coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record requester delivery approval and attended execution dependency

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-04 23:03:26 +02:00
parent c084600082
commit 3e9ca473dd
2 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
docs/requester-workload-owner-review.md
View file

@ -98,3 +98,19 @@ composition gap only. The live CCR remains proposed; its current SHA256 is
ab4cd7c15192ebe98e17b0c40a188ae67616c63cc796d9b807adba7c39f2edb3.
No new design decision is requested. Exact live delivery approval, attended
OpenBao login, native custody/rotation proof and cutover acceptance remain.
## Exact delivery approval recorded — 2026-10-04
Founder answered "I approve" to the final requester delivery packet. Platform
commit a7bc33b records approved CCR-2026-0032 and the reviewed intended binding;
approved CCR SHA256 is
c54dd86fd1bd754e64b135f02cac8d9a8f4db314cb3ca44c9645565aa816eee7.
A fresh explicit SubjectAccessReview confirms the current external-secrets
controller can create tokens for informed-decision/informed-decision-eso. No
token was minted. Native account auth and delivery remain to be proven.
The owner metadata child accepts the approved source and exact digest offline.
The founder must run Platform's updated attended checklist in their terminal.
No repeated requester-delivery approval is needed. Native metadata application,
ESO delivery, negative checks and cleanup receipts are pending; the broader
lifecycle cutover and issuer rotation still require their separate reviewed scope.