Record the v9 profile-memo admission and the unanswered store load.
Assistant: grok Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
This commit is contained in:
parent
abf9f483aa
commit
8646c9f185
9 changed files with 156 additions and 6 deletions
|
|
@ -3,8 +3,8 @@
|
|||
"policy": {
|
||||
"origin": "http://flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080",
|
||||
"package": "informed-decision.compact-sitting",
|
||||
"version": "v7",
|
||||
"package_digest": "sha256:2490955f175c52574543e210be06f468a01e56c778d38d4fdcad731875e37cc7",
|
||||
"version": "v9",
|
||||
"package_digest": "sha256:28fcb6c098a017fdc78b6768762af1b412ab55e1da22676ef37218e439ee148f",
|
||||
"pod_name": "flex-auth-informed-decision-sitting"
|
||||
},
|
||||
"keycape_egress_ips": [
|
||||
|
|
|
|||
35
docs/batches/2026-10-04-emergent-profile/DEPLOY-v9.md
Normal file
35
docs/batches/2026-10-04-emergent-profile/DEPLOY-v9.md
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
# Profile memo admission — deployed 2026-10-04
|
||||
|
||||
Founder approved with "Yes, deploy it". This admits one exact record and loads
|
||||
one unanswered memo. It does not accept, decline, or seal that memo, and it
|
||||
does not resolve hub decision `d20a9750-2b29-534e-8227-fb866581a6ca`.
|
||||
|
||||
1. Helm release `flex-auth-informed-decision-sitting`, namespace `flex-auth`,
|
||||
revision 9. Image
|
||||
`forgejo.coulomb.social/coulomb/flex-auth@sha256:aa7ccbafb2a8f884c97119e295fd168fa4e67e974682a8c30b35149201469eff`,
|
||||
the CI build of access-engine `103d8b62183619478d70868d5028316975687d39`.
|
||||
Previous revision 8 remains the v7 image
|
||||
`sha256:f6fa2062f7095e66c7a91f20cd130914b5481d46d9d909339e028f7ecdf0065d`.
|
||||
2. The published image evaluated the exact memo read as allow,
|
||||
`operator_admitted_compact_sitting`, package version v9, package digest
|
||||
`sha256:28fcb6c098a017fdc78b6768762af1b412ab55e1da22676ef37218e439ee148f`.
|
||||
A wrong binding digest was denied. An attribute-shaped request for an
|
||||
unlisted memo was denied `unknown_class`. The live service returned allow
|
||||
for the v9 pin and `invalid_decision` for the previous v7 pin.
|
||||
3. Immutable ConfigMap `informed-decision-runtime-35b00b8608e0` replaced
|
||||
`informed-decision-runtime-b800648bd80b` on Deployment `informed-decision`.
|
||||
The application image stayed
|
||||
`forgejo.coulomb.social/coulomb/informed-decision@sha256:ccca0b377bb8ba6af52a37edc453b5b51c96e380840ec8243ffaab3ac2170885`.
|
||||
The old ConfigMap is retained.
|
||||
4. The bound memo was loaded into `/data/private/review.sqlite`. Principal
|
||||
`uid=platform-root,ou=people,dc=netkingdom,dc=local` is the single subject
|
||||
already on the store's presentations. The load created no presentation and
|
||||
no disposition. The memo is unsealed.
|
||||
|
||||
Recovery: `helm rollback flex-auth-informed-decision-sitting 8 -n flex-auth`,
|
||||
then point the review Deployment volume `configuration` back at
|
||||
`informed-decision-runtime-b800648bd80b`. The loaded memo would then fail the
|
||||
v7 exact-record rule until v9 is restored. No automatic approval recreation.
|
||||
The approval expires `2026-10-04T23:52:37Z`.
|
||||
|
||||
The founder answers at https://decisions.coulomb.social/ with fresh MFA.
|
||||
|
|
@ -35,9 +35,9 @@ warden access informed-decision-sitting-requester-login --exec -- \
|
|||
|
||||
The child is silent. The outcome is `docs/evidence/2026-10-04-emergent-profile-approval-create.json`, which holds the approval id and the engine-computed binding digest and no secret. Read warden's printed line, not its exit code.
|
||||
|
||||
**3. After that receipt exists**, the access-engine owner adds an exact record for this memo id, approval id, and binding digest, then the memo is loaded into the live review store. An empty approval id must not be written into policy. Those steps are not done by this preparation.
|
||||
**3. Exact-record admission and store load are done.** Policy v9 admits this one memo. The review runtime pin is `informed-decision-runtime-35b00b8608e0`. The memo is in the live store and has no presentation or disposition. See `DEPLOY-v9.md`.
|
||||
|
||||
**4. Answer in the browser.** Sign in at https://decisions.coulomb.social/ with fresh MFA. Open `emergent-profile-adoption-0-2-6`, read the packet, acknowledge the required highlight, and accept, return, or decline. One memo, one answer.
|
||||
**4. Answer in the browser.** Sign in at https://decisions.coulomb.social/ with fresh MFA. Open `emergent-profile-adoption-0-2-6`, read the packet, acknowledge the required highlight, and accept, return, or decline. One memo, one answer. The approval expires `2026-10-04T23:52:37Z`.
|
||||
|
||||
A yes accepts this digest as orientation. It does not mark EMERGENT-WP-0002 done, close RISK-F-0015, or authorize production use.
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1 @@
|
|||
{"approval_binding_digest":"sha256:7843e660694dcd7c806dc02ee0cca05dd3a96488f614b1946291496259a02001","approval_id":"05751e09-3a5b-4a41-a4e8-b79e96de6484","binding":{"justification":null,"principal":{"display_name":"uid=platform-root,ou=people,dc=netkingdom,dc=local","id":"uid=platform-root,ou=people,dc=netkingdom,dc=local","identifiers":[],"kind":"person","role":"reviewer"},"target":{"environment":"rehearsal","id":"emergent-security:knowledge:0.2.6:8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02","kind":"knowledge-profile","label":"Non-normative security orientation","requires_new_bind":true},"terms":null},"binding_level":"organizational","brief":"Accept only the orientation boundary of this exact release; operational authority and remaining review gates stay with their owners.","highlights":[{"id":"orientation-only","item_id":"emergent-profile-packet","locator":{"kind":"work_record","task":"EMERGENT-WP-0002-T02","workplan":"EMERGENT-WP-0002"},"note":"Acceptance is not runtime permission or completion of independent review, provider continuity or fleet rollout.","required_ack":true,"severity":"critical"}],"id":"emergent-profile-adoption-0-2-6","locale":"en","packet":[{"hash":"sha256:df4a9e0670901aa230d9f33fc9bd2fd1b1f967ef7e2613f840a257cb6b0a1197","item_id":"emergent-profile-packet","label":"Profile boundary and limitations"}],"question":"Accept Emergent Security knowledge 0.2.6 as a non-normative NetKingdom agent orientation profile?","requested_act":"approve","sealed":false,"step_kind":"approve","ui_release":"informed-decision@0.2.0","version":1}
|
||||
|
|
@ -0,0 +1,49 @@
|
|||
# Knowledge profile adoption request
|
||||
|
||||
Adopt Emergent Security knowledge 0.2.6, release digest 8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02, as a
|
||||
non-normative orientation profile for coding agents in NetKingdom.
|
||||
|
||||
The profile points to existing owners, withholds stale guidance, and separates
|
||||
human decisions, runtime approvals, PDP decisions, credentials and procedure
|
||||
records. This asks only to accept that orientation boundary. It does not amend
|
||||
owner contracts or authorize operational effects, autonomous execution, root,
|
||||
credential changes or fleet rollout.
|
||||
|
||||
Alternatives: return for wording/source corrections; decline this profile;
|
||||
accept this exact orientation boundary with the documented evidence limits.
|
||||
Changing the reviewed package requires a new review, not reuse of this answer.
|
||||
|
||||
Evidence: knowledge/sources.yaml; docs/decision-runbook-integration.md;
|
||||
docs/operational-contracts.md; docs/adoption-review.md; docs/evidence/.
|
||||
Earlier provider reports and owner reviews retain their original release pins.
|
||||
Whitehat's offline review accepted remediation of the two loaded-package library
|
||||
findings on the 0.2.3 digest, with disclosed shared-session limits. That
|
||||
acceptance does not extend to this seal. Continuity and harness proof remain open.
|
||||
A fresh 0.2.4 Codex, Claude, and Grok session each answered all 28 scenarios.
|
||||
Implementing review found no unsafe authority recommendation. Recipient
|
||||
qualifications remain, and that review is not independent ratification.
|
||||
Those 0.2.4 answers, resume reloads, and four Claude pilots stay pinned to
|
||||
that digest. They are not evidence for this seal. 0.2.5 reviews Informed
|
||||
Decision at b4f63732. That revision records local intake delivery,
|
||||
fresh-login/p01 acceptance, and a dev forwarder that preserves governed
|
||||
booleans. No listener, submitter grant, custody, or live route is claimed.
|
||||
A creating approval without a retained receipt is not retried.
|
||||
0.2.6 names the session owner as the recipient of a provider switch or
|
||||
compaction reload. glas-harness owns that session boundary. A live
|
||||
zone-endpoint question goes to zone-engine. The first two-case rerun on this
|
||||
seal has Codex, Claude, and Grok name zone-engine for that endpoint question
|
||||
and glas-harness for the reload. They do not use the fixture role label
|
||||
session-owner. A later two-case rerun, after the probe prompt named the token
|
||||
session-owner, has all three record that route and keep glas-harness in
|
||||
sources. Some source lists also name other card or envelope owners. Neither of
|
||||
those reruns is a full 28-case probe. A later full 28-case probe on this
|
||||
same seal has each provider preserve the authority boundary. zones is
|
||||
zone-engine and model-switch is session-owner. Seventeen route tokens match
|
||||
the fixture in each session, and recipient qualifications remain. Codex has
|
||||
no exact server model. That probe is not compaction proof, not independent
|
||||
Whitehat acceptance, and not acceptance of RISK-F-0015. 0.2.4 route results
|
||||
do not certify this wording.
|
||||
|
||||
The draft is unsubmitted. The proposed memo class and review group must be
|
||||
confirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005
|
||||
intake rollout remains unfinished. This draft resolves no Statehub decision.
|
||||
15
docs/batches/2026-10-04-emergent-profile/bound/index.json
Normal file
15
docs/batches/2026-10-04-emergent-profile/bound/index.json
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
{
|
||||
"kind": "informed-decision-bound-sitting",
|
||||
"sitting_id": "infd-sitting-2026-10-04-emergent-profile",
|
||||
"principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local",
|
||||
"submitted": false,
|
||||
"agent_disposition_forbidden": true,
|
||||
"memos": [
|
||||
{
|
||||
"memo_id": "emergent-profile-adoption-0-2-6",
|
||||
"approval_id": "05751e09-3a5b-4a41-a4e8-b79e96de6484",
|
||||
"memo": "emergent-profile-adoption-0-2-6.memo.json",
|
||||
"packet": "emergent-profile-adoption-0-2-6.packet.md"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
{
|
||||
"kind": "informed-decision-batch",
|
||||
"id": "infd-batch-2026-10-04-emergent-profile",
|
||||
"review_group": "net-kingdom-admins",
|
||||
"status": "draft-unsigned",
|
||||
"submitted": false,
|
||||
"one_question_per_memo": true,
|
||||
"approve_all_forbidden": true,
|
||||
"agent_disposition_forbidden": true,
|
||||
"hub_decision": "d20a9750-2b29-534e-8227-fb866581a6ca",
|
||||
"resolves_hub_decision": "never",
|
||||
"ordinal": [
|
||||
{
|
||||
"n": 1,
|
||||
"memo_id": "emergent-profile-adoption-0-2-6",
|
||||
"workplan": "EMERGENT-WP-0002",
|
||||
"task": "EMERGENT-WP-0002-T02",
|
||||
"question": "Accept Emergent Security knowledge 0.2.6 as a non-normative NetKingdom agent orientation profile?",
|
||||
"memo": "emergent-profile-adoption-0-2-6.memo.json",
|
||||
"packet": "emergent-profile-adoption-0-2-6.packet.md",
|
||||
"packet_hash": "sha256:df4a9e0670901aa230d9f33fc9bd2fd1b1f967ef7e2613f840a257cb6b0a1197",
|
||||
"required_highlight": "orientation-only"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -3,7 +3,7 @@
|
|||
"id": "infd-sitting-2026-10-04-emergent-profile",
|
||||
"review_group": "net-kingdom-admins",
|
||||
"principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local",
|
||||
"status": "approval-created",
|
||||
"status": "loaded",
|
||||
"hub_decision": "d20a9750-2b29-534e-8227-fb866581a6ca",
|
||||
"resolves_hub_decision": "never",
|
||||
"batches": [
|
||||
|
|
@ -18,6 +18,9 @@
|
|||
"approval_binding_digest": "sha256:7843e660694dcd7c806dc02ee0cca05dd3a96488f614b1946291496259a02001",
|
||||
"approval_expires_at": "2026-10-04T23:52:37.978131+00:00",
|
||||
"receipt": "docs/evidence/2026-10-04-emergent-profile-approval-create.json",
|
||||
"note": "One native approval is requested and has no human entry. The memo is not loaded and the hub decision is not resolved.",
|
||||
"note": "The memo is loaded in the live review store. It has no presentation and no disposition. The founder answers it. The hub decision is not resolved.",
|
||||
"loaded_observed_at": "2026-10-04T00:11:56Z",
|
||||
"policy_version": "v9",
|
||||
"policy_package_digest": "sha256:28fcb6c098a017fdc78b6768762af1b412ab55e1da22676ef37218e439ee148f",
|
||||
"packet_hash": "sha256:df4a9e0670901aa230d9f33fc9bd2fd1b1f967ef7e2613f840a257cb6b0a1197"
|
||||
}
|
||||
|
|
|
|||
22
docs/evidence/2026-10-04-emergent-profile-v9-rollout.json
Normal file
22
docs/evidence/2026-10-04-emergent-profile-v9-rollout.json
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
{
|
||||
"observed_at": "2026-10-04T00:11:56Z",
|
||||
"source_commit": "103d8b62183619478d70868d5028316975687d39",
|
||||
"helm_release": "flex-auth-informed-decision-sitting",
|
||||
"helm_namespace": "flex-auth",
|
||||
"helm_revision": 9,
|
||||
"previous_helm_revision": 8,
|
||||
"policy_image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:aa7ccbafb2a8f884c97119e295fd168fa4e67e974682a8c30b35149201469eff",
|
||||
"policy_version": "v9",
|
||||
"policy_package_digest": "sha256:28fcb6c098a017fdc78b6768762af1b412ab55e1da22676ef37218e439ee148f",
|
||||
"review_configmap": "informed-decision-runtime-35b00b8608e0",
|
||||
"previous_review_configmap": "informed-decision-runtime-b800648bd80b",
|
||||
"review_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ccca0b377bb8ba6af52a37edc453b5b51c96e380840ec8243ffaab3ac2170885",
|
||||
"memo_id": "emergent-profile-adoption-0-2-6",
|
||||
"approval_id": "05751e09-3a5b-4a41-a4e8-b79e96de6484",
|
||||
"loaded": true,
|
||||
"sealed": false,
|
||||
"presentations": 0,
|
||||
"dispositions": 0,
|
||||
"human_answer": "pending",
|
||||
"resolves_hub_decision": "never"
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue