Prepare approved lifecycle authoring release and restore evidence

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f

deploy/lifecycle/README.md

@@ -168,3 +168,23 @@ Human acceptance is confirmed at 2026-10-04T22:17:19Z and linked to source
 revision 2, the exact presentation and independent audit receipts. Evidence and exact pins are retained
 in docs/evidence/2026-10-05-lifecycle-cutover/. Issuer rotation is a separate
 Platform residual, RPF-IN-0004; it was neither performed nor authorized here.
+
+## Authoring release — 2026-10-05
+
+Founder instruction: “Go on, deploy and implement the rest” (the final word was
+truncated in chat). Authority: ADMINISTER @ realm:kubernetes/railiance01,
+activation=APPROVED. Release source 9bc581a; image
+forgejo.coulomb.social/coulomb/informed-decision@sha256:79aabf37e3920261189996020f84562c27709937f74632582331712d74c5f289.
+This changes only the service image through the manually pinned Argo application;
+policy, credentials, runtime configuration and schema 5 remain unchanged.
+
+669 tests and 16 Chromium checks passed; installed container checks 13/13,
+HIGH/CRITICAL scan findings zero. Fresh production snapshot restored offline
+under the candidate preserves 25 confirmed submissions, 174 delivered outbox
+rows and two lifecycle records/nine events. Protected backup digest:
+5a22f06d5040e55fea46c4317349f9bc984186419616e5df913a4c6c44bf0b19.
+Server dry-run passed; client diff shows image replacement plus Argo tracking
+annotations supplied by Argo at sync. No direct resource apply is intended.
+The existing Recreate strategy prevents two writers; allow a short restart.
+If startup fails, revert the image pin to 804d89fb through Argo (same schema),
+retaining the current database and all post-backup evidence.

deploy/lifecycle/admission.candidate.json

@@ -1,5 +1,5 @@
 {
-  "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:804d89fb0bb3d691720380eedde4f361133bada717d1773c2eb349004346ebf1",
+  "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:79aabf37e3920261189996020f84562c27709937f74632582331712d74c5f289",
   "policy": {
     "origin": "http://flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080",
     "package": "informed-decision.compact-sitting",

deploy/lifecycle/service.candidate.json

@@ -96,7 +96,7 @@
             "containers": [
               {
                 "name": "informed-decision",
-                "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:804d89fb0bb3d691720380eedde4f361133bada717d1773c2eb349004346ebf1",
+                "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:79aabf37e3920261189996020f84562c27709937f74632582331712d74c5f289",
                 "securityContext": {
                   "allowPrivilegeEscalation": false,
                   "readOnlyRootFilesystem": true,