Connect lifecycle revisions to protected human review

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
tegwick 2026-10-04 20:33:24 +02:00
parent 0e79d69e27
commit f3b71b1521
16 changed files with 649 additions and 23 deletions

View file

@ -22,7 +22,7 @@ state_hub_workstream_id: "2b3e04ed-2137-584f-a6c2-f1abb29636fa"
Contract: `docs/specs/DecisionLifecycleService.md`. This extends the existing
memo and intake implementation. `INFD-WP-0005` continues to own intake runtime,
attribute admission, forwarding and live acceptance. Implementation started on
2026-10-04 at the founder's request. Production identity/policy admission and the human binding handoff remain
2026-10-04 at the founder's request. Production identity/policy admission and broader human binding profiles remain
open. The shared service now has a bearer API adapter and optional browser workspace.
## Record product direction and architecture
@ -226,3 +226,26 @@ broader authoring UI (T03/T05), full acceptance scenarios, immutable release and
rollback packet (T06), separately approved live rollout (T07). Source metadata
entry is implemented; automated fetching/retention is not. No deployment occurred.
Delivery and activation contract: `docs/specs/LifecycleWorkspaceDelivery.md`.
## Revision-specific human review handoff — 2026-10-04
T02–T06 continued with policy-authorized review requests, immutable source-to-intake
snapshots and authorized outcome retrieval. Intake checks exact retained envelope,
designated submitter and current source revision before creation and loading.
Existing uncertainty/replay behavior is reused. Source revisions invalidate old
review actions; in-flight/unresolved human entries prevent source revision.
Protected review pages show the source revision, and the lifecycle workspace
links ready reviews and displays evidence without caching approval validity.
The real Approval Engine/Audit Core source integration test creates and accepts
a snapshot of source revision two, correlates the confirmed human answer and
delivers evidence. Test identities and PDP transport are synthetic. Supported
profile and limits: `docs/specs/LifecycleReviewHandoff.md`. Production admission,
private forwarding, broader profiles/browser packet authoring, release/rollback
and approved live delivery remain on T02/T04/T05/T06/T07 and WP-0005. No task is
marked complete solely from source integration, and no rollout occurred.
Validation for this continuation: full cross-repository suite **634 passed,
5 skipped**; `git diff --check` passed. Schema-4 upgrade preserves existing
records and marks schema 5 to fence older readers. Implementation decision logged
as State Hub `ccb2e110-6032-4259-a402-989415a8d9fe` (not a rollout approval).