coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete intake delivery wiring and narrow remaining owner blockers

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029c-c003-7283-acc9-930b434e6cae
This commit is contained in:
tegwick 2026-10-03 21:34:50 +02:00
parent 49f8eb4c4b
commit ff59199c3b
13 changed files with 452 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

12
docs/specs/FrictionlessDecisionIntake.md
View file

@ -256,9 +256,11 @@ intake fact from a signed intake receipt. Then the PEP carries only ids.
(`deploy/review-groups.json`: review group → named recipient KeyCape `sub`),
never from memo content. Draft principal `pending-human-session` stays in the
unsigned record; the live bind still substitutes the authenticated subject.
- Notification: a State Hub message to the founder's inbox (`to_agent`
configured, default `bernd`) with memo id, question, class, submitter and the
review link. The signed-in overview (INFD-WP-0003) lists it as pending.
- Notification: the retained State Hub notification endpoint creates a message
to the founder's inbox (`bernd`) with memo id, question, class and submitter.
The owner contract prohibits URLs and names the signed-in overview as the
authoritative review entry point, replacing the initially proposed review
link. The overview (INFD-WP-0003) lists admissible memos as pending.
No packet content, no highlights, no secrets in the notification. Email/push
is a later channel owned elsewhere.
- audit-core receives `informed-decision.memo.posed` (submitter, class,
@ -369,7 +371,9 @@ R2/R5 re-arming includes authenticated drafting identity and independent grant
review. The unsigned PDP attribution gap remains explicitly declared.
The offline service and its durable integration worker are implemented; shipped
registries are empty and transports are injected. Runtime composition and live
registries are empty. Optional review-runtime delivery configuration now binds
State Hub transports and schedules posed audit evidence, notification and
disabled-by-default resolution. Private intake listener composition and live
acceptance remain blocked on the owner requirements in
`docs/intake-dependency-requirements.md`. These requirements do not arm a live
control or grant custody/deployment approval.