coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Confirm p01 human acceptance and finish sitting and fresh login workplans

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029c-c003-7283-acc9-930b434e6cae
This commit is contained in:
tegwick 2026-10-03 20:49:52 +02:00
parent 4c4c6dc4d6
commit cf73346233
7 changed files with 201 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

25
workplans/ADHOC-2026-10-03.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Provisioning-window sitting draft for hub decision D1"
domain: infotech
repo: informed-decision
status: blocked
status: finished
owner: claude
created: "2026-10-03"
updated: "2026-10-03"
@ -37,10 +37,9 @@ batch index. Unsigned; no approval created, nothing submitted.
```task
id: INFD-WP-ADHOC-2026-10-03-T02
status: wait
needs_human: true
status: done
needs_human: false
decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
blocking_reason: "p01 is loaded and fresh-login fix deployed; founder must sign in at decisions.coulomb.social/auth/start with password/OTP, open p01, acknowledge the required highlight and choose a disposition. If actual fresh MFA still emits old assurance, KeyCape owns correction under INFD-IN-0005."
priority: high
state_hub_task_id: "ffbc2e30-7a6a-5fb4-86c9-3db1e4a0bacf"
```
@ -136,3 +135,21 @@ at 18:39 UTC (INFD-WP-0006). Revision 17 is Ready; public login now requests
fresh authentication from KeyCape. p01 and policy pins remain intact. Native
read and the founder's disposition are still pending. See
`docs/evidence/2026-10-03-fresh-auth-live-rollout.json`.
A6 completed by the founder at 18:45:15 UTC: p01 accepted, required highlight
acknowledged, native Approval Engine entry receipt confirmed for the exact
approval/subject/time. The fresh signed MFA timestamp was 18:44:51 UTC; read,
acknowledge and accept were allowed within the unchanged 900-second limit.
All four presentation/acknowledgment/disposition/result events have delivered
Audit Core receiver references. Receipt:
`docs/evidence/2026-10-03-provisioning-window-p01-acceptance.json`.
`sitting.json` now records acceptance by the authenticated human.
Residual handoff: CCR-2026-0018 coordinated disablement remains in the existing
live `RPF-WP-0035-T06` (KeyCape, Approval Engine and Platform owner confirmation).
The broader provisioning window and four excluded lanes remain tracked by
hub decision D1 `62aa95e4-3ccc-4867-8806-5e3db005b483` and their owner workplans.
This acceptance neither closes T06 nor resolves D1. Fresh-login implementation
and browser proof are completed in `INFD-WP-0006`; actionable freshness error
UX remains the existing live intake `INFD-IN-0005`. No residual is hidden in
this finished plan; no agent completed a human disposition.

16
workplans/INFD-WP-0006-fresh-review-authentication.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Request fresh issuer authentication for timed decision reviews"
domain: infotech
repo: informed-decision
status: blocked
status: finished
owner: codex
created: "2026-10-03"
updated: "2026-10-03"
@ -41,10 +41,9 @@ browser proof remains T02.
```task
id: INFD-WP-0006-T02
status: wait
status: done
priority: high
needs_human: true
blocking_reason: "Fresh-login image deployed on founder approval; founder must complete review password/OTP login so we can verify a new signed authentication time and p01 read allowance."
needs_human: false
state_hub_task_id: "dfcc2723-42bd-5b8f-b1b8-e205dc506764"
```
@ -75,3 +74,12 @@ with `prompt=login` and `max_age=0`. Read-only store verification confirms
schema 2, retained p01 and v7 policy digest. All process-local sessions reset.
Evidence: `docs/evidence/2026-10-03-fresh-auth-live-rollout.json`.
T02 remains wait solely for native human browser proof; no agent bound a memo.
Native proof completed 18:45:15 UTC: founder confirmed the review opened and
accepted p01. Live policy observations show signed KeyCape MFA at 18:44:51 UTC,
allowed exact p01 read/acknowledge/accept, and MFA age 24 seconds at accept.
The exact native approval entry is confirmed and all four audit events delivered.
Receipt: `docs/evidence/2026-10-03-provisioning-window-p01-acceptance.json`.
T02 is done; no policy limit was relaxed. Existing intake `INFD-IN-0005` retains
the independent actionable-freshness-error UX requirement, with this proof
recorded there. No remaining implementation or native-proof task in this plan.