From d5f10213ece36a6f173389b28a8dc05ed8859c4a Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 15 Oct 2026 05:17:41 +0200 Subject: [PATCH] Record queued review for spend memo infd-20261014-b01 (lifecycle intake path) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 358047@bnt-lap001 Assistant-Session: fad68125-297a-449d-bfa7-cf9cdd49ca1d --- .custodian-brief.md | 3 +- .../2026-10-14-three-attempts/BROWSER-FILL.md | 157 ++++++++++++++++++ .../2026-10-14-three-attempts/OPERATOR.md | 14 ++ .../2026-10-14-three-attempts/sitting.json | 17 +- 4 files changed, 187 insertions(+), 4 deletions(-) create mode 100644 docs/batches/2026-10-14-three-attempts/BROWSER-FILL.md diff --git a/.custodian-brief.md b/.custodian-brief.md index a290bf6..c4bb1a8 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,7 +2,7 @@ # Custodian Brief — informed-decision **Domain:** infotech -**Last synced:** 2026-10-11 11:30 UTC +**Last synced:** 2026-10-13 23:57 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams @@ -11,6 +11,7 @@ ## Inbox Hygiene +**Stale unread:** 3 message(s) older than 3 day(s) — triage at session start. **Missing thread_id:** 3 unread message(s) lack supersession chains. --- diff --git a/docs/batches/2026-10-14-three-attempts/BROWSER-FILL.md b/docs/batches/2026-10-14-three-attempts/BROWSER-FILL.md new file mode 100644 index 0000000..2836f04 --- /dev/null +++ b/docs/batches/2026-10-14-three-attempts/BROWSER-FILL.md @@ -0,0 +1,157 @@ +# Browser fill sheet: memo infd-20261014-b01 + +Work top to bottom. Each step says how to tell if it is already done. Copy each box as-is. + +## 1. Create the draft +Done if: `https://decisions.coulomb.social/decisions` lists a decision with this question. Open it and go to step 2. +Otherwise open `https://decisions.coulomb.social/decisions/new/prepare`. + +**Question** +```text +Authorize up to three disposable Glas tool/commit attempts, EUR 10 in total and EUR 5 per attempt, charged at metered usage, until 2026-10-31? +``` + +**Context, alternatives and recommendation** +```text +Replaces the exhausted one-attempt envelope hfact-glas-tool-proof-20260927-renewed-one-attempt (run 6efa9436 failed before any provider request and was reconciled on 2026-10-13). Attempts run on the corrected runtime only after its free rehearsal passes. Credential apply/verify/exec and human review remain separate exact actions. No publication or automatic retry. Daily EUR 20 and lifetime EUR 500 ceilings retain previous liabilities. +``` + +**Subject or scope identifier** +```text +spend-envelope:hfact-glas-tool-proof-20261014-three-attempts +``` + +**Subject or scope label** +```text +Up to three metered Glas proof attempts (railiance01) +``` + +**Intended review:** Human approval (organizational). Then **Save draft**. + +> If you find two drafts with this question, continue with the newer one and leave the other unpublished. + +## 2. Attach the packet +Done if: the draft lists a document titled `infd-20261014-b01-packet`. +Open **Add a supporting document**. + +**Document title** +```text +infd-20261014-b01-packet +``` + +**Document text** +````text +# REINAH-WP-0008-T07 — three-attempt spend envelope for the metered Glas proof + +Blocking workplan: REINAH-WP-0008 +Blocking task: REINAH-WP-0008-T07 (hub prefix 80318842) +Related: REINAH-WP-0003-T05/T06, REINAH-WP-0008-T02 (settlement rule), +hub decision a93619a9, previous memo infd-20260927-b02 + +## Question +Authorize up to three disposable Glas tool/commit attempts, EUR 10 in total and EUR 5 per attempt, charged at metered usage, until 2026-10-31? + +## One act +Accept this envelope as the spend authority for rein-aharness MessagesOwner +`metered-once` attempts on railiance01, using the Anthropic key of catalog lane +`glas-claude-agent-dev-anthropic`. The accepted approval id becomes the +SpendPolicy `authority_ref` for envelope `hfact-glas-tool-proof-20261014-three-attempts`. The owner writes it with +`rein-aharness owner renew`. + +## Why a new envelope +The previous one-attempt envelope (memo infd-20260927-b02) is exhausted. Its run +6efa9436 failed with launcher exit 127 before any provider request. The owner +reconciled it on 2026-10-13 at an estimated USD 0.05, and the full EUR 10 hold +stays charged under that envelope's full-hold rule. The launcher defect is fixed +in runtime ee3d0a53, and a free bwrap rehearsal now runs before any paid attempt. + +## Enforced values (rein-aharness SpendPolicy, decimal strings) + +| Field | Value | Note | +| --- | --- | --- | +| `settlement` | observed-usage | New. See the accounting rule below | +| `max_runs` | 3 | New. A fourth attempt is refused | +| `per_run_eur` | 5 | Per attempt | +| `daily_eur` | 10 | Timezone Europe/Berlin | +| `total_eur` | 10 | Over the whole envelope | +| `eur_per_usd` | 1 | Accounting treatment, as in infd-20260927-b02 | +| `max_liability_usd` | 5 | Per attempt; reserves EUR 5 at admission | +| `max_budget_usd` | 5.00 | Claude CLI stop; must equal the Glas profile limit | +| `valid_from` | acceptance time | | +| `expires_at` | 2026-10-31T23:59:59Z | | + +Worker, target repository, project, profile and grant pins carry over unchanged +from the previous envelope. They narrow this envelope; they cannot widen it. + +## Accounting rule (observed-usage) +- Each provider request holds USD 4.64 while in flight (1M context at USD 4/M plus + 64k output at USD 10/M). With a USD 5 attempt cap, one request is in flight at a + time. +- A request whose stream completes is charged its metered cost: provider-reported + input, cache and output tokens at the admitted rates. +- An attempt is charged the larger of its metered requests and the cost the CLI + reports, at completion and at owner reconciliation. +- A request whose stream never completes stays at its full hold. Cost above a hold + marks the envelope breached and stops all attempts. + +## Resulting capacity +Each attempt reserves EUR 5 at admission, so a new attempt starts only while +settled attempts total at most EUR 5. Expected attempts cost cents to about a +euro, so three attempts fit. If the first two settle above EUR 5 together, the +third cannot start. A failed attempt blocks the next one until it is observed or +reconciled. + +## Must not +- Deliver, read or display the Anthropic key +- Authorize the OpenBao apply, verify or exec actions (separate approvals) +- Publish, schedule or automatically retry +- Raise any amount, add attempts or extend the expiry without a new memo +```` + +**Required acknowledgment** +```text +New accounting rule: a completed provider request is charged its metered cost (provider-reported tokens at the admitted rates), not its full USD 4.64 hold. This trusts provider-reported usage until you compare it with billing. Unfinished requests still count at full hold; any overrun freezes the envelope. Accepting this memo is the owner acceptance asked for in hub decision a93619a9. EUR/USD 1.00 is an accounting treatment; confirm fees and taxes fit before executing. +``` + +**What changed** +```text +Attach spend packet +``` + +Then **Save document in new revision**. + +## 3. Publish +Done if: the page shows the revision as published to `net-kingdom-admins`. +Open **Publish for discussion**. Leave **Members** empty. + +**Groups** +```text +net-kingdom-admins +``` + +Then **Publish this revision**. Publish the latest revision, the one that includes the packet. + +## 4. Request review +Done if: the page shows "Review handoff: …" with a **Download review request** link. + +**Principal** +```text +helixforge-factory +``` + +**Purpose** +```text +Accept up to three disposable metered Glas tool/commit attempts, EUR 10 total and EUR 5 per attempt, charged at metered usage; no publication or automatic retry; until 2026-10-31 +``` + +## 5. Download and queue +Click **Download review request** and save `decision-review-request.json`. Then run this in the Claude session, adjusting the path: +```text +! ssh railiance01 'kubectl -n state-hub exec -i deployment/state-hub-memo-dispatch -- python -m api.services.memo_dispatch --queue /data/private enqueue --envelope /dev/stdin' < /mnt/c/Users/bernd.worsch/Downloads/decision-review-request.json +``` + +Done if: the handoff state changes from "not submitted", or the page shows **Open protected human review**. + +## 6. Accept +Open **Open protected human review** and accept it with fresh MFA. Only you can do this. + diff --git a/docs/batches/2026-10-14-three-attempts/OPERATOR.md b/docs/batches/2026-10-14-three-attempts/OPERATOR.md index 07cfc1d..57258ca 100644 --- a/docs/batches/2026-10-14-three-attempts/OPERATOR.md +++ b/docs/batches/2026-10-14-three-attempts/OPERATOR.md @@ -78,3 +78,17 @@ memo dispatcher. The 2026-10-05 dependency-roots sitting is the precedent. The intake admits only class `decision-record`. The resulting review approval binds the review record, not the five-field `spend-envelope` binding above, so the owner must agree that it is valid spend authority before this path is used. + +## Queued 2026-10-15 (lifecycle intake path) + +The owner chose the intake path and agreed that the review-record approval is +valid spend authority. Workspace draft `2ccb4bda-e318-51d2-a8dd-709db768494f` +was published to `net-kingdom-admins`; the review request +`review-e2d2e98f-4701-45b0-abc1-4fe9f00bd1a8` was queued by the owner in the +State Hub memo dispatcher. Approval intent: `accept` by `helixforge-factory`. +The scope id carries a leading space (`" spend-envelope:hfact-glas-tool-proof-20261014-three-attempts"`); +intake accepts it and no rein-aharness check compares it. The packet digest is +`sha256:066036f3…` (same text as the drafted packet, CRLF line endings). The +compact-sitting approval create above was not used. Not accepted yet; the +accepted approval id becomes `authority_ref` for `owner renew`. +`BROWSER-FILL.md` is the fill sheet used for the workspace entry. diff --git a/docs/batches/2026-10-14-three-attempts/sitting.json b/docs/batches/2026-10-14-three-attempts/sitting.json index b6c95dd..64c5cce 100644 --- a/docs/batches/2026-10-14-three-attempts/sitting.json +++ b/docs/batches/2026-10-14-three-attempts/sitting.json @@ -2,11 +2,22 @@ "kind": "informed-decision-sitting", "id": "infd-sitting-2026-10-14-three-attempts", "review_group": "net-kingdom-admins", - "status": "draft-unsigned", + "status": "queued-for-review", "batches": [ "infd-batch-2026-10-14-three-attempts-budget" ], "memo_count": 1, - "bind_path": "create approval (attended), Flex Auth exact-record admission, load store, human accept", - "note": "Unsigned draft. Live bind substitutes pending-human-session with the authenticated key-cape subject." + "bind_path": "https://decisions.coulomb.social/ \u2014 open the review memo; the human binds there", + "note": "Owner chose the lifecycle intake path on 2026-10-15 and agreed that the review-record approval counts as spend authority. Drafted in the decision workspace as 2ccb4bda-e318-51d2-a8dd-709db768494f, published to net-kingdom-admins, review request prepared and queued by the owner in the state-hub memo dispatcher. Not accepted yet.", + "submitted": true, + "reviews": [ + { + "memo_id": "infd-20261014-b01", + "workspace_memo_id": "2ccb4bda-e318-51d2-a8dd-709db768494f", + "review_memo_id": "review-e2d2e98f-4701-45b0-abc1-4fe9f00bd1a8", + "packet_digest": "sha256:066036f3300e4f0eb9b0072a176761448334152c372c403a1682383b6e448cbd", + "packet_note": "Same text as infd-20261014-b01.packet.md (cd6da37f...); digest differs only by CRLF line endings from the browser form.", + "target_note": "Scope id was entered with a leading space: ' spend-envelope:hfact-glas-tool-proof-20261014-three-attempts' (type resource, system informed-decision as set by the form)." + } + ] }