coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record approved production lifecycle cutover and native evidence

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-05 00:15:09 +02:00
parent b5b5a5aa7f
commit 3fe029d49e
11 changed files with 1059 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

33
workplans/INFD-WP-0005-frictionless-decision-intake.md
View file

@ -4,12 +4,12 @@ type: workplan
title: "Frictionless decision intake — agents pose memos, only answering is human"
domain: infotech
repo: informed-decision
status: blocked
status: active
flavor: implementation
owner: claude
topic_slug: netkingdom
created: "2026-10-03"
updated: "2026-10-04"
updated: "2026-10-05"
related:
- INFD-WP-0002
- INFD-WP-0003
@ -109,11 +109,8 @@ Offline-testable with a fake TokenReview and fake approval client.
```task
id: INFD-WP-0005-T05
status: wait
status: done
priority: high
blocked_on: message-from:railiance-platform
needs_human: true
blocking_reason: "Native requester custody/identity/path/scope/projection and revocation proofs passed against candidate 804d89fb; actual receiving service mount and separate rollout go remain"
state_hub_task_id: "3b0f536c-e8ee-5493-b663-2f60f5f429ad"
decision_id: "0d6792b6-59e4-4fa0-887a-c4e51ea8e131"
```
@ -127,10 +124,8 @@ memo, and records the receipt. Replaces OPERATOR step A3.
```task
id: INFD-WP-0005-T06
status: wait
status: progress
priority: high
blocked_on: message-from:access-engine
blocking_reason: "Consumer implemented; FLEX-WP-0033 prepares v12 State Hub / decision-record admission; native verification and concrete rollout approval remain"
state_hub_task_id: "c03016da-a795-5c5c-b86e-0ce9afc67be6"
```
@ -164,10 +159,8 @@ evidence, notification and gated resolution delivery. Live acceptance remains T1
```task
id: INFD-WP-0005-T08
status: wait
status: progress
priority: medium
blocked_on: message-from:state-hub
blocking_reason: "STATE-WP-0096 implements private queue/runtime and projected audience proposals; native forwarding acceptance waits on approved service/worker rollout; requester custody proofs now pass"
state_hub_task_id: "ce2b36b4-ef82-53b7-aee7-e0063855370b"
```
@ -195,11 +188,9 @@ Record gate-house's answer in the spec; adjust §5 if doctrine requires it.
```task
id: INFD-WP-0005-T10
status: wait
status: progress
priority: low
depends_on: [INFD-WP-0005-T05, INFD-WP-0005-T06]
needs_human: true
blocking_reason: "Live rollout of intake, admission branch and write-back flag needs the founder's go"
state_hub_task_id: "e7d98fc0-0e56-50e6-955d-c70209ad4712"
decision_id: "24b0c846-a58e-43bc-ab80-988180ddd2f9"
```
@ -288,3 +279,15 @@ Native requester verification passed after KeyCape Basic-auth alignment at
zero HIGH/CRITICAL scan. T05 waits only on actual receiving-pod/cutover acceptance;
no further requester metadata approval is pending. Production snapshot migration
was proven offline without changing live schema or approval state.
## Native intake cutover — 2026-10-05
Founder-approved lifecycle cutover completed actual requester mount/exchange,
private listener and selected State Hub registration, v12 attribute admission,
private dispatch and native Approval Engine creation. The retained review is
review-0d55a416-178c-46f5-b74b-b9b668390448, approval
22b30fe7-c565-46f2-8193-d8875975ad9e. Notification/memo-posed receipts are delivered;
restart and same-envelope replay preserve that one native receipt. T05 is done.
T06/T08/T10 remain in progress for the human browser/acceptance return and final
fallback documentation. Resolution write-back stays disabled. Platform RPF-IN-0004
tracks separately governed issuer rotation proof. No renewed cutover go is needed.

38
workplans/INFD-WP-0007-decision-lifecycle-service.md
View file

@ -8,7 +8,7 @@ status: active
owner: codex
topic_slug: netkingdom
created: "2026-10-04"
updated: "2026-10-04"
updated: "2026-10-05"
origin: demand
origin_ref: "Founder 2026-10-04: full decision lifecycle for agents and humans, no per-decision infrastructure rollout, headless foundation and UI at decisions.coulomb.social"
related:
@ -22,7 +22,7 @@ state_hub_workstream_id: "2b3e04ed-2137-584f-a6c2-f1abb29636fa"
Contract: `docs/specs/DecisionLifecycleService.md`. This extends the existing
memo and intake implementation. `INFD-WP-0005` continues to own intake runtime,
attribute admission, forwarding and live acceptance. Implementation started on
2026-10-04 at the founder's request. Production identity/policy admission and broader human binding profiles remain
2026-10-04 at the founder's request. The initial production identity/policy audience is live; broader human binding profiles remain
open. The shared service now has a bearer API adapter and optional browser workspace.
## Record product direction and architecture
@ -121,7 +121,7 @@ packet before requesting the separately required live rollout approval.
```task
id: INFD-WP-0007-T07
status: todo
status: progress
priority: high
depends_on: [INFD-WP-0007-T06]
state_hub_task_id: "25fa4743-5c7e-5609-9872-7c5971ff62bc"
@ -321,3 +321,35 @@ Requester metadata approval is complete. T07 still awaits exact service/PDP/
worker cutover approval and subsequent native agent-human-agent acceptance.
Issuer rotation is separately governed under Platform's lane contract and was
not performed or claimed by the initial delivery proof.
## Approved production cutover — 2026-10-05
Founder approved packet 70dc3b9 (decision d2eaa2e9-6d11-4676-a07f-e3b7e59a88e3).
Public traffic was briefly closed, a final consistent schema-2 snapshot retained
off-cluster (SHA-256 b0346c42434cdc375eaa591f4bffeb62b9b2e19bf589a92501c96626142670e6),
and owner Helm releases deployed before the schema-5 service. Public health and
readiness pass after reopening. All 24 confirmed prior submissions survive.
The actual receiving requester projection is read-only 0440 and signed
create-only exchange passes. Platform delivery is accepted; separate issuer
rotation evidence is tracked as RPF-IN-0004, not authorized by this cutover.
Manual, pinned Argo applications own the service and private State Hub dispatcher.
The worker's native startup exposed Kubernetes inherited setgid; State Hub
1321361 adds a same-image non-root queue initializer, with nine regression tests.
It normalizes only an empty owned 2700 directory; existing unsafe/nonempty custody
is refused. Public ingress still targets only the browser listener.
Native selected-workload operations registered two records, recorded research,
evaluation and comment, revised and published one record, then queued its retained
review envelope. Missing credentials, crossed audiences and an unregistered
service account with the correct audience return 401; public API routes return
404. All four deployment templates/generations remain unchanged across the
decision operations and controlled service/dispatcher pod recreation. Retrieval
returns revision 2 and the same receipt; re-enqueue is replay with one delivered
queue row, not a second approval. Independent Audit Core counts match, pending 0.
Review memo: review-0d55a416-178c-46f5-b74b-b9b668390448; Approval Engine id:
22b30fe7-c565-46f2-8193-d8875975ad9e. Native notification and memo-posed delivery
are settled. Human disposition remains pending; no agent acceptance is claimed.
Evidence: docs/evidence/2026-10-05-lifecycle-cutover/. T07 stays in progress;
broader browser profiles and unresolved spec items remain in T02/T05/T06.