coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record confirmed proof budget renewal and deployed review pins

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
This commit is contained in:
tegwick 2026-09-27 20:33:14 +02:00
parent 895de67a2d
commit 656301b659
12 changed files with 258 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
deploy/sitting-admission.json
View file

@ -3,8 +3,8 @@
"policy": {
"origin": "http://flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080",
"package": "informed-decision.compact-sitting",
"version": "v4",
"package_digest": "sha256:80c8debbf9b8a2f8899b5b5599f713a6a0112a293e38cf6855ce77efa98d1915",
"version": "v5",
"package_digest": "sha256:b8d6a351398498bb5e21b8221c4e0ece4e3a56e90c900f871fac252f3314023c",
"pod_name": "flex-auth-informed-decision-sitting"
},
"keycape_egress_ips": [

28
docs/batches/2026-09-27-renewal/approval-create-intents.json Normal file
View file

@ -0,0 +1,28 @@
{
"kind": "informed-decision-approval-create-intents",
"sitting_id": "infd-sitting-2026-09-27-renewal",
"status": "not-posted",
"posted": false,
"requester_client": "informed-decision-sitting-requester",
"human_control": true,
"pdp_path": false,
"required_count": 1,
"note": "Intents only. Digests are computed by approval-engine at create; do not invent them here.",
"intents": [
{
"memo_id": "infd-20260927-b02",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "accept",
"actor": "informed-decision",
"principal": "helixforge-factory",
"purpose": "Accept one EUR 10 metered tool proof; no retry or publication; 2026-09-27T18:20:00Z through 2026-09-28T18:20:00Z",
"target": {
"id": "spend-envelope:hfact-glas-tool-proof-20260927-renewed-one-attempt",
"type": "spend-envelope",
"system": "rein-aharness"
}
}
}
]
}

15
docs/batches/2026-09-27-renewal/bound/index.json Normal file
View file

@ -0,0 +1,15 @@
{
"kind": "informed-decision-bound-sitting",
"sitting_id": "infd-sitting-2026-09-27-renewal",
"principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local",
"submitted": false,
"agent_disposition_forbidden": true,
"memos": [
{
"memo_id": "infd-20260927-b02",
"approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c",
"memo": "infd-20260927-b02.memo.json",
"packet": "infd-20260927-b02.packet.md"
}
]
}

1
docs/batches/2026-09-27-renewal/bound/infd-20260927-b02.memo.json Normal file
View file

@ -0,0 +1 @@
{"approval_binding_digest":"sha256:3e5951847e1909abe1561f561b4591228848a2e1a939b9bf5acab61e2db42773","approval_id":"1e73e514-ef74-4bff-83e7-fa88a3eaba0c","binding":{"justification":null,"principal":{"display_name":"uid=platform-root,ou=people,dc=netkingdom,dc=local","id":"uid=platform-root,ou=people,dc=netkingdom,dc=local","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"prod","id":"spend-envelope:hfact-glas-tool-proof-20260927-renewed-one-attempt","kind":"spend-envelope","label":"One metered Glas proof attempt (railiance01)","requires_new_bind":false},"terms":null},"binding_level":"organizational","brief":"User approved this one-attempt scope in the rein-aharness session. This native record replaces the old EUR 5 spend authority for that attempt only. No publication or automatic retry. Credential apply/verify/exec and human review remain separate exact actions. Daily EUR 20 and lifetime EUR 500 ceilings retain previous liabilities.","highlights":[{"id":"infd-20260927-b02-h1","item_id":"infd-20260927-b02-packet","locator":{"kind":"work_record","task":"SECRETS-WP-0009-T03","workplan":"SECRETS-WP-0009"},"note":"One attempt only, whether successful or failed. Retire old dispatch capability before activation; preserve and reconcile every previous liability. Conservative accounting charges full holds: two maximum requests consume USD 9.28; a third cannot fit. Failure remains recorded. EUR/USD 1.00 is an accounting treatment; confirm applicable FX/fees/taxes fit before executing.","required_ack":true,"severity":"critical"}],"id":"infd-20260927-b02","locale":"en","packet":[{"hash":"sha256:31aa9da4a229427b648c2f8fe4d8d0c047bc53105c7b02cfa88e5806d7dad0ec","item_id":"infd-20260927-b02-packet","label":"infd-20260927-b02-packet"}],"question":"Authorize one disposable Glas tool/commit attempt, EUR 10 run cap, in the 2026-09-27 18:20 through 2026-09-28 18:20 UTC window?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}

66
docs/batches/2026-09-27-renewal/bound/infd-20260927-b02.packet.md Normal file
View file

@ -0,0 +1,66 @@
# One metered Glas tool-session proof
Existing work: REINAH-WP-0003-T05/T06, SECRETS-WP-0009-T03, HFACT-WP-0001-T01/T04.
User approved the existing EUR 10 one-attempt proposal in the rein-aharness session.
This native memo does not manufacture an approval entry or deliver credentials.
## Replacement of the expired execution window
Memo infd-20260927-b01 was accepted at 2026-09-27T18:05:35Z after its execution
window ended at 17:35Z. It authorized no dispatch outside that window. This
replacement changes the admission window and envelope identity only. It does
not add an attempt or a budget. No attempt has been dispatched under the old
memo. Preserve its acceptance and accounting evidence unchanged.
## Exact scope and window
One disposable PROOF.md tool/commit attempt, no publication, no automatic retry.
Not useful-change G0 acceptance. Failure or exhaustion consumes the attempt.
UTC validity: 2026-09-27T18:20:00Z through 2026-09-28T18:20:00Z. No dispatch outside
this window; shortening it is permitted, extending it needs a fresh approval.
## Enforced limits
Per-run EUR 10; maximum liability USD 10.00; EUR per USD accounting treatment 1.00.
Native CLI USD 5.00 stop threshold, maximum 30 turns. Daily EUR 20 (Europe/Berlin)
and total EUR 500 remain ceilings across prior and replacement state, not new
independent allowances. Runtime b6e4e8a429393d68831c996a65c0489664205df969ac9882e581983ec2da4969.
Exact identity pins, retained from the approved proposal:
```json
{
"worker_id": "rein-aharness-metered@railiance01",
"activity_definition_id": "5bae5505-77f1-5ba3-8dfa-2e10ed15531e",
"target_repo": "/home/tegwick/hfact/targets/hfact-glas-proof",
"project": "prj-helixforge-factory",
"profile_ref": "harness.agent-dev-local@1.1.1",
"profile_sha256": "10e423fe256d3a1b3a64b9380ce422dd9e3eba3a432ae35ac28680562683ca65",
"descriptor_sha256": "4f151744d8fcc18a58e4b571a6bff32c8688028841c225da3de41d49b29a3a9b",
"repository_grant_id": "656911f7dff83e871434b415f0cee685"
}
```
## Accounting continuity
Before replacement activation: retire the old dispatch capability, verify no
outstanding run/route/request, preserve old policy and ledgers, and reconcile/carry
all prior daily and lifetime liability. Never reset or erase an existing ledger.
A nonzero/unreconciled old balance blocks activation until continuity is proven.
The old approval ID cannot authorize the new envelope. Use the accepted native
ID for this memo in the new SpendPolicy and bind new recipient hashes afterward.
One-attempt control must be preserved even though daily/total ceilings allow more.
## Provider and conversion review
First-party global Sonnet 5 rates rechecked 2026-09-27: USD 2 input, USD 10 output,
USD 4 one-hour cache creation per million tokens. Full 1M context plus 64k output
reserves USD 4.64. Two requests reserve USD 9.28; actual low usage does not refund
conservative charges. Two requests permit a tool/result cycle but do not guarantee
completion. Reject unadmitted features; no US-only or fast-mode premium is admitted.
Source: https://platform.claude.com/docs/en/about-claude/pricing
ECB 2026-09-25: USD 1.1403 per EUR, EUR 0.8769622029 per USD.
Source: https://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml
EUR/USD 1.00 is a reviewed accounting treatment, not a guaranteed invoice rate.
Before execution, confirm actual conversion including applicable fees/taxes fits;
otherwise refuse instead of exceeding the approved EUR cap.
## Separate authority
The accepted approval ID becomes spend authority only. It does not authorize
OpenBao policies/AppRoles, key delivery, worker-token delivery, or human entries.
Those keep their native exact action/consume/backend gates. No agent may accept,
decline, seal, or impersonate the human reviewer.

24
docs/batches/2026-09-27-renewal/budget/index.json Normal file
View file

@ -0,0 +1,24 @@
{
"kind": "informed-decision-batch",
"id": "infd-batch-2026-09-27-renewal-budget",
"review_group": "net-kingdom-admins",
"status": "draft-unsigned",
"submitted": false,
"one_question_per_memo": true,
"approve_all_forbidden": true,
"agent_disposition_forbidden": true,
"ordinal": [
{
"n": 1,
"memo_id": "infd-20260927-b02",
"workplan": "SECRETS-WP-0009",
"task": "SECRETS-WP-0009-T03",
"hub_task_prefix": "f8069c8a",
"question": "Authorize one disposable Glas tool/commit attempt, EUR 10 run cap, in the 2026-09-27 18:20 through 2026-09-28 18:20 UTC window?",
"memo": "infd-20260927-b02.memo.json",
"packet": "infd-20260927-b02.packet.md",
"packet_hash": "sha256:31aa9da4a229427b648c2f8fe4d8d0c047bc53105c7b02cfa88e5806d7dad0ec",
"required_highlight": "infd-20260927-b02-h1"
}
]
}

1
docs/batches/2026-09-27-renewal/budget/infd-20260927-b02.memo.json Normal file
View file

@ -0,0 +1 @@
{"approval_binding_digest":null,"approval_id":null,"binding":{"justification":null,"principal":{"display_name":"Named reviewer in net-kingdom-admins","id":"pending-human-session","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"prod","id":"spend-envelope:hfact-glas-tool-proof-20260927-renewed-one-attempt","kind":"spend-envelope","label":"One metered Glas proof attempt (railiance01)","requires_new_bind":false},"terms":null},"binding_level":"organizational","brief":"User approved this one-attempt scope in the rein-aharness session. This native record replaces the old EUR 5 spend authority for that attempt only. No publication or automatic retry. Credential apply/verify/exec and human review remain separate exact actions. Daily EUR 20 and lifetime EUR 500 ceilings retain previous liabilities.","highlights":[{"id":"infd-20260927-b02-h1","item_id":"infd-20260927-b02-packet","locator":{"kind":"work_record","task":"SECRETS-WP-0009-T03","workplan":"SECRETS-WP-0009"},"note":"One attempt only, whether successful or failed. Retire old dispatch capability before activation; preserve and reconcile every previous liability. Conservative accounting charges full holds: two maximum requests consume USD 9.28; a third cannot fit. Failure remains recorded. EUR/USD 1.00 is an accounting treatment; confirm applicable FX/fees/taxes fit before executing.","required_ack":true,"severity":"critical"}],"id":"infd-20260927-b02","locale":"en","packet":[{"hash":"sha256:31aa9da4a229427b648c2f8fe4d8d0c047bc53105c7b02cfa88e5806d7dad0ec","item_id":"infd-20260927-b02-packet","label":"infd-20260927-b02-packet"}],"question":"Authorize one disposable Glas tool/commit attempt, EUR 10 run cap, in the 2026-09-27 18:20 through 2026-09-28 18:20 UTC window?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}

66
docs/batches/2026-09-27-renewal/budget/infd-20260927-b02.packet.md Normal file
View file

@ -0,0 +1,66 @@
# One metered Glas tool-session proof
Existing work: REINAH-WP-0003-T05/T06, SECRETS-WP-0009-T03, HFACT-WP-0001-T01/T04.
User approved the existing EUR 10 one-attempt proposal in the rein-aharness session.
This native memo does not manufacture an approval entry or deliver credentials.
## Replacement of the expired execution window
Memo infd-20260927-b01 was accepted at 2026-09-27T18:05:35Z after its execution
window ended at 17:35Z. It authorized no dispatch outside that window. This
replacement changes the admission window and envelope identity only. It does
not add an attempt or a budget. No attempt has been dispatched under the old
memo. Preserve its acceptance and accounting evidence unchanged.
## Exact scope and window
One disposable PROOF.md tool/commit attempt, no publication, no automatic retry.
Not useful-change G0 acceptance. Failure or exhaustion consumes the attempt.
UTC validity: 2026-09-27T18:20:00Z through 2026-09-28T18:20:00Z. No dispatch outside
this window; shortening it is permitted, extending it needs a fresh approval.
## Enforced limits
Per-run EUR 10; maximum liability USD 10.00; EUR per USD accounting treatment 1.00.
Native CLI USD 5.00 stop threshold, maximum 30 turns. Daily EUR 20 (Europe/Berlin)
and total EUR 500 remain ceilings across prior and replacement state, not new
independent allowances. Runtime b6e4e8a429393d68831c996a65c0489664205df969ac9882e581983ec2da4969.
Exact identity pins, retained from the approved proposal:
```json
{
"worker_id": "rein-aharness-metered@railiance01",
"activity_definition_id": "5bae5505-77f1-5ba3-8dfa-2e10ed15531e",
"target_repo": "/home/tegwick/hfact/targets/hfact-glas-proof",
"project": "prj-helixforge-factory",
"profile_ref": "harness.agent-dev-local@1.1.1",
"profile_sha256": "10e423fe256d3a1b3a64b9380ce422dd9e3eba3a432ae35ac28680562683ca65",
"descriptor_sha256": "4f151744d8fcc18a58e4b571a6bff32c8688028841c225da3de41d49b29a3a9b",
"repository_grant_id": "656911f7dff83e871434b415f0cee685"
}
```
## Accounting continuity
Before replacement activation: retire the old dispatch capability, verify no
outstanding run/route/request, preserve old policy and ledgers, and reconcile/carry
all prior daily and lifetime liability. Never reset or erase an existing ledger.
A nonzero/unreconciled old balance blocks activation until continuity is proven.
The old approval ID cannot authorize the new envelope. Use the accepted native
ID for this memo in the new SpendPolicy and bind new recipient hashes afterward.
One-attempt control must be preserved even though daily/total ceilings allow more.
## Provider and conversion review
First-party global Sonnet 5 rates rechecked 2026-09-27: USD 2 input, USD 10 output,
USD 4 one-hour cache creation per million tokens. Full 1M context plus 64k output
reserves USD 4.64. Two requests reserve USD 9.28; actual low usage does not refund
conservative charges. Two requests permit a tool/result cycle but do not guarantee
completion. Reject unadmitted features; no US-only or fast-mode premium is admitted.
Source: https://platform.claude.com/docs/en/about-claude/pricing
ECB 2026-09-25: USD 1.1403 per EUR, EUR 0.8769622029 per USD.
Source: https://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml
EUR/USD 1.00 is a reviewed accounting treatment, not a guaranteed invoice rate.
Before execution, confirm actual conversion including applicable fees/taxes fits;
otherwise refuse instead of exceeding the approved EUR cap.
## Separate authority
The accepted approval ID becomes spend authority only. It does not authorize
OpenBao policies/AppRoles, key delivery, worker-token delivery, or human entries.
Those keep their native exact action/consume/backend gates. No agent may accept,
decline, seal, or impersonate the human reviewer.

12
docs/batches/2026-09-27-renewal/sitting.json Normal file
View file

@ -0,0 +1,12 @@
{
"kind": "informed-decision-sitting",
"id": "infd-sitting-2026-09-27-renewal",
"review_group": "net-kingdom-admins",
"status": "draft-unsigned",
"batches": [
"infd-batch-2026-09-27-renewal-budget"
],
"memo_count": 1,
"bind_path": "create approval (attended), Flex Auth exact-record admission, load store, human accept",
"note": "Unsigned draft. Live bind substitutes pending-human-session with the authenticated key-cape subject."
}

1
docs/evidence/2026-09-27-tool-budget-acceptance.json Normal file
View file

@ -0,0 +1 @@
{"dispositions": [{"actor": {"kind": "person", "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local"}, "approval_id": "e9521804-8fce-4fbc-bfdf-8a1aa959fd61", "at": "2026-09-27T18:05:35Z", "id": "disp-ac17da64-a66c-4dcf-b38a-b9865cc4c406", "memo_id": "infd-20260927-b01", "memo_version": 1, "note": null, "presentation_id": "pres-dfb6ddd3-67eb-4ce4-9bd9-c4e186a6f868", "reasons": [], "verb": "accept"}], "submissions": [{"disposition_id": "disp-ac17da64-a66c-4dcf-b38a-b9865cc4c406", "approval_id": "e9521804-8fce-4fbc-bfdf-8a1aa959fd61", "state": "confirmed", "approved_at": "2026-09-27T18:05:35+00:00"}]}

1
docs/evidence/2026-09-27-tool-budget-renewal-acceptance.json Normal file
View file

@ -0,0 +1 @@
{"dispositions": [{"actor": {"kind": "person", "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local"}, "approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c", "at": "2026-09-27T18:22:57Z", "id": "disp-50329033-6c8b-4a78-a85b-40aa9b0272eb", "memo_id": "infd-20260927-b02", "memo_version": 1, "note": null, "presentation_id": "pres-17397b67-78cb-48dd-8ea4-2dd3977a6170", "reasons": [], "verb": "accept"}], "submissions": [{"disposition_id": "disp-50329033-6c8b-4a78-a85b-40aa9b0272eb", "approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c", "state": "confirmed", "approved_at": "2026-09-27T18:22:57+00:00"}]}

41
docs/evidence/2026-09-27-tool-budget-renewal-create.json Normal file
View file

@ -0,0 +1,41 @@
{
"observed_at": "2026-09-27T18:18:49.334700+00:00",
"status": "created",
"phase": "seven_unapproved_requests_created",
"requests": [
{
"memo_id": "infd-20260927-b02",
"approval": {
"binding": {
"action": "accept",
"actor": "informed-decision",
"digest": "sha256:3e5951847e1909abe1561f561b4591228848a2e1a939b9bf5acab61e2db42773",
"human_control": true,
"pdp_digest": null,
"pdp_path": false,
"principal": "helixforge-factory",
"purpose": "Accept one EUR 10 metered tool proof; no retry or publication; 2026-09-27T18:20:00Z through 2026-09-28T18:20:00Z",
"target": {
"id": "spend-envelope:hfact-glas-tool-proof-20260927-renewed-one-attempt",
"system": "rein-aharness",
"type": "spend-envelope"
}
},
"created_at": "2026-09-27T18:18:53+00:00",
"entries": [],
"id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c",
"required_count": 1,
"status": "requested",
"superseded_by": null,
"updated_at": "2026-09-27T18:18:53+00:00",
"validity": {
"expires_at": "2026-09-28T18:18:50.818281+00:00",
"not_before": "2026-09-27T18:18:50.818281+00:00"
}
}
}
],
"credential_values_emitted": false,
"human_entries_created": false,
"skipped": []
}