Request sitting-requester OpenBao custody without allocating a CCR.

Verifier + attended reader on a new informed-decision KV path, not a
widening of CCR-2026-0024/0025. Intents still match approval-engine
canonical binding. No secret, no apply, no bind.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-15 01:04:10 +02:00
parent c333063185
commit 8c03eb85c0
6 changed files with 123 additions and 3 deletions

View file

@ -150,8 +150,12 @@ create-only confidential client (`informed-decision-sitting-requester`,
`sub=informed-decision`, scope `approval:create` only, no approve/consume,
no redirect). Intents for the eight bindings are in
`docs/batches/2026-09-14/approval-create-intents.json` (`posted: false`;
`c01` create-client undecided). No secret, no POST, no bind. Task stays
`wait`.
`c01` create-client undecided). No secret, no POST, no bind.
2026-09-14 23:00 UTC — **custody requested from railiance-platform, no CCR
id allocated.** `docs/sitting-requester-custody-request.md` asks for a new
KV path `platform/workloads/informed-decision/sitting-requester` (verifier +
attended reader), not a widening of CCR-2026-0024/0025. Task stays `wait`.
## Feed outcomes back to State Hub without hub-authoring