diff --git a/deploy/sitting-admission.json b/deploy/sitting-admission.json index 160156a..d6af160 100644 --- a/deploy/sitting-admission.json +++ b/deploy/sitting-admission.json @@ -3,8 +3,8 @@ "policy": { "origin": "http://flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080", "package": "informed-decision.compact-sitting", - "version": "v9", - "package_digest": "sha256:28fcb6c098a017fdc78b6768762af1b412ab55e1da22676ef37218e439ee148f", + "version": "v10", + "package_digest": "sha256:ede11f888d57809dfce1b04d2323708c7244f36187fd5a58dd738437a05e7e91", "pod_name": "flex-auth-informed-decision-sitting" }, "keycape_egress_ips": [ diff --git a/docs/batches/2026-10-04-state-hub-wp0094/DEPLOY-v10.md b/docs/batches/2026-10-04-state-hub-wp0094/DEPLOY-v10.md index 1c48f43..fc7d6ae 100644 --- a/docs/batches/2026-10-04-state-hub-wp0094/DEPLOY-v10.md +++ b/docs/batches/2026-10-04-state-hub-wp0094/DEPLOY-v10.md @@ -1,4 +1,16 @@ -# STATE-WP-0094 memo admission — PROPOSED, NOT EXECUTED +# STATE-WP-0094 memo admission — deployed 2026-10-04 + +Founder authorized ("deploy when finished") and executed steps 1, 3 and 4 in an +attended terminal: Helm revision 10 on flex-auth@sha256:57077489…3f04 (CI build +of 58026ea, pin f32a1d4), ConfigMap informed-decision-runtime-75ab117cc787, +store backup, four memos loaded (24 → 28; presentations/dispositions unchanged). +Step 2 live policy checks were not run. Evidence: +docs/evidence/2026-10-04-state-hub-wp0094-v10-rollout.json. + +The original prepared package follows unchanged. + +--- + > **Approvals expire `2026-10-05T12:19:09Z`.** All four (`974eae4d`, `77993081`, > `4ae04c8e`, `b75752d1`) must be answered before then. If they lapse, none of diff --git a/docs/batches/2026-10-04-state-hub-wp0094/sitting.json b/docs/batches/2026-10-04-state-hub-wp0094/sitting.json index a694c6f..aa917c9 100644 --- a/docs/batches/2026-10-04-state-hub-wp0094/sitting.json +++ b/docs/batches/2026-10-04-state-hub-wp0094/sitting.json @@ -3,7 +3,7 @@ "id": "infd-sitting-2026-10-04-state-hub-wp0094", "review_group": "net-kingdom-admins", "principal": "uid=platform-root,ou=people,dc=netkingdom,dc=local", - "status": "approval-created", + "status": "loaded", "hub_decision": "7b19de6c-72a1-409e-89a9-ec3ac09c03fd", "resolves_hub_decision": "never", "batches": [ @@ -17,7 +17,7 @@ "freshness-schedule-enable-retire-sweep" ], "bind_path": "founder creates the approvals in an attended terminal, then exact-record admission, store load, and the founder's own answer per memo", - "note": "Four native approvals are requested with no human entry. Bound copies are in bound/. Policy v10 and the store load are prepared in DEPLOY-v10.md and not executed. Nothing is admitted or loaded; no answer exists. The hub decision is not resolved.", + "note": "Four memos loaded unanswered under v10. No answer exists. The hub decision is not resolved.", "approvals": [ { "memo_id": "state-hub-edge-receiving-rollout-c287ed8", @@ -44,5 +44,10 @@ "receipt": "docs/evidence/2026-10-04-state-hub-wp0094-approval-create.json", "proposed_policy_version": "v10", "proposed_policy_package_digest": "sha256:ede11f888d57809dfce1b04d2323708c7244f36187fd5a58dd738437a05e7e91", - "proposed_review_configmap": "informed-decision-runtime-75ab117cc787" + "proposed_review_configmap": "informed-decision-runtime-75ab117cc787", + "policy_version": "v10", + "policy_package_digest": "sha256:ede11f888d57809dfce1b04d2323708c7244f36187fd5a58dd738437a05e7e91", + "loaded_observed_at": "2026-10-04T13:12:00Z", + "review_configmap": "informed-decision-runtime-75ab117cc787", + "rollout_receipt": "docs/evidence/2026-10-04-state-hub-wp0094-v10-rollout.json" } diff --git a/docs/evidence/2026-10-04-state-hub-wp0094-v10-rollout.json b/docs/evidence/2026-10-04-state-hub-wp0094-v10-rollout.json new file mode 100644 index 0000000..ec1ee15 --- /dev/null +++ b/docs/evidence/2026-10-04-state-hub-wp0094-v10-rollout.json @@ -0,0 +1,66 @@ +{ + "observed_at": "2026-10-04T13:12:00Z", + "source_commit": "58026ea34a13f0bef103957e10818ea3b1d4458a", + "pin_commit": "f32a1d4", + "helm_release": "flex-auth-informed-decision-sitting", + "helm_namespace": "flex-auth", + "helm_revision": 10, + "previous_helm_revision": 9, + "policy_image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:5707748924f255e5ef9f50542fec5defee16294c062762466ea7a4e33a363f04", + "policy_image_verified": "docker pull RepoDigests matched the registry manifest; image policy.md reads version v10 and lists all four approval ids", + "policy_version": "v10", + "policy_package_digest": "sha256:ede11f888d57809dfce1b04d2323708c7244f36187fd5a58dd738437a05e7e91", + "review_configmap": "informed-decision-runtime-75ab117cc787", + "previous_review_configmap": "informed-decision-runtime-35b00b8608e0", + "review_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ccca0b377bb8ba6af52a37edc453b5b51c96e380840ec8243ffaab3ac2170885", + "store_backup": "/data/private/review-20261004-pre-wp0094.sqlite (consistent_snapshot true)", + "store_counts": { + "before": { + "memos": 24, + "presentations": 18, + "acknowledgments": 17, + "dispositions": 17 + }, + "after": { + "memos": 28, + "presentations": 18, + "acknowledgments": 17, + "dispositions": 17 + } + }, + "live_policy_checks": "not run: the in-pod policy-client check is undocumented; offline image exercise (1005 checks) was run on a locally built binary before the deploy, not on the published image", + "executed_by": "founder in an attended terminal (helm upgrade, ConfigMap create, Deployment patch, backup, store load); agent ran read-only rollout checks", + "memos": [ + { + "memo_id": "state-hub-edge-receiving-rollout-c287ed8", + "approval_id": "974eae4d-782d-41ed-93be-e34433b5fe59", + "loaded": true, + "sealed": false, + "human_answer": "pending" + }, + { + "memo_id": "owner-return-pickup-plan-b6222af", + "approval_id": "77993081-1db2-4bba-99f2-74ca1f8652b1", + "loaded": true, + "sealed": false, + "human_answer": "pending" + }, + { + "memo_id": "freshness-runner-deploy-trial-e77f8b4", + "approval_id": "4ae04c8e-d604-4d8b-b166-693eef855da8", + "loaded": true, + "sealed": false, + "human_answer": "pending" + }, + { + "memo_id": "freshness-schedule-enable-retire-sweep", + "approval_id": "b75752d1-bab6-4cf3-9308-5368c1d5aa91", + "loaded": true, + "sealed": false, + "human_answer": "pending" + } + ], + "approvals_expire_at": "2026-10-05T12:19:09Z", + "resolves_hub_decision": "never", + "hub_decision": "7b19de6c-72a1-409e-89a9-ec3ac09c03fd" +}