Deploy verified-group T03 review surface and packet preparation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6

docs/evidence/2026-09-14-review-groups-container.json

@@ -0,0 +1,30 @@
+{
+  "status": "passed",
+  "image_id": "sha256:8f55bcecf37a8d65f96e073510b1ffb4636c0a91d75e1ee7d582ad4bce8b953a",
+  "repo_digests": [
+    "forgejo.coulomb.social/coulomb/informed-decision@sha256:8f55bcecf37a8d65f96e073510b1ffb4636c0a91d75e1ee7d582ad4bce8b953a"
+  ],
+  "checks_passed": 11,
+  "checks": [
+    "installed container entrypoint serves with projected configuration",
+    "non-root read-only runtime has no external network or published port",
+    "private config/database modes enforced; package installer absent",
+    "configured review refuses anonymous access and reports audit-unready status",
+    "a second writer cannot acquire the active evidence volume",
+    "synthetic uncertain intent and undelivered evidence remain explicit",
+    "consistent backup created while serving; overwrite refused",
+    "SIGTERM closes the serving writer without forced kill",
+    "restart preserves immutable content and unresolved submission without retry",
+    "separate restored volume preserves exact content and unresolved state",
+    "incomplete owner configuration exits before serving"
+  ],
+  "fixture_only": true,
+  "external_network": "none",
+  "content_snapshot_sha256": "0c030bc7c6674849745f31d6155d7f3ef7569338b6ebf898d29576d3d424f63b",
+  "native_identity_policy_audit_proven": false,
+  "published": false,
+  "deployed": false,
+  "factory_attempts": 0,
+  "paid_model_calls": 0,
+  "cleanup_complete": true
+}

docs/evidence/2026-09-14-t03-live-deployment.json

@@ -0,0 +1,84 @@
+{
+  "informed-decision": {
+    "uid": "a588e10a-90d2-4883-975e-6dd8b8feca92",
+    "generation": 2,
+    "ready_replicas": 1,
+    "containers": [
+      {
+        "name": "informed-decision",
+        "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:8f55bcecf37a8d65f96e073510b1ffb4636c0a91d75e1ee7d582ad4bce8b953a",
+        "resources": {
+          "limits": {
+            "cpu": "500m",
+            "memory": "256Mi"
+          },
+          "requests": {
+            "cpu": "20m",
+            "memory": "64Mi"
+          }
+        }
+      }
+    ]
+  },
+  "flex-auth": {
+    "uid": "717fa3fb-16ea-446f-b1d4-db7e7c26e89c",
+    "generation": 1,
+    "ready_replicas": 1,
+    "containers": [
+      {
+        "name": "flex-auth",
+        "image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:c9f028b49dfcede930a9cc48757ec8371ecc71d20b1bfee2733e55298dffcc7c",
+        "resources": {
+          "limits": {
+            "cpu": "300m",
+            "memory": "192Mi"
+          },
+          "requests": {
+            "cpu": "5m",
+            "memory": "32Mi"
+          }
+        }
+      }
+    ]
+  },
+  "approval-engine": {
+    "uid": "8b44c901-024f-4472-a822-2fd07aa2be5f",
+    "generation": 3,
+    "ready_replicas": 1,
+    "containers": [
+      {
+        "name": "approval-engine",
+        "image": "forgejo.coulomb.social/coulomb/approval-engine@sha256:251941a5cb2724b57cc32cff6b693b1ab0be695bee4f56f02d51961189c0fa49",
+        "resources": {
+          "limits": {
+            "cpu": "500m",
+            "memory": "256Mi"
+          },
+          "requests": {
+            "cpu": "10m",
+            "memory": "64Mi"
+          }
+        }
+      }
+    ]
+  },
+  "https_readiness": {
+    "status": "ready"
+  },
+  "review_store": {
+    "schema_version": 2,
+    "outbox": {
+      "delivered": 3
+    },
+    "submissions": {}
+  },
+  "scope": "Native deployment/readiness; no human approval or consumption evidence",
+  "native_backup": {
+    "consistent_snapshot": true,
+    "independent_copy_integrity": "ok",
+    "foreign_key_errors": 0,
+    "file_mode": "0600",
+    "parent_mode": "0700",
+    "scope": "initial review database; not full retention or disaster recovery acceptance"
+  }
+}

docs/flex-auth-review-contract.md

@@ -18,7 +18,7 @@ caller credential. Wrong service accounts and human-token substitution fail
 before evaluation in the actual component test.
 
 The subject comes from the verified KeyCape human session, including verified
-roles and unchanged assurance facts. Membership tenant and act scope remain
+groups and roles and unchanged assurance facts. Membership tenant and act scope remain
 distinct. The tenant provenance values are the consumer's typed
 `directory-asserted` or `registration-supplied`; human provenance is
 `authentication-derived`. Unknown routes refuse before a request is made.
@@ -102,3 +102,15 @@ one synthetic human/memo/approval and no production assignment. Its native
 package pin proves the consumer seam and cannot be used as admission evidence.
 Owner return must include admitted policy/caller pins and deployed allow/refusal
 receipts for the exact native human/act before T08 can claim live binding.
+
+
+## T03 operator mandate — 2026-09-14
+
+The operator explicitly authorized members of `net-kingdom-admins` to review
+and approve only the SECRETS-WP-0010-T03 apply, verify and read-only OpenRouter
+key-check actions. This is separate from CCR-2026-0019 reader permission.
+The consumer now carries the signed access token's validated group array in
+`subject.attributes.groups`; it never derives groups from roles or memo content.
+The production policy must bind exact memo ids, approval ids and native binding
+digests, require authenticated humanity and fresh MFA, and deny every other act.
+This mandate is not a disposition: only the human browser session can bind one.