Cut review over to the sitting PDP and load seven memos.

FLEX-WP-0028 admitted a dedicated package. Runtime ConfigMap and
NetworkPolicy now pin flex-auth-informed-decision-sitting. Memos are
in the live store for the existing named recipient. No human bind.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-15 23:35:35 +02:00
parent ca563504c4
commit d4b77a8c0e
6 changed files with 115 additions and 15 deletions

View file

@ -56,13 +56,14 @@ def attach(principal: str, receipt: dict, root: Path = ROOT) -> dict:
for row in index["ordinal"]:
expected.append((name, row["memo_id"], row["memo"], row["packet"]))
requests = receipt.get("requests") or []
if len(requests) != len(expected):
raise ValueError("receipt must cover every sitting memo once")
by_id = {row.get("memo_id"): row for row in requests}
if set(by_id) != {memo_id for _, memo_id, _, _ in expected}:
raise ValueError("receipt memo set must match the sitting")
sitting_ids = {memo_id for _, memo_id, _, _ in expected}
if not by_id or set(by_id) - sitting_ids:
raise ValueError("receipt memo set must be a non-empty subset of the sitting")
prepared = []
for name, memo_id, memo_name, packet_name in expected:
if memo_id not in by_id:
continue
approval = _approval(by_id[memo_id], memo_id)
memo = memo_from(json.loads((root / name / memo_name).read_text()))
if memo.approval_id is not None or memo.binding.principal.id != "pending-human-session":