coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Request a create-only sitting requester for INFD-WP-0002-T03.

Browse source 
Names informed-decision-sitting-requester (approval:create only, no
approve/consume, no redirect). Eight binding intents are drafted and
not posted; c01 stays undecided vs secrets-engine-requester. No secret,
no live registration, no bind.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-15 00:47:11 +02:00
parent 6289ecbb68
commit c333063185
7 changed files with 299 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/batches/2026-09-14/OPERATOR.md
View file

@ -31,8 +31,12 @@ Evidence: `docs/evidence/2026-09-14-infd-0002-t03-accept-reopened.json`.
denied. Request shape: `policy-request.md`. Do not expand the T03 mandate
in place.
2. **No `approval:create` requester** whose `binding.actor` matches these
acts. Do **not** reuse `secrets-engine-requester` for WSL2, clock
ownership, mason plan, or warden seal.
acts. Requested, **not applied**:
`docs/keycape-sitting-requester-registration.md`. Do **not** reuse
`secrets-engine-requester` for WSL2, clock ownership, mason plan, or
warden seal. Create intents (not posted):
`approval-create-intents.json`. `c01` is undecided between this client
and `secrets-engine-requester`.
3. Drafts still have `approval_id: null` and principal
`pending-human-session`. Live review refuses `missing_act_binding` /
`wrong_recipient`.

3
docs/batches/2026-09-14/README.md
View file

@ -26,3 +26,6 @@ Those memos are not this sitting. Live accept reopened 2026-09-14 22:16 UTC
(`/readyz` 200). This sitting stays `draft-unsigned` until native receipts,
a live KeyCape subject, a new Flex Auth package, and a human bind.
Attach (does not bind): `uv run python tools/attach_compact_bindings.py`.
Sitting requester (requested, not applied):
`docs/keycape-sitting-requester-registration.md`. Create intents (not posted):
`approval-create-intents.json`.

134
docs/batches/2026-09-14/approval-create-intents.json Normal file
View file

@ -0,0 +1,134 @@
{
"kind": "informed-decision-approval-create-intents",
"sitting_id": "infd-sitting-2026-09-14",
"status": "draft-not-posted",
"posted": false,
"requester_client": "informed-decision-sitting-requester",
"human_control": true,
"pdp_path": false,
"required_count": 1,
"note": "Intents only. Do not POST until the sitting requester exists and key-cape/approval-engine have accepted actor/principal. Digests are computed by approval-engine at create; do not invent them here.",
"intents": [
{
"memo_id": "infd-20260914-c01",
"create_client": "undecided",
"reason": "May be secrets-engine-requester if a later consume is in-scope.",
"binding": {
"action": "admit",
"actor": "informed-decision",
"principal": "secrets-engine",
"purpose": "Admit real native OpenRouter delivery for intelligence-radar on the existing reviewed lane",
"target": {
"id": "catalog:openrouter-llm-connect",
"type": "secret-catalog-lane",
"system": "secrets-engine"
}
}
},
{
"memo_id": "infd-20260914-c02",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "accept",
"actor": "informed-decision",
"principal": "railiance-platform",
"purpose": "Accept provisioning of the secrets-engine service JWT login on the reviewed credential lane",
"target": {
"id": "rpf-wp-0035-t02",
"type": "credential-lane",
"system": "railiance-platform"
}
}
},
{
"memo_id": "infd-20260914-c03",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "apply",
"actor": "informed-decision",
"principal": "netkingdom",
"purpose": "Apply the live OpenBao role addition already specified for the operator-tunneled browser callback",
"target": {
"id": "nk-wp-0032-t03",
"type": "openbao-role",
"system": "netkingdom"
}
}
},
{
"memo_id": "infd-20260914-c04",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "attend",
"actor": "informed-decision",
"principal": "ops-warden",
"purpose": "Attend the graded lockdown / break-glass seal for ops-warden trust-root work",
"target": {
"id": "warden-wp-0027-t02",
"type": "trust-root",
"system": "ops-warden"
}
}
},
{
"memo_id": "infd-20260914-d01",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "retire",
"actor": "informed-decision",
"principal": "the-custodian",
"purpose": "After HA failover and restore drills pass, retire WSL2 as a State Hub fallback",
"target": {
"id": "cust-wp-0038-t08",
"type": "operating-model",
"system": "the-custodian"
}
}
},
{
"memo_id": "infd-20260914-d02",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "confirm",
"actor": "informed-decision",
"principal": "helixforge-factory",
"purpose": "Confirm the existing operator-group claim for CCR-2026-0019 as required by the factory identity/audit/approval path",
"target": {
"id": "ccr-2026-0019",
"type": "ccr",
"system": "helixforge-factory"
}
}
},
{
"memo_id": "infd-20260914-d03",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "accept",
"actor": "informed-decision",
"principal": "mason",
"purpose": "Accept the fluid-telegram operator credential lane plan so construction may proceed",
"target": {
"id": "mason-wp-0005",
"type": "workplan",
"system": "mason"
}
}
},
{
"memo_id": "infd-20260914-d04",
"create_client": "informed-decision-sitting-requester",
"binding": {
"action": "confirm",
"actor": "informed-decision",
"principal": "railiance-clock",
"purpose": "Confirm ecosystem ownership and the security role for Railiance Clock as specified",
"target": {
"id": "rclk-wp-0002-t01",
"type": "workplan",
"system": "railiance-clock"
}
}
}
]
}