Record native authoring and discovery release; complete initial lifecycle delivery

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f

docs/evidence/2026-10-05-lifecycle-authoring/README.md

@@ -1,6 +1,8 @@
 # Lifecycle authoring validation — 2026-10-05
 
-Source implementation evidence; this increment has not been deployed.
+Original source validation evidence. This increment was subsequently deployed
+as 79aabf37 and retained in discovery release 7f5c6cb2. Native release receipts
+are in ../2026-10-05-lifecycle-discovery/.
 
 The browser can prepare approval or discussion drafts, append immutable text
 supporting documents and required acknowledgments, compare revisions, publish,

docs/evidence/2026-10-05-lifecycle-discovery/README.md

@@ -0,0 +1,35 @@
+# Lifecycle authoring and discovery release — 2026-10-05
+
+Founder authorized deployment and the remaining INFD-WP-0007 implementation.
+Authority: ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED.
+
+- Service source da2c5a7; image 7f5c6cb29c9f70a026bfe30e72934274ddc69261676cf6d476f81dd32812d173.
+- Review policy source f234d01; owner CI image 6c6dc263f4a7f6461e109e133c004c080e8e373acfead8611856c5fb3e44168e.
+- Owner Helm release flex-auth-informed-decision-sitting revision 13, compact-sitting v13.
+- Manual Argo source 9207a5134f92904f3843c200645ced91f247af72; Platform pin db3e13a.
+- Argo reports Synced/Healthy; health/readiness 200; public private-API paths 404.
+- Store remains schema 5, 25 confirmed submissions, 174 delivered outbox rows,
+  two lifecycle records/nine events, no pending lifecycle delivery.
+
+A fresh protected off-cluster backup preceded each rollout. Authoring's offline
+restore preserved all counts; discovery changes no schema. Discovery backup SHA256:
+8ac7bbe79de7cdcff5ebc9fa8adc9c49498bf8a3298c8fbc9bd7501be1a379bb.
+The superseded immutable runtime ConfigMap was pruned through a resource-scoped
+Argo operation after the new pod became healthy; its content remains in Git.
+
+671 Python tests passed (one skip), 32 embedded owner policy tests passed,
+owner InformedDecision Go regressions passed, 13 installed container checks
+passed. Both artifact scans found zero HIGH/CRITICAL vulnerabilities. The prior
+authoring Chromium receipt has 16 passing checks, with synthetic identity.
+
+Native authenticated service-caller evaluation replays retained human claims
+with their original assurance timestamp: recipient listing allows, another
+recipient is denied, and read with stale assurance is denied. It records no new
+human login or disposition. The actual State Hub workload retrieves the exact
+handoff and the previously confirmed human outcome. Only the human's earlier
+acceptance is claimed; agent verification never binds.
+
+Initial release contracts are in LifecycleAdmissionBoundary.md. Expansion work
+has live records INFD-WP-0008-T01 through T04, and Platform issuer rotation remains
+RPF-IN-0004. No credential rotation, anonymous publication, external identity
+admission or non-approval signing profile was enabled here.

docs/evidence/2026-10-05-lifecycle-discovery/native-outcome.json

@@ -0,0 +1 @@
+{"handoff_retrieved": true, "review_memo_id": "review-0d55a416-178c-46f5-b74b-b9b668390448", "human_dispositions": 1, "confirmed": true}

docs/evidence/2026-10-05-lifecycle-discovery/native-policy.json

@@ -0,0 +1 @@
+{"proof": "native authenticated service caller; replay of retained human claims with original assurance timestamp; no new human login or disposition", "policy_version": "v13", "policy_digest": "sha256:31be5985c0c1e6b0c3a039ed7310d1e94daf523a94f6d926e6e8d759d3711873", "results": {"retained_recipient_list": "allow", "other_recipient_list": "policy_denied", "stale_assurance_read": "policy_denied"}}

docs/evidence/2026-10-05-lifecycle-discovery/native-store.json

@@ -0,0 +1 @@
+{"schema_version": 5, "lifecycle": {"records": 2, "events": 9, "pending": 0}, "outbox": {"delivered": 174}, "submissions": {"confirmed": 25}}

docs/evidence/2026-10-05-lifecycle-discovery/public-checks.json

@@ -0,0 +1,7 @@
+{
+  "/healthz": 200,
+  "/readyz": 200,
+  "/v1/decisions": 404,
+  "/v1/memos": 404,
+  "/decisions": 401
+}