coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare INFD-WP-0002-T03 sitting without a fake bind.

Browse source 
T08 historically bound three SECRETS-WP-0010-T03 memos on this origin.
Live accept is closed: /readyz 503 because audit-core has no ready
endpoints. Compact drafts still lack approval_id. Operator packet and
preflight record the gates; T03 stays wait.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-14 18:59:49 +02:00
parent 98aa4547a9
commit 6a386dd787
8 changed files with 413 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

74
docs/batches/2026-09-14/OPERATOR.md Normal file
View file

@ -0,0 +1,74 @@
# Compact sitting — operator packet (INFD-WP-0002-T03)
Review group: `net-kingdom-admins`.
Surface: https://decisions.coulomb.social/
Contract: `docs/specs/CompactSignoffBatches.md`.
An agent may draft, order, and record evidence. It may not `accept` / `decline` / `seal`.
Do not mark INFD-WP-0002 finished on a partial sitting.
## What is already proven
On 2026-09-14 around 01:06 UTC this origin took **three real human accepts**
for `SECRETS-WP-0010-T03-{apply,verify,exec}`: presentations, required-highlight
acknowledgments, `accept` dispositions, and confirmed approval-engine
submissions are in the review store. That discharges “can a human bind through
this surface?” for T08 historically.
Those three memos are **not** this sitting. `infd-20260914-c01` asks a different
question (admit native delivery) and must not reuse those approval ids.
## What is closed right now (2026-09-14 16:56 UTC)
Live accept is refused:
- Origin `/healthz` 200; `/auth/start` 303 to KeyCape (`informed-decision-approver`, PKCE S256).
- Origin `/readyz` **503** `approval_path_not_connected`.
- `audit-core` pod Ready=false; `/readyz` hangs; Service has no ready endpoints;
the review pod gets connection refused talking to `audit-core.audit-core.svc:8080`.
- Accept requires recent audit delivery health. Until that Service has a ready
endpoint, a new sitting cannot submit entries.
Evidence: `docs/evidence/2026-09-14-infd-0002-t03-bind-path-probe.json`.
Audit-core owns the hang; this packet does not change that deployment.
## Eight unsigned memos (this sitting)
Open in this order. One question each. No approve-all.
| n | memo_id | Blocking record |
| --: | --- | --- |
| 1 | `infd-20260914-c01` | SECRETS-WP-0010 native delivery |
| 2 | `infd-20260914-c02` | RPF-WP-0035-T02 |
| 3 | `infd-20260914-c03` | NK-WP-0032-T03 |
| 4 | `infd-20260914-c04` | WARDEN-WP-0027-T02 |
| 5 | `infd-20260914-d01` | CUST-WP-0038-T08 |
| 6 | `infd-20260914-d02` | HFACT-WP-0001-T03 |
| 7 | `infd-20260914-d03` | MASON-WP-0005 plan |
| 8 | `infd-20260914-d04` | RCLK-WP-0002-T01 |
Drafts still have `approval_id: null` and principal `pending-human-session`.
The live controller refuses those with `missing_act_binding` / `wrong_recipient`.
They are not in the live store.
## After audit-core is Ready
1. Confirm `GET https://decisions.coulomb.social/readyz` returns 200, or run
`uv run python tools/sitting_bind_preflight.py --origin https://decisions.coulomb.social`.
2. For **each** memo, the owning requester creates one `approval-engine` object
with `human_control=true`, required_count 1, no entries. Do **not** reuse
`secrets-engine-requester` for unrelated acts (WSL2 retirement, clock
ownership, mason plan, …).
3. Substitute the operator’s live KeyCape `sub` for `pending-human-session`.
Carry the native `approval_id` and `binding.digest` on the memo. Do not
invent a digest.
4. Load packet bytes then `save_memo` into the review store (named-memo form,
no inbox).
5. Sign in at the origin. Open `/review?memo_id=infd-20260914-c01` through
`…-d04` in order. Acknowledge the required highlight. Bind that memo. Repeat.
6. Unfinished memos stay in the batch. File-level owning-repo updates are T04
after a human bind, via `fix-consistency`, never `POST /workplans/`.
A recorded desktop sitting (same order, same highlights, `view_hash` from
`presentation.render` only) is allowed if the Stage 1 UI still cannot take the
group. It is still a human bind. An agent must not complete the form.

8
docs/batches/2026-09-14/README.md
View file

@ -18,4 +18,10 @@ Two batches, eight memos, one compact sitting:
Contract: `docs/specs/CompactSignoffBatches.md`.
Regenerate: `uv run python tools/prepare_compact_batches.py`.
Live bind waits on `INFD-WP-0001-T08`.
Preflight: `uv run python tools/sitting_bind_preflight.py --origin https://decisions.coulomb.social`.
Operator packet: `OPERATOR.md`.
T08 already took three human accepts on this origin for `SECRETS-WP-0010-T03-*`.
Those memos are not this sitting. Live accept is currently closed
(`/readyz` 503) because audit-core has no ready Service endpoints.
This sitting stays `draft-unsigned` until a human binds through the surface.

4
docs/batches/2026-09-14/sitting.json
View file

@ -8,6 +8,6 @@
"infd-batch-2026-09-14-decisions"
],
"memo_count": 8,
"bind_path": "INFD-WP-0001-T08 (not yet complete)",
"note": "Unsigned drafts. Do not submit until CompactSignoffBatches.md is accepted. Live bind substitutes pending-human-session with the authenticated key-cape subject."
"bind_path": "INFD-WP-0001-T08 historically proven; live accept closed 2026-09-14T16:56:55Z",
"note": "Unsigned drafts. Do not submit until a human sitting is opened under T03. Live bind substitutes pending-human-session with the authenticated key-cape subject. Probe: docs/evidence/2026-09-14-infd-0002-t03-bind-path-probe.json. Operator packet: OPERATOR.md."
}

83
docs/evidence/2026-09-14-infd-0002-t03-bind-path-probe.json Normal file
View file

@ -0,0 +1,83 @@
{
"kind": "infd-wp-0002-t03-bind-path-probe",
"observed_at": "2026-09-14T16:56:55Z",
"workplan": "INFD-WP-0002",
"task": "INFD-WP-0002-T03",
"scope": "Live bind-path diagnosis for the compact sitting. No human login, no presentation, no disposition, no approval create, no secret read.",
"origin": {
"url": "https://decisions.coulomb.social/",
"tls_verify": 0,
"healthz": {"http": 200, "body": {"status": "ok"}},
"readyz": {
"http": 503,
"body": {"status": "incomplete", "reason": "approval_path_not_connected"}
},
"auth_start": {
"http": 303,
"location_host": "kc.coulomb.social",
"client_id": "informed-decision-approver",
"redirect_uri": "https://decisions.coulomb.social/auth/callback",
"scopes": ["openid", "approval:read", "approval:approve"],
"pkce": "S256"
},
"unsigned_home": "Sign in with KeyCape only; memo form is session-gated"
},
"cluster": {
"informed-decision": {
"namespace": "informed-decision",
"pod": "informed-decision-b7f6fc6c9-kd4bl",
"ready": true,
"start_time": "2026-09-14T01:30:01Z",
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:8f55bcecf37a8d65f96e073510b1ffb4636c0a91d75e1ee7d582ad4bce8b953a"
},
"approval-engine": {
"namespace": "approval-engine",
"pod": "approval-engine-0",
"ready": true,
"in_cluster_healthz": {"http": 200, "body": {"status": "ok"}}
},
"audit-core": {
"namespace": "audit-core",
"pod": "audit-core-7cb66768cf-pq6pw",
"ready": false,
"started_at": "2026-09-11T08:27:26Z",
"restarts": 0,
"local_healthz": {"http": 200},
"local_readyz": "timeout (>8s); kubelet probe timeoutSeconds=2 on /readyz",
"service_cluster_ip": "10.43.74.236",
"classic_endpoints": "no ready addresses; one notReadyAddresses entry",
"from_informed_decision_pod": "connection refused to audit-core.audit-core.svc:8080"
}
},
"review_store_counts": {
"schema_version": 2,
"sqlite_mtime_in_pod": "2026-09-14T01:06:00Z approximately",
"memos": 3,
"presentations": 3,
"acknowledgments": 3,
"dispositions": {"accept": 3},
"submissions": {"confirmed": 3},
"outbox": {"delivered": 15},
"memo_ids": [
"SECRETS-WP-0010-T03-apply",
"SECRETS-WP-0010-T03-exec",
"SECRETS-WP-0010-T03-verify"
],
"note": "Counts and identifiers only. No packet bytes, principals, view_hash values, or approval entry bodies were copied out of the store."
},
"compact_sitting": {
"id": "infd-sitting-2026-09-14",
"status": "draft-unsigned",
"memo_count": 8,
"approval_ids": "all null",
"principal": "pending-human-session",
"in_live_store": false
},
"conclusion": {
"t08_historical_bind": "Three real human accept dispositions with confirmed engine submissions already exist on this surface for the SECRETS-WP-0010-T03 named memos. That sitting is not the INFD-WP-0002 compact batch.",
"t03_live_accept": "closed",
"reason": "informed-decision /readyz is 503 because audit-core is not Ready, its Service has no ready endpoints, and accept is refused while pump.ready() is false.",
"agent_disposition": "forbidden",
"infd_wp_0002_t03": "wait"
}
}

8
docs/specs/CompactSignoffBatches.md
View file

@ -50,3 +50,11 @@ a human bind (T04), via repo files + `fix-consistency`, never
`docs/batches/2026-09-14/` — four credential/custody memos and four
decision/assent memos. Indexes name the blocking workplan/task. Do not
submit until a human sitting is opened under T03.
2026-09-14 16:56 UTC: Stage 1 historically bound three other memos
(`SECRETS-WP-0010-T03-*`) on this origin. New accepts are closed while
`GET /readyz` returns 503 (`approval_path_not_connected`) because
audit-core is not Ready and its Service has no ready endpoints. Compact
memos still have `approval_id: null`. Operator packet:
`docs/batches/2026-09-14/OPERATOR.md`. Preflight:
`tools/sitting_bind_preflight.py`.