Record native sender acceptance and retained audit readback gate

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-11 14:23:07 +02:00
parent 1a12223574
commit c5367a5a54
4 changed files with 502 additions and 6 deletions

View file

@ -679,9 +679,15 @@ their mode and remain refused. The private evidence contract stays 0700/0600.
The new regression failed before the correction and passes after it; existing
2700/2770 directories remain unchanged and refused. The available full suite
passes 335 tests, with 39 optional checks skipped in this environment. The native
sender probe will consume this exact helper from pinned source before image
rebuild/publication. The previously built local image is superseded by this
source correction and must not be published as the final service candidate.
sender retry consumed this exact corrected helper and passed ingestion,
restart/duplicate and scope/read refusal checks. The rebuilt local image
`sha256:92cde609fca63141740d53594a80a513e250a4d68cdde98b973a9de66403d8c8`
passes eleven container checks, including verified setgid-volume startup,
restart and restore. The fixture now asserts the volume's actual 2770 mode;
its one-shot volume initializer explicitly retains FSETID for that setup only.
The service container still drops all capabilities. Independent archive
readback, bearer-revocation acceptance, image scan/publication and cutover remain.
Evidence: `docs/evidence/2026-09-11-factory-native-producers.json`.
T08 stays progress for native acceptance and the existing deployment/human
binding/recovery gates; no service cutover or human disposition occurred.