Connect policy-gated browser review and audit runtime

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/evidence/2026-09-11-browser-result.json

@@ -0,0 +1,81 @@
+{
+  "fixture_only": true,
+  "browser": "Chromium",
+  "checks_passed": 12,
+  "checks": [
+    "PKCE callback and secure browser session",
+    "Entitled page escapes memo and packet markup",
+    "Server refuses bypass of missing acknowledgments",
+    "Explicit acknowledgment unlocks the form",
+    "Complete attachment download stays behind entitlement",
+    "Return records a memo response without an engine entry",
+    "Mobile review fits the viewport",
+    "One actual approval entry, stable on browser reload",
+    "Audit receiver holds all commitments; unsigned decision gap retained",
+    "Real workload caller refusal hides review content",
+    "Sign-out clears the session; all forms carry the exact origin",
+    "No page errors or injected script execution"
+  ],
+  "fixture_transport": "real HTTPS on ephemeral ports; synthetic issuer and TokenReview",
+  "native_human_login_proven": false,
+  "native_policy_admitted": false,
+  "factory_attempts": 0,
+  "paid_model_calls": 0,
+  "final_component_state": {
+    "entries": 1,
+    "intents": [
+      {
+        "disposition_id": "disp-8ad75d50-1222-4512-a74b-253a15e7d159",
+        "approval_id": "fixture",
+        "subject": "human-fixture",
+        "state": "confirmed",
+        "attempt": "980d4cd4-753e-40f7-8026-f21923a340fd",
+        "approved_at": "2026-09-10T22:29:05+00:00",
+        "presentation_id": "pres-5673438f-ad6c-4ce1-bf26-edfc9211e476",
+        "operation_id": "c60eaa0c-b627-4f59-8e84-d35fc69d4963"
+      }
+    ],
+    "outbox_states": [
+      "delivered",
+      "delivered",
+      "delivered",
+      "delivered",
+      "delivered",
+      "delivered",
+      "delivered",
+      "delivered",
+      "delivered"
+    ],
+    "policy_outcomes": [
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "allow",
+      "caller_refused"
+    ],
+    "decision_attributable": [
+      0,
+      0,
+      0,
+      0,
+      0,
+      0,
+      0,
+      0,
+      0,
+      0,
+      0,
+      0
+    ],
+    "entry_posts": 1,
+    "consume_calls": 0,
+    "tokenreviews": 12
+  }
+}

docs/evidence/2026-09-11-protected-browser-review.json

@@ -0,0 +1,93 @@
+{
+  "schema": "informed-decision.protected-browser-review.v1",
+  "observed_at": "2026-09-10T22:29:50.412419+00:00",
+  "base_commit": "2cc32168acedb19698fa196911385745fbf897b1",
+  "contract_source_commits": {
+    "approval-engine": "a0a602976eef818f36dde35f76f7f2e589bd051b",
+    "audit-core": "5c0ad522fb36092aa7ec2e8d72f63a5a91853b5b",
+    "flex-auth": "88b354377c8e26b162f1234e673072f1c06dcd89",
+    "key-cape": "139994cfac28ff97163ce4bf263f2bb035bbe0a7"
+  },
+  "source_task": "INFD-WP-0001-T08",
+  "source_task_status": "progress",
+  "verification": {
+    "command": "INFD_APPROVAL_ENGINE_SOURCE=/home/worsch/approval-engine INFD_AUDIT_CORE_SOURCE=/home/worsch/audit-core INFD_FLEX_AUTH_BINARY=<compiled-flex-auth> make check",
+    "tests_passed": 344,
+    "tests_failed": 0,
+    "tests_skipped": 0,
+    "new_tests": 86,
+    "schema_json_valid": true,
+    "flex_binary_sha256": "c7a1f35aa2cd7cf2733272923ace7fc4b4e55171db4ef8f3d0d6629183dcf1fa",
+    "browser_checks_passed": 12,
+    "browser_receipt": "2026-09-11-browser-result.json",
+    "components": "actual Flex Auth HTTP server with caller enforcement and Approval Engine/Audit Core APIs; synthetic issuer, TokenReview, assignments and credentials"
+  },
+  "implemented": [
+    "fresh pinned PDP checks before render, download and each action, with separate workload caller",
+    "immutable policy observations and original act binding snapshot; decision_attributable remains false",
+    "English organizational approval UI with explicit acknowledgments and accept/return/discuss/decline",
+    "original confirmed entry and visible unresolved state; no automatic mutation retry",
+    "owner runtime configuration, rotating token file callbacks, scheduled bounded audit delivery and readiness",
+    "atomic SQLite schema v1-to-v2 upgrade; old UI-release/profile refusal"
+  ],
+  "browser_findings_fixed": [
+    "no-referrer produced Origin:null on real form POST; same-origin pages preserve exact-origin CSRF checks"
+  ],
+  "component_findings_fixed": [
+    "native caller plain-text 401/403 must remain caller_refused instead of policy_unavailable"
+  ],
+  "source_sha256": {
+    "SCOPE.md": "b4568fe033b443d66833d1501fd5b04e01c9d6e95b44bae9666134e914ae758a",
+    "docs/browser-authentication.md": "9354f8a95914cb353b93256df9e85c455bcf425107f507dd8f1ba6206026794a",
+    "docs/durable-review-evidence.md": "f7f4a15faa479f3a132120a6fae27837bd2673afda93df7dbd29e8171a7911d0",
+    "docs/evidence/2026-09-11-browser-result.json": "f405f5d11ae695a9ca8098f6c6a5f125042a62c3af9e87f21bc5e266b6f5a397",
+    "docs/evidence/2026-09-11-recorded-desktop.png": "89f6e5396094155f2b1e04599f0a2b2d040f4dce004afa4dda752f234eef566a",
+    "docs/evidence/2026-09-11-review-desktop.png": "e050eceb62cb389d516e4a889c67b1610df3f5539d04efdbafa4874700e90ca3",
+    "docs/evidence/2026-09-11-review-mobile.png": "3a0b5b1e37b3a54c4eb34688b04bb38b18181b94106b062150fc1b70aa4f3f8a",
+    "docs/flex-auth-review-contract.md": "3324b7b022fb5397d02520310bf43e0bfbff8c919e95ba9fecc94334dae8caf9",
+    "docs/protected-browser-review.md": "28f5666a795997db6b6483ab6c3e0c6dab4cc7df948e57f1e5d02e5c45968317",
+    "informed_decision/approval_http.py": "203f462ff78f1409f2f924d4723197fdd502087c7f6da319f46ffffce2a9d478",
+    "informed_decision/http_transport.py": "fc9c1fd05cc89120d70bfcdb4c60fe244b81c8054d21505df8cfa9c5a229f7bc",
+    "informed_decision/memo.py": "697058863a4e6de2c143a2433eaaf5e15e5e7375dc5459af6911b146567e8b5d",
+    "informed_decision/oidc.py": "35b37bae67968c2179b22af8151afe2981d5468debf4488771eaf3121b75e221",
+    "informed_decision/policy.py": "7bf814a8332ff054bf5f1f651d8816a408138b1f197b17da0abb7f87411e8812",
+    "informed_decision/review.py": "c2d2aa1cf48d10d85b3606acf2830ab22701c1274221e5e2760d29901adfd786",
+    "informed_decision/runtime.py": "6bc6a74657f526743cca6c6cdc0a86fff43d8282e0b867dc9288344636abe5eb",
+    "informed_decision/store.py": "7a58b36d409cb4161b65985545e13573a5196779b4c6e95ca03ce45c6fada808",
+    "informed_decision/ui.py": "69fb7fc1794c8842f42e7f0f5a261c4cf64176053ef0a532db46ee6566621219",
+    "informed_decision/web.py": "00300dc25af3e272db7de748c255f8b1aa0b0182a54f2573e874ed5865da0fd8",
+    "pyproject.toml": "26e77b2da1ce7d6f1878fb6ca46fdb2acebbad0f6e17f5528d5a1f1d01defe42",
+    "tests/browser_fixture.py": "31feaf6e3351d9560498ffac2f06cae602f0762a01474bcff2c919c33db3cfcf",
+    "tests/browser_review.mjs": "0285f2cff70e5d569f31c7e99c8b3a5b5ce98b3eb51c2203de3f2e958f2ac684",
+    "tests/fixtures/review-policy/fixtures.json": "4c84a411383bfdbd32e15763ce2e934eefec570d93bc68389d6c81d11f3d4243",
+    "tests/fixtures/review-policy/pin.json": "91c77e4daa0a1c8c394e14e6b0c9d9c493ff21389fefa592656aa363c1104611",
+    "tests/fixtures/review-policy/policy.md": "cd0a5a79db840e1dad7cabece3976d1683387c71d8a5507476f49b421d180c24",
+    "tests/fixtures/review-policy/registry.json": "cd358b139f5987dcd0b4c8ac9fffee7d86951b15a22216f6ec21240a51ec41cf",
+    "tests/review_components.py": "415ef229aedd4def7af737274b4d341ddf4f40a912a8103a017d901b2cdecf2e",
+    "tests/test_browser_auth.py": "c70e24495d2f968c0a48e4082032666b4f4325f60d7e736c5a27d0fb99ef0f33",
+    "tests/test_http_transport.py": "d3dcf8051a7acfd152a583f7a865327ae60d880b9b07abc5f5fa9c693e95354e",
+    "tests/test_policy_client.py": "8ab6f8a06e8b28b4933e0d8d23650c9781a5365343fc4926080c7c2d5e2962ed",
+    "tests/test_review_component.py": "cd28100fbc66b64703f065c2a3638486043bee5e3e4a6e75de19eb58235f0d47",
+    "tests/test_review_controller.py": "df3ddfb60dd06728ee871225df96da13462d69f648f214a5ea1b040388c78d53",
+    "tests/test_review_runtime.py": "e230d9f590b86675b4d42f978cfd2bc769de404b3f5ad510a400ff2fcec62bbd",
+    "workplans/INFD-WP-0001-founding-specs-and-approver-ui-ownership.md": "49f68a11c301b436655144d4819e827d0ec036fdb2b4463d2679ce8c36cc3b3a"
+  },
+  "limits": [
+    "fixture-only policy; native caller/package/assignment admission pending",
+    "unsigned decisions remain unattributable under GH-DEC-2026-010 / FLEX-WP-0024",
+    "no native registration rollout, human login, deployment or audit custody proof",
+    "English organizational approve profile only; German and wider product acceptance remain T08",
+    "uncertain entry causation remains unresolved; no reset/retry shortcut",
+    "audit accepted_at and source occurred_at counts do not prove completeness or reconstructability",
+    "production packaging, private state, backup/restore and recovery admission pending"
+  ],
+  "browser_routes_implemented": true,
+  "native_policy_admitted": false,
+  "native_human_login_proven": false,
+  "production_audit_custody_proven": false,
+  "deployed": false,
+  "factory_attempts": 0,
+  "paid_model_calls": 0,
+  "remaining_live_task": "INFD-WP-0001-T08",
+  "factory_gate_task": "HFACT-WP-0001-T03"
+}