -0,0 +1 @@
{"approval_binding_digest":null,"approval_id":null,"binding":{"justification":null,"principal":{"display_name":"Named reviewer in net-kingdom-admins","id":"pending-human-session","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"prod","id":"mason-wp-0005","kind":"workplan","label":"fluid-telegram operator credential lane plan","requires_new_bind":false},"terms":null},"binding_level":"organizational","brief":"MASON-WP-0005 has a review/decision task before building the operator lane. This memo is that plan accept. Path/OIDC binding (another task) is a separate memo if needed later.","highlights":[{"id":"infd-20260914-d03-h1","item_id":"infd-20260914-d03-packet","locator":{"kind":"work_record","task":"Review the plan and obtain the decision","workplan":"MASON-WP-0005"},"note":"Accepting the plan is not confirming the OIDC binding and is not a BotFather login.","required_ack":true,"severity":"critical"}],"id":"infd-20260914-d03","locale":"en","packet":[{"hash":"sha256:d44745e5a6281e3f21cfbe5ac9c758cd06b5c7ddb49fd4b468aebcbeb2d301a0","item_id":"infd-20260914-d03-packet","label":"infd-20260914-d03-packet"}],"question":"Accept the fluid-telegram operator credential lane plan so construction may proceed?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}

View file

@ -0,0 +1,15 @@
# MASON-WP-0005 — accept operator lane plan
Blocking workplan: MASON-WP-0005
Blocking task: Review the plan and obtain the decision (hub prefix 48a2b4ec)
## Question
Accept the fluid-telegram operator credential lane plan so construction may proceed?
## One act
Organizational accept of the written plan. BotFather login, DNS, and OIDC
binding remain other tasks.
## Must not
- Perform BotFather login in this sitting
- Record a telegram token

View file

@ -0,0 +1 @@
{"approval_binding_digest":null,"approval_id":null,"binding":{"justification":null,"principal":{"display_name":"Named reviewer in net-kingdom-admins","id":"pending-human-session","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"prod","id":"rclk-wp-0002-t01","kind":"workplan","label":"Railiance Clock ownership and security role","requires_new_bind":false},"terms":null},"binding_level":"organizational","brief":"RCLK-WP-0002-T01 is the owner/security-role confirmation. This memo is that confirmation. It does not change OS clocks or admit railiance01 as production time authority by itself.","highlights":[{"id":"infd-20260914-d04-h1","item_id":"infd-20260914-d04-packet","locator":{"kind":"work_record","task":"RCLK-WP-0002-T01","workplan":"RCLK-WP-0002"},"note":"Confirmation is ownership/role, not a clock change on any host.","required_ack":true,"severity":"critical"}],"id":"infd-20260914-d04","locale":"en","packet":[{"hash":"sha256:d7814954d261031ed61627e340d6beadecd8c559fb1a24c9fecb752b30cdbc53","item_id":"infd-20260914-d04-packet","label":"infd-20260914-d04-packet"}],"question":"Confirm ecosystem ownership and the security role for Railiance Clock as specified?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}

View file

@ -0,0 +1,15 @@
# RCLK-WP-0002-T01 — confirm clock ownership
Blocking workplan: RCLK-WP-0002
Blocking task: RCLK-WP-0002-T01 (hub prefix 437734bd)
## Question
Confirm ecosystem ownership and the security role for Railiance Clock as specified?
## One act
Owner confirmation of the documented role split (railiance-infra for host UTC,
clock repo for specs). No NTP or OS change is authorized by this memo.
## Must not
- Change ntp.ubuntu.com or systemd-timesyncd from this sitting
- Treat this as RCLK-WP-0004 pilot admission