Record native authoring and discovery release; complete initial lifecycle delivery

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-05 01:14:08 +02:00
parent 9207a5134f
commit 96dcbfdfa2
16 changed files with 111 additions and 45 deletions

View file

@ -9,8 +9,8 @@
The headless lifecycle service and browser workspace are deployed at
`decisions.coulomb.social` under the founder-approved initial audience:
net-kingdom-admins humans and system:serviceaccount:state-hub:state-hub.
Service image 804d89fb runs schema 5; Access Engine owns lifecycle v1 and
compact-sitting v12 policy decisions. Approval Engine remains the approval-state
Service image 7f5c6cb2 runs schema 5; Access Engine owns lifecycle v1 and
compact-sitting v13 policy decisions. Approval Engine remains the approval-state
owner. The UI uses the shared service foundation; the private bearer API listens
on 8081 through informed-decision-workload and is absent from public ingress.
@ -24,25 +24,33 @@ Core counts match; prior 24 confirmed submissions were preserved.
Human acceptance of source revision 2 is confirmed at 2026-10-04T22:17:19Z,
with an exact presentation/disposition link and independent audit reconciliation.
Broader binding profiles and browser discovery remain live tasks in INFD-WP-0007; intake
The initial lifecycle delivery is complete in INFD-WP-0007; broader profiles
and external identity/source integrations are tracked in INFD-WP-0008; intake
initial delivery is completed in INFD-WP-0005. Issuer rotation is separately governed under Platform
RPF-IN-0004. Automatic Hub resolution write-back remains disabled.
Release/cutover procedure: `deploy/lifecycle/README.md`. Native receipts:
`docs/evidence/2026-10-05-lifecycle-cutover/`. Earlier statuses below are historical.
## Lifecycle authoring source increment — 2026-10-05
## Lifecycle authoring and discovery deployed — 2026-10-05
Implemented but not yet deployed: browser approval/discussion drafts, immutable
Deployed: browser approval/discussion drafts, immutable
supporting text documents with required acknowledgments, document/revision
comparison, and retained review-request downloads. The private API can retrieve
an exact revision's handoff under the existing events permission. These adapters
use the headless service; request preparation creates no native approval.
Validation: 669 tests passed (one skipped), followed by 50 focused checks and
16 Chromium checks against actual owner components with synthetic identity.
Evidence: `docs/evidence/2026-10-05-lifecycle-authoring/`. Attribute-based legacy
review discovery and broader binding contracts remain open in INFD-WP-0007.
Review overview discovery now uses recipient-scoped compact-sitting v13 admission;
read and act retain fresh, separate authorization. Native replay verifies list
allow for the retained recipient, another-recipient refusal and stale-read refusal.
This is not a new human login or disposition.
Validation: 671 tests passed (one skipped), 32 owner policy checks, 13 installed
container checks, zero HIGH/CRITICAL scan findings and the authoring increment's
16 Chromium checks. Fresh backup/restore and native outcome retrieval preserve
all 25 confirmed submissions. Argo is Synced/Healthy. Evidence:
`docs/evidence/2026-10-05-lifecycle-authoring/` and
`docs/evidence/2026-10-05-lifecycle-discovery/`.
## Status — 2026-09-27