Integrate verified State Hub dispatcher into lifecycle release

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-04 22:44:01 +02:00
parent 4898c9b764
commit c084600082
10 changed files with 361 additions and 16 deletions

View file

@ -167,7 +167,7 @@ id: INFD-WP-0005-T08
status: wait
priority: medium
blocked_on: message-from:state-hub
blocking_reason: "Founder selected system:serviceaccount:state-hub:state-hub; production token projection and runtime forwarding remain, alongside T05/T06"
blocking_reason: "STATE-WP-0096 implements private queue/runtime and projected audience proposals; native forwarding acceptance waits on requester custody and approved rollout"
state_hub_task_id: "ce2b36b4-ef82-53b7-aee7-e0063855370b"
```
@ -271,3 +271,14 @@ registries and live runtime remain unchanged. T05/T06 remain waiting on native
custody and policy deployment; T08 still needs the State Hub production forwarder,
not merely its dev fixture. See docs/specs/LifecycleProductionRuntime.md and
FLEX-WP-0033 for exact boundaries.
## Private State Hub runtime delivered in source — 2026-10-04
STATE-WP-0096 adds the private explicit queue dispatcher, immutable CI image,
separate lifecycle/intake token projections, and isolated PVC/network proposal.
Cross-service proof covers retained lifecycle envelope forwarding, lost reply
following one native approval create, restart, replay receipt, human acceptance
and Audit Core delivery. 663 service tests pass (1 skipped), including this path;
28 State Hub dispatch/contract/notification tests pass. T08 remains waiting only
for approved native delivery/acceptance, not implementation of its runtime.

View file

@ -274,3 +274,15 @@ CCR-2026-0032 / RPF-WP-0051 owns requester delivery; INFD-WP-0005-T08 owns State
Hub forwarding/token projections. The exact chosen identity is no longer an open
question. Rollback must retain new evidence and must not run a schema-2 reader
on the migrated schema-5 database.
## Private dispatcher production continuation — 2026-10-04
STATE-WP-0096 now supplies the prepared private State Hub worker and audience
projections. No credentialed forwarding route is exposed through the unauthenticated
Hub API. Fixed a consumer contract mismatch: immutable lifecycle review envelopes
may omit serves and retain their review-UUID idempotency key. Integration proves
lost-reply/restart recovery without duplicate native approval, followed by human
review and independent audit. Validation: 663 passed, 1 skipped; 28 Hub tests.
The exact three worker objects are added to deploy/lifecycle. Native credentials,
rollout approval and human acceptance remain the next gates; no live mutation.