coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add rotating create-only requester provider and owner review

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1046b-5629-7f52-badd-f718eadb6042
This commit is contained in:
tegwick 2026-10-04 11:21:04 +02:00
parent b65363527e
commit eb9614c267
4 changed files with 283 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
workplans/INFD-WP-0005-frictionless-decision-intake.md
View file

@ -113,7 +113,7 @@ status: wait
priority: high
blocked_on: message-from:railiance-platform
needs_human: true
blocking_reason: "Requester CLIENT_SECRET must reach the review pod by ESO (railiance-platform, msg cd811073) and the custody change needs the founder's go"
blocking_reason: "Founder-approved ESO binding/mount accepted for source integration; private listener and CA-verified TokenReview runtime composition, immutable image/config, native custody proof and separate live go remain"
state_hub_task_id: "3b0f536c-e8ee-5493-b663-2f60f5f429ad"
decision_id: "0d6792b6-59e4-4fa0-887a-c4e51ea8e131"
```
@ -246,3 +246,16 @@ preserved. No founder ruling or deployment permission is inferred.
2026-10-04 CUST-WP-0075 owner routing: `INFD-WP-0005-T05` remains a human wait under open decision `0d6792b6-59e4-4fa0-887a-c4e51ea8e131`. Exact scoped human act and native receipts remain required; this metadata records no approval or execution. Completed predecessor edges removed: INFD-WP-0005-T04; completed source evidence remains in the history and does not satisfy the human gate.
2026-10-04 CUST-WP-0075 owner routing: `INFD-WP-0005-T10` remains a human wait under open decision `24b0c846-a58e-43bc-ab80-988180ddd2f9`. Exact scoped human act and native receipts remain required; this metadata records no approval or execution. Completed predecessor edges removed: INFD-WP-0005-T07; completed source evidence remains in the history and does not satisfy the human gate.
2026-10-04 requester owner worker: reviewed platform source
`6b91d510395215d178d60ee8884e7fc00930a0cf` and accepted the approved dedicated
ESO binding and exact read-only mount for source integration; see
`docs/requester-workload-owner-review.md`. Implemented `requester.py` rotating
file-backed client-credentials callback with RS256/JWKS and exact service profile,
and `compose_intake` joining the existing ledger/client/TokenReview seam.
37 focused offline tests pass. No deployed runtime invokes this factory yet;
private listener, CA-verified TokenReview transport, ESO TokenRequest check,
immutable owner image/config and native rotation/revocation proof remain.
T05 stays wait and the wider human decision stays open for the concrete live
packet. No live action, credential retrieval or issuer mutation occurred.