coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ask Flex Auth list, not read, for each overview row (INFD-WP-0004-T03)

Browse source 
The overview now requests the new list action and its rows carry only the
memo id, version, question, live approval status and the person's own
responses without notes. Opening a memo still asks read; every act asks
its own action. The fixture Flex Auth package admits list under a
re-derived pin. Not deployable until flex-auth answers INFD-IN-0008.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 359683@bnt-lap001
Assistant-Session: eebdc939-7a9b-4e50-9d39-c8437e8a14ec
This commit is contained in:
tegwick 2026-09-21 22:53:31 +02:00
parent 180370ed44
commit 98c8de078e
10 changed files with 85 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/protected-browser-review.md
View file

@ -99,9 +99,11 @@ responses on every version.
The overview is not an inbox and not approval state:
- **It checks permission per row.** Each row gets its own fresh Flex Auth
`read` decision before its question is shown. It is the same check the
review uses, and each decision is stored as a policy observation. A refused
row does not call Approval Engine.
`list` decision before its question is shown, and each decision is stored as
a policy observation (`INFD-WP-0004`). `list` is not `read`: opening the
memo still asks `read`, and each act asks its own action. A refused row does
not call Approval Engine. Until the served package answers `list`, every row
shows as Not available.
- **It reads Approval Engine by id only.** The overview looks up the approval
id the memo already carries. It never polls for work. The status is shown
live and never stored. An unavailable engine, or an act digest that no longer