coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record approved production lifecycle cutover and native evidence

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-05 00:15:09 +02:00
parent b5b5a5aa7f
commit 3fe029d49e
11 changed files with 1059 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

687
docs/evidence/2026-10-05-lifecycle-cutover/deployment-pins-before-restart.json Normal file
View file

@ -0,0 +1,687 @@
[
{
"namespace": "informed-decision",
"name": "informed-decision",
"generation": 21,
"template": {
"metadata": {
"annotations": {
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
},
"labels": {
"app.kubernetes.io/component": "review",
"app.kubernetes.io/name": "informed-decision"
}
},
"spec": {
"automountServiceAccountToken": false,
"containers": [
{
"env": [
{
"name": "INFD_KEYCAPE_ISSUER",
"value": "https://kc.coulomb.social"
},
{
"name": "INFD_CONTAINER_CONFIG",
"value": "/configuration/runtime.json"
}
],
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:804d89fb0bb3d691720380eedde4f361133bada717d1773c2eb349004346ebf1",
"imagePullPolicy": "IfNotPresent",
"livenessProbe": {
"failureThreshold": 3,
"httpGet": {
"path": "/healthz",
"port": "http",
"scheme": "HTTP"
},
"periodSeconds": 10,
"successThreshold": 1,
"timeoutSeconds": 2
},
"name": "informed-decision",
"ports": [
{
"containerPort": 8080,
"name": "http",
"protocol": "TCP"
},
{
"containerPort": 8081,
"name": "workload",
"protocol": "TCP"
}
],
"readinessProbe": {
"failureThreshold": 3,
"httpGet": {
"path": "/healthz",
"port": "http",
"scheme": "HTTP"
},
"periodSeconds": 10,
"successThreshold": 1,
"timeoutSeconds": 2
},
"resources": {
"limits": {
"cpu": "500m",
"memory": "256Mi"
},
"requests": {
"cpu": "5m",
"memory": "64Mi"
}
},
"securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL"
]
},
"readOnlyRootFilesystem": true
},
"startupProbe": {
"failureThreshold": 12,
"httpGet": {
"path": "/healthz",
"port": "http",
"scheme": "HTTP"
},
"periodSeconds": 10,
"successThreshold": 1,
"timeoutSeconds": 2
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/data",
"name": "data"
},
{
"mountPath": "/run/informed-decision",
"name": "runtime"
},
{
"mountPath": "/tmp",
"name": "tmp"
},
{
"mountPath": "/configuration",
"name": "configuration",
"readOnly": true
},
{
"mountPath": "/var/run/secrets/informed-decision/policy",
"name": "caller",
"readOnly": true
},
{
"mountPath": "/var/run/secrets/informed-decision/audit",
"name": "audit",
"readOnly": true
},
{
"mountPath": "/var/run/secrets/informed-decision/kubernetes",
"name": "kubernetes-api",
"readOnly": true
},
{
"mountPath": "/workload-registry",
"name": "workload-registry",
"readOnly": true
},
{
"mountPath": "/var/run/secrets/informed-decision/requester",
"name": "sitting-requester",
"readOnly": true
}
]
}
],
"dnsPolicy": "ClusterFirst",
"restartPolicy": "Always",
"schedulerName": "default-scheduler",
"securityContext": {
"fsGroup": 10001,
"fsGroupChangePolicy": "OnRootMismatch",
"runAsGroup": 10001,
"runAsNonRoot": true,
"runAsUser": 10001,
"seccompProfile": {
"type": "RuntimeDefault"
}
},
"serviceAccount": "review",
"serviceAccountName": "review",
"terminationGracePeriodSeconds": 45,
"volumes": [
{
"name": "data",
"persistentVolumeClaim": {
"claimName": "informed-decision-data"
}
},
{
"emptyDir": {
"medium": "Memory",
"sizeLimit": "16Mi"
},
"name": "runtime"
},
{
"emptyDir": {
"medium": "Memory",
"sizeLimit": "16Mi"
},
"name": "tmp"
},
{
"configMap": {
"defaultMode": 292,
"name": "informed-decision-runtime-92d01402eb05"
},
"name": "configuration"
},
{
"name": "caller",
"projected": {
"defaultMode": 288,
"sources": [
{
"serviceAccountToken": {
"audience": "flex-auth",
"expirationSeconds": 3600,
"path": "token"
}
}
]
}
},
{
"name": "audit",
"secret": {
"defaultMode": 288,
"items": [
{
"key": "token",
"path": "token"
}
],
"secretName": "informed-decision-audit"
}
},
{
"name": "kubernetes-api",
"projected": {
"defaultMode": 288,
"sources": [
{
"serviceAccountToken": {
"expirationSeconds": 600,
"path": "token"
}
},
{
"configMap": {
"items": [
{
"key": "ca.crt",
"path": "ca.crt"
}
],
"name": "kube-root-ca.crt"
}
}
]
}
},
{
"configMap": {
"defaultMode": 292,
"name": "informed-decision-workload-registry"
},
"name": "workload-registry"
},
{
"name": "sitting-requester",
"secret": {
"defaultMode": 288,
"items": [
{
"key": "client-secret",
"path": "client-secret"
}
],
"optional": false,
"secretName": "informed-decision-sitting-requester"
}
}
]
}
},
"ready": 1
},
{
"namespace": "state-hub",
"name": "state-hub-memo-dispatch",
"generation": 2,
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/component": "memo-dispatch",
"app.kubernetes.io/name": "state-hub"
}
},
"spec": {
"automountServiceAccountToken": false,
"containers": [
{
"image": "forgejo.coulomb.social/coulomb/state-hub-memo-dispatch@sha256:410fb6b6c9fd7a7ee0b63d727fd3249fb3ae13943421d6a5ce88b7ad2520bd2f",
"imagePullPolicy": "IfNotPresent",
"name": "dispatcher",
"resources": {
"limits": {
"cpu": "100m",
"memory": "96Mi"
},
"requests": {
"cpu": "5m",
"memory": "24Mi"
}
},
"securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL"
]
},
"readOnlyRootFilesystem": true
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/data",
"name": "queue"
},
{
"mountPath": "/var/run/secrets/state-hub/informed-decision",
"name": "intake-caller",
"readOnly": true
}
]
}
],
"dnsPolicy": "ClusterFirst",
"initContainers": [
{
"command": [
"python",
"-c",
"import os, stat\np='/data/private'\ntry:\n os.mkdir(p, 0o700)\nexcept FileExistsError:\n pass\nfd=os.open(p, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW)\ntry:\n info=os.fstat(fd)\n if info.st_uid != os.getuid():\n raise SystemExit('queue owner refused')\n mode=stat.S_IMODE(info.st_mode)\n if mode == 0o2700 and not os.listdir(fd):\n os.fchmod(fd, 0o700)\n elif mode != 0o700:\n raise SystemExit('queue mode refused')\nfinally:\n os.close(fd)\n"
],
"image": "forgejo.coulomb.social/coulomb/state-hub-memo-dispatch@sha256:410fb6b6c9fd7a7ee0b63d727fd3249fb3ae13943421d6a5ce88b7ad2520bd2f",
"imagePullPolicy": "IfNotPresent",
"name": "prepare-private-queue",
"resources": {
"limits": {
"cpu": "100m",
"memory": "96Mi"
},
"requests": {
"cpu": "5m",
"memory": "24Mi"
}
},
"securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL"
]
},
"readOnlyRootFilesystem": true
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/data",
"name": "queue"
}
]
}
],
"restartPolicy": "Always",
"schedulerName": "default-scheduler",
"securityContext": {
"fsGroup": 10001,
"fsGroupChangePolicy": "OnRootMismatch",
"runAsGroup": 10001,
"runAsNonRoot": true,
"runAsUser": 10001,
"seccompProfile": {
"type": "RuntimeDefault"
}
},
"serviceAccount": "state-hub",
"serviceAccountName": "state-hub",
"terminationGracePeriodSeconds": 15,
"volumes": [
{
"name": "queue",
"persistentVolumeClaim": {
"claimName": "state-hub-memo-dispatch"
}
},
{
"name": "intake-caller",
"projected": {
"defaultMode": 288,
"sources": [
{
"serviceAccountToken": {
"audience": "informed-decision-intake",
"expirationSeconds": 600,
"path": "intake-token"
}
},
{
"serviceAccountToken": {
"audience": "informed-decision-lifecycle",
"expirationSeconds": 600,
"path": "lifecycle-token"
}
}
]
}
}
]
}
},
"ready": 1
},
{
"namespace": "flex-auth",
"name": "flex-auth-informed-decision-sitting",
"generation": 12,
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/instance": "flex-auth-informed-decision-sitting",
"app.kubernetes.io/name": "flex-auth-informed-decision-sitting",
"app.kubernetes.io/part-of": "flex-auth"
}
},
"spec": {
"automountServiceAccountToken": false,
"containers": [
{
"args": [
"serve",
"--addr",
"0.0.0.0:8080",
"--registry",
"/opt/flex-auth/examples/informed-decision-lifecycle-review/registry.json",
"--policy",
"/opt/flex-auth/examples/informed-decision-lifecycle-review/policy.md",
"--caller-auth-mode",
"enforce",
"--caller-kubernetes-url",
"https://10.43.0.1",
"--caller-binding",
"informed-decision=system:serviceaccount:informed-decision:review"
],
"image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99",
"imagePullPolicy": "IfNotPresent",
"livenessProbe": {
"failureThreshold": 3,
"httpGet": {
"path": "/healthz",
"port": "http",
"scheme": "HTTP"
},
"periodSeconds": 20,
"successThreshold": 1,
"timeoutSeconds": 1
},
"name": "flex-auth",
"ports": [
{
"containerPort": 8080,
"name": "http",
"protocol": "TCP"
}
],
"readinessProbe": {
"failureThreshold": 3,
"httpGet": {
"path": "/healthz",
"port": "http",
"scheme": "HTTP"
},
"periodSeconds": 5,
"successThreshold": 1,
"timeoutSeconds": 1
},
"resources": {
"limits": {
"cpu": "300m",
"memory": "192Mi"
},
"requests": {
"cpu": "5m",
"memory": "32Mi"
}
},
"securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL"
]
},
"readOnlyRootFilesystem": true
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/var/run/secrets/flex-auth-reviewer",
"name": "flex-auth-reviewer",
"readOnly": true
}
]
}
],
"dnsPolicy": "ClusterFirst",
"restartPolicy": "Always",
"schedulerName": "default-scheduler",
"securityContext": {
"fsGroup": 65532,
"runAsGroup": 65532,
"runAsNonRoot": true,
"runAsUser": 65532,
"seccompProfile": {
"type": "RuntimeDefault"
}
},
"serviceAccount": "flex-auth-informed-decision-sitting",
"serviceAccountName": "flex-auth-informed-decision-sitting",
"terminationGracePeriodSeconds": 30,
"volumes": [
{
"name": "flex-auth-reviewer",
"projected": {
"defaultMode": 288,
"sources": [
{
"serviceAccountToken": {
"expirationSeconds": 3600,
"path": "token"
}
},
{
"configMap": {
"items": [
{
"key": "ca.crt",
"path": "ca.crt"
}
],
"name": "kube-root-ca.crt"
}
}
]
}
}
]
}
},
"ready": 1
},
{
"namespace": "flex-auth",
"name": "flex-auth-informed-decision-lifecycle",
"generation": 1,
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/instance": "flex-auth-informed-decision-lifecycle",
"app.kubernetes.io/name": "flex-auth-informed-decision-lifecycle",
"app.kubernetes.io/part-of": "flex-auth"
}
},
"spec": {
"automountServiceAccountToken": false,
"containers": [
{
"args": [
"serve",
"--addr",
"0.0.0.0:8080",
"--registry",
"/opt/flex-auth/examples/informed-decision-lifecycle/registry.json",
"--policy",
"/opt/flex-auth/examples/informed-decision-lifecycle/policy.md",
"--caller-auth-mode",
"enforce",
"--caller-kubernetes-url",
"https://10.43.0.1",
"--caller-binding",
"informed-decision=system:serviceaccount:informed-decision:review"
],
"image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99",
"imagePullPolicy": "IfNotPresent",
"livenessProbe": {
"failureThreshold": 3,
"httpGet": {
"path": "/healthz",
"port": "http",
"scheme": "HTTP"
},
"periodSeconds": 20,
"successThreshold": 1,
"timeoutSeconds": 1
},
"name": "flex-auth",
"ports": [
{
"containerPort": 8080,
"name": "http",
"protocol": "TCP"
}
],
"readinessProbe": {
"failureThreshold": 3,
"httpGet": {
"path": "/healthz",
"port": "http",
"scheme": "HTTP"
},
"periodSeconds": 5,
"successThreshold": 1,
"timeoutSeconds": 1
},
"resources": {
"limits": {
"cpu": "300m",
"memory": "192Mi"
},
"requests": {
"cpu": "5m",
"memory": "32Mi"
}
},
"securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL"
]
},
"readOnlyRootFilesystem": true
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/var/run/secrets/flex-auth-reviewer",
"name": "flex-auth-reviewer",
"readOnly": true
}
]
}
],
"dnsPolicy": "ClusterFirst",
"restartPolicy": "Always",
"schedulerName": "default-scheduler",
"securityContext": {
"fsGroup": 65532,
"runAsGroup": 65532,
"runAsNonRoot": true,
"runAsUser": 65532,
"seccompProfile": {
"type": "RuntimeDefault"
}
},
"serviceAccount": "flex-auth-informed-decision-lifecycle",
"serviceAccountName": "flex-auth-informed-decision-lifecycle",
"terminationGracePeriodSeconds": 30,
"volumes": [
{
"name": "flex-auth-reviewer",
"projected": {
"defaultMode": 288,
"sources": [
{
"serviceAccountToken": {
"expirationSeconds": 3600,
"path": "token"
}
},
{
"configMap": {
"items": [
{
"key": "ca.crt",
"path": "ca.crt"
}
],
"name": "kube-root-ca.crt"
}
}
]
}
}
]
}
},
"ready": 1
}
]

48
docs/evidence/2026-10-05-lifecycle-cutover/lifecycle-flow.json Normal file
View file

@ -0,0 +1,48 @@
{
"register": {
"event_id": "8bc87458-c042-4e45-883d-d7c189a089f7",
"memo_id": "infd-20261005-lifecycle-production-proof",
"resource": "/v1/decisions/infd-20261005-lifecycle-production-proof?version=1",
"version": 1,
"workspace_url": "https://decisions.coulomb.social/decisions/infd-20261005-lifecycle-production-proof?version=1"
},
"second_register": {
"event_id": "ef7c9698-8466-45c8-872e-d6375b11bfa7",
"memo_id": "infd-20261005-lifecycle-recovery-notes",
"resource": "/v1/decisions/infd-20261005-lifecycle-recovery-notes?version=1",
"version": 1,
"workspace_url": "https://decisions.coulomb.social/decisions/infd-20261005-lifecycle-recovery-notes?version=1"
},
"source": {
"event_id": "db6229d0-ed8e-460a-8c56-778f2477244c",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 1
},
"evaluation": {
"event_id": "15249473-4736-4f1c-bb6c-d130aeb473c8",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 1
},
"comment": {
"event_id": "9b51d039-4ded-41b4-b083-178644d25eb4",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 1
},
"revise": {
"event_id": "85c3b0aa-46f9-4e96-b8eb-e7c48f70e732",
"memo_id": "infd-20261005-lifecycle-production-proof",
"resource": "/v1/decisions/infd-20261005-lifecycle-production-proof?version=2",
"version": 2,
"workspace_url": "https://decisions.coulomb.social/decisions/infd-20261005-lifecycle-production-proof?version=2"
},
"publish": {
"event_id": "9a363333-5891-462a-af39-54e3161b7f6b",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 2
},
"retrieve_version": 2,
"search_count": 2,
"review_memo_id": "review-0d55a416-178c-46f5-b74b-b9b668390448",
"envelope_sha256": "3eac156d92e74674e8f516e5eb489e2b052621e7ce207c471db67df18c0806fb",
"enqueue_status": "pending"
}

154
docs/evidence/2026-10-05-lifecycle-cutover/native-audit-before-restart.json Normal file
View file

@ -0,0 +1,154 @@
{
"events": [
{
"id": "8bc87458-c042-4e45-883d-d7c189a089f7",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 1,
"kind": "registered",
"at": "2026-10-04T22:07:33.060609+00:00"
},
{
"id": "ef7c9698-8466-45c8-872e-d6375b11bfa7",
"memo_id": "infd-20261005-lifecycle-recovery-notes",
"version": 1,
"kind": "registered",
"at": "2026-10-04T22:07:33.131538+00:00"
},
{
"id": "db6229d0-ed8e-460a-8c56-778f2477244c",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 1,
"kind": "source",
"at": "2026-10-04T22:07:33.201167+00:00"
},
{
"id": "15249473-4736-4f1c-bb6c-d130aeb473c8",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 1,
"kind": "evaluation",
"at": "2026-10-04T22:07:33.254457+00:00"
},
{
"id": "9b51d039-4ded-41b4-b083-178644d25eb4",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 1,
"kind": "comment",
"at": "2026-10-04T22:07:33.300510+00:00"
},
{
"id": "85c3b0aa-46f9-4e96-b8eb-e7c48f70e732",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 2,
"kind": "revised",
"at": "2026-10-04T22:07:33.355967+00:00"
},
{
"id": "9a363333-5891-462a-af39-54e3161b7f6b",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 2,
"kind": "published",
"at": "2026-10-04T22:07:33.401132+00:00"
},
{
"id": "5a2e81e3-70fd-4ad4-8be4-140c5d88a8b8",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 2,
"kind": "review_requested",
"at": "2026-10-04T22:07:33.595603+00:00"
},
{
"id": "240451dc-4ef6-43d6-a5cd-99c098ae0d14",
"memo_id": "infd-20261005-lifecycle-production-proof",
"version": 2,
"kind": "source",
"at": "2026-10-04T22:09:20.847454+00:00"
}
],
"receipts": [
{
"id": "8bc87458-c042-4e45-883d-d7c189a089f7",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.060609+00:00",
"state": "delivered",
"receiver_reference": "audit:8bc87458-c042-4e45-883d-d7c189a089f7"
},
{
"id": "ef7c9698-8466-45c8-872e-d6375b11bfa7",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.131538+00:00",
"state": "delivered",
"receiver_reference": "audit:ef7c9698-8466-45c8-872e-d6375b11bfa7"
},
{
"id": "db6229d0-ed8e-460a-8c56-778f2477244c",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.201167+00:00",
"state": "delivered",
"receiver_reference": "audit:db6229d0-ed8e-460a-8c56-778f2477244c"
},
{
"id": "15249473-4736-4f1c-bb6c-d130aeb473c8",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.254457+00:00",
"state": "delivered",
"receiver_reference": "audit:15249473-4736-4f1c-bb6c-d130aeb473c8"
},
{
"id": "9b51d039-4ded-41b4-b083-178644d25eb4",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.300510+00:00",
"state": "delivered",
"receiver_reference": "audit:9b51d039-4ded-41b4-b083-178644d25eb4"
},
{
"id": "85c3b0aa-46f9-4e96-b8eb-e7c48f70e732",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.355967+00:00",
"state": "delivered",
"receiver_reference": "audit:85c3b0aa-46f9-4e96-b8eb-e7c48f70e732"
},
{
"id": "9a363333-5891-462a-af39-54e3161b7f6b",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.401132+00:00",
"state": "delivered",
"receiver_reference": "audit:9a363333-5891-462a-af39-54e3161b7f6b"
},
{
"id": "5a2e81e3-70fd-4ad4-8be4-140c5d88a8b8",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:07:33.595603+00:00",
"state": "delivered",
"receiver_reference": "audit:5a2e81e3-70fd-4ad4-8be4-140c5d88a8b8"
},
{
"id": "d94d567c-f7e0-48f1-980e-9609d69c5eec",
"class": "informed-decision.memo.posed",
"at": "2026-10-04T22:07:34.878488+00:00",
"state": "delivered",
"receiver_reference": "audit:d94d567c-f7e0-48f1-980e-9609d69c5eec"
},
{
"id": "240451dc-4ef6-43d6-a5cd-99c098ae0d14",
"class": "informed-decision.lifecycle",
"at": "2026-10-04T22:09:20.847454+00:00",
"state": "delivered",
"receiver_reference": "audit:240451dc-4ef6-43d6-a5cd-99c098ae0d14"
}
],
"receiver_counts": {
"audit-core.heartbeat": 2,
"informed-decision.lifecycle": 9,
"informed-decision.memo.posed": 1
},
"local_counts": {
"audit-core.heartbeat": 2,
"informed-decision.lifecycle": 9,
"informed-decision.memo.posed": 1
},
"counts_match": true,
"submissions": {
"confirmed": 24
},
"pending": 0
}

22
docs/evidence/2026-10-05-lifecycle-cutover/restart-retrieval.json Normal file
View file

@ -0,0 +1,22 @@
{
"version": 2,
"outcomes": {
"dispositions": [],
"review": {
"intake_state": "ready",
"memo_id": "review-0d55a416-178c-46f5-b74b-b9b668390448",
"path": "/review?memo_id=review-0d55a416-178c-46f5-b74b-b9b668390448",
"stale": false
}
},
"queue": {
"delivered": 1
},
"same_envelope_reenqueue": "replay",
"receipt": {
"approval_binding_digest": "sha256:c3b1d474aa00316a9bc2bc3e1635b4a84d7108f3817c1e2e19a1bf0fecfbcaa4",
"approval_id": "22b30fe7-c565-46f2-8193-d8875975ad9e",
"memo_id": "review-0d55a416-178c-46f5-b74b-b9b668390448"
},
"deployment_pins_unchanged": true
}

1
docs/evidence/2026-10-05-lifecycle-cutover/restore-source-correction.json Normal file
View file

@ -0,0 +1 @@
{"event_id": "240451dc-4ef6-43d6-a5cd-99c098ae0d14", "memo_id": "infd-20261005-lifecycle-production-proof", "version": 2}

4
docs/evidence/2026-10-05-lifecycle-cutover/wrong-caller.json Normal file
View file

@ -0,0 +1,4 @@
{
"check": "unregistered-service-account-correct-audience",
"status": 401
}