Record sitting-create failure class and allow retry.

Auth returned clean at 20:27Z but the child left a preflight receipt
with no error. Named failures, refuse public bao.coulomb.social, and
overwrite a failed receipt. Wrapper is executable for attended-exec.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-15 22:31:42 +02:00
parent 1cac74aa35
commit a911eaf816
4 changed files with 77 additions and 33 deletions

View file

@ -64,19 +64,17 @@ Open in this order. One question each. No approve-all.
2. Sitting requester is **live** (CCR-2026-0026/0027, exchange proof 2026-09-15).
Create seven objects from an **attended** reader session (skips `c01`):
Installed `warden` may not know this catalog id; use the source catalog.
OpenBao is the operator tunnel (`127.0.0.1:18200`), not public
`bao.coulomb.social`.
Installed `warden` may not know this catalog id. Use the attended wrapper
so `BAO_ADDR` is `http://127.0.0.1:18200` (public `bao.coulomb.social` is
retracted). 2026-09-15 20:27Z: login succeeded; the create child wrote a
failed `preflight` receipt with no failure class. Retry overwrites that
failed receipt and now records a named `failure`.
```sh
kubectl -n approval-engine port-forward svc/approval-engine 18281:8080
export WARDEN_ROUTING_CATALOG=/home/worsch/ops-warden/registry/routing/catalog.yaml
export BAO_ADDR=http://127.0.0.1:18200
export INFD_APPROVAL_ORIGIN=http://127.0.0.1:18281
warden access informed-decision-sitting-requester-login --exec -- \
/home/worsch/informed-decision/.venv/bin/python -B \
/home/worsch/informed-decision/tools/create_sitting_approvals.py \
--approval-origin http://127.0.0.1:18281
python3 /home/worsch/railiance-platform/scripts/openbao-attended-exec.py \
--lane informed-decision-sitting-requester-login -- \
/home/worsch/informed-decision/tools/create_sitting_approvals.sh
```
Dry-run (this shell): `uv run python tools/create_sitting_approvals.py --dry-run`.