coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare owner-reviewed zlib-only native release decision

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 12:37:05 +02:00
parent 8d093c57c2
commit 312ab97e87
597 changed files with 119341 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

102
workplans/ADHOC-2026-10-11.md
View file

@ -303,3 +303,105 @@ No owner edits, native operation, publication or credentials; T05progress and
WP0009active remain. Distinct published/installed proof and founder approval
remain pending.
Final review: docs/reviews/2026-10-11-zlib-candidate-product-owner-complete-ack.md.
## Review distinct T05 native release proposal source preparation
```task
id: INFD-WP-ADHOC-2026-10-11-T09
status: done
priority: medium
```
Completed source-only Product review preparation for NEW distinct zlib release
trial infd-zlib-20261011-r1. Initial requested67 manifest1e4b5a308294d588c7bf75e5d27eb475a1ed2f75ec8c598f4db285cf01547fb2
changed during source reads to68-path manifest81adb9e1749d6bd9f19755a2bbd7b501589ea782445537bbbfe925e1d9f8fa47.
Stopped approval and froze81ad source; all68 staged hashes independently verify.
Current19 synthetic helper tests pass, but independent mocked source probes
reproduce remote keyword signature failure, missing frozen snapshot/operation
intent forwarding and empty detector/package coverage accepted as full scan.
Initial missing fresh_scan observation was corrected by81ad; not a current
missing-function finding. Readbacks are source-only, no actual phase failure.
Scan NextUpdateOct11 precedes release deadlineOct12: fresh same-image rescan is
explicitly permitted/required but coverage gate still needs correction.
Completed T09 record precedes formal changes-requested entry. Maker will refreeze
a separate corrected source; exact review still required, no native approval.
T05progress/WP0009active; originalT04/R2 journals/helpers and unpromotedIN10
remain unchanged. No publication/native command, owner edit, credentials or
private DB/customer data access.
Review: docs/reviews/2026-10-11-zlib-release-product-owner-initial-review.md.
Evidence: docs/evidence/2026-10-11-zlib-release-product-initial-review/.
**Immutable143 refinement assessment, same completed T09:** all143 refined
hashes verify for manifestf170b34d8846919b18520264e7ba96e2ac11a3bce7899bc5710fcb0d22f4af29
and unchanged published29/6ba2 proof. All25 source tests pass; independent original
remote keyword/intent and empty-coverage counterexamples are corrected. Gzip
bundle losslessly binds exact source. Two remaining Product findings prevent
acknowledgment: actual typed document decoder rejects duplicate SHA for sealed
live and identical rollback JSON; post-Ready command exports freeform note/reasons
and unknown review body in synthetic sentinel fixture. Require unique command
digests and exact typed packet check; require closed bounded structural receipt
allowlist/sentinel tests with actual canonical provider path unchanged.
Initialc67 exact20files/manifest and historical observations remain preserved;
original67 full source unavailable is explicitly disclosed, never invented.
No native phase failure/provider request/credentials/owner write. This completed
source-refinement record precedes formal143 changes-requested entry.
Review: docs/reviews/2026-10-11-zlib-release-product-owner-refined-findings.md.
T05progress/WP0009active; final corrected freeze and founder approval pending.
**Recovery authority dependency retained for next proposal:** current143 demands
fresh service-dependent founder readback before rollback as well as release.
Candidate/service failure can prevent that readback even though mechanical
rollback itself is independent of candidate readiness/DB. Root/Platform identified
this further proposal gap. Any newly proposed preauthenticated limited recovery
authority must be explicit in a new human packet, bounded to same763/c96/image-only
latestDB retention/time/deadline, exclude401/403/revoked/mismatch fallbacks and
disclose later-revocation uncertainty; current143 grants none.
**Exact481 actual provider-contract follow-through, same completed T09:**
all481 manifest3f1ce7ed678a457f73ab6486c7e81ef3360daf4f7ec1196f3031c3ffaace57ec
hashes verify; all36 source tests pass. Typed native decoder now accepts12unique
contents/13labels and defaultJSON register204591bytes; exactgzip bundle verifies.
Prior wiring/coverage/document/privacy findings are corrected. Proposed manual
outage recovery is explicit new-human consent only, bounded30min/deadline and
same763/c96/latestDB, with no401/403/revoked/conflict/other-phase reuse; separate
rollback completion and Ready recovered verification required. No currentgo.
Deep actual provider-source check finds final metadata validator still requires
root-added memo_id absent from real native outcomes body, and rejects native
null non-submission/prepared/in_flight/system metadata. Five isolated source
counterexamples reproduce rejection. Require exact native-contract fixtures
and fixed-request-context memo correlation without inventing provider fields.
Allad63564files/manifest and earlier findings remain exact historical bytes;
missing original67 fullsnapshot remains disclosed. Completed refinement record
precedes this formal changes-requested entry. No native/provider request, private
DB/customer data, real credentials, owner edit/push or taskclosure.
Review: docs/reviews/2026-10-11-zlib-release-product-owner-native-contract-review.md.
**Root-selected minimal correction:** fixed authenticated source1 GET/HTTP200/
observation time with native response review=None/dict and dispositions=list of
dicts, output only has_review/disposition_count. Memo correlation derives from
fixed request, optional response ID must match. No review/disposition/state/actor
body output or consent claim; actual founder authority remains separate. Exact
corrected source/native-shape/sentinel fixtures still require review before ACK.
**Exact509 final source acknowledgment, same completed T09:** independently
verified all509 hashes for manifest767c6e93adfa1a844b1e25947f33e782b087a747452575f056b3df25bc88873c.
All38 source/synthetic tests pass. Original5 native-contract counterexamples now
accept without body/state/actor output;4 additional correlation/shape mutations
refuse. Minimal postReady proof uses fixed-route derived requestidentity/source1,
HTTP200/UTC/has_review/dispositioncount only, with no approval/PDPverdict inference.
Actual sourceLifecycleService native-shape fixture is synthetic, no realDB/PDP.
Typed12unique contents/13labels/register207511B and losslessgzip source bundle
verify. Prior481 source paths/Product135+64 map entries reconstruct exact hashes;
complete5365327 prior135files+manifest preserved as deduplicated hashobjects/map.
Proposed30minute outage consent remains newhumanpacket-only, not currentgo;
ordinaryfreshrootconsent/scan and separate recoveredverify gates remain distinct.
All earlier findings remain historical, missing67fullsnapshot disclosed; no
backfilledsuccess/newtrial/nativeoperation/credentials/ownerwrites. Completed
refinement record precedes final technical acknowledgment. T05progress/WP9active,
newfounderacceptance/actualinstalled/scan/providerproof still required. Rootfinal
2ACK/row19 memo-reference rebinding needs bounded confirmation before humanpost.
Review: docs/reviews/2026-10-11-zlib-release-product-owner-final-ack.md.

3
workplans/INFD-WP-0009-lifecycle-consumer-pin-repair.md
View file

@ -186,3 +186,6 @@ and10purpose checks pass. Source/evidence:docs/evidence/2026-10-11-zlib-remediat
T05progress/planactive:actualownerCIpublishedprovenance/fullscan/SBOM,distinctnative
founderreleaseapproval andactualinstalledr1/runtime/fullrescan still required.
NoT04/nativec96/helper/journal/DB/ConfigMap/PVC/identity/policy changes.
Prepared distinct source-only T05 zlib85091 native release packet in `docs/evidence/2026-10-11-zlib-image-release/`: actual published image f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23, full scan zero44packages, fresh image-only candidate and unchanged-baseline rollback server dry-runs. New proposed close-downitem19 manualoutagerecovery term (not approved): freshrootconfirmedpre-releaseacceptancecache, same763/c96 oneDeployment/latestDBpreservingrollback≤30minANDdeadline, forbid401/403/revoked/conflict/mismatch/healthyservice/otherphase/futurereuse; subsequentrevocationuncheckableduringoutage explicitlyrequiresNEWhumanconsent. Product/Platform changed-requested143 reviews and fullbytes retained; typedproviderallowlist omitsfreeform fields, ephemeralPod guard anddeduplicateddocumentdecode tests added. New private drill/cutover custody, no-network schema5 clone, immutable prior T04 helpers/journals, explicitfalse request plus Argo bool-omitempty completion guards and separate post-Ready authenticated canonical lifecycle/PDP proof. Product/Platform exact acknowledgment and NEW founder informed decision still required before protected database/workload action; old T04 approval is excluded. T05 remains progress and risk stays open until actual installed acceptance/native rescan. INFD-IN-0010 remains unpromoted.