coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete intake delivery wiring and narrow remaining owner blockers

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029c-c003-7283-acc9-930b434e6cae
This commit is contained in:
tegwick 2026-10-03 21:34:50 +02:00
parent 49f8eb4c4b
commit ff59199c3b
13 changed files with 452 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

41
workplans/INFD-WP-0005-frictionless-decision-intake.md
View file

@ -24,8 +24,8 @@ state_hub_workstream_id: "c9407d2e-fd51-5afe-be4c-24483d1b2dbc"
Design: `docs/specs/FrictionlessDecisionIntake.md`.
Lifecycle review (2026-10-03): blocked after completing the local intake
service, durable ledger/outbox and doctrine-response incorporation. The remaining
runtime composition, custody, policy, receiver contracts and rollout require
service, durable ledger/outbox, scheduled delivery and doctrine-response incorporation. The remaining
intake listener composition, custody, policy, forwarding and rollout require
owner deliveries or founder approval. Requirements and acceptance evidence are
in `docs/intake-dependency-requirements.md`; no live change was made.
@ -88,7 +88,7 @@ state_hub_task_id: "b91af9d2-30ef-5c46-93f0-5faeba923b5d"
Hub write-back adapter `informed_decision/hub_writeback.py` behind
`INFD_HUB_WRITEBACK=1` (default off), with tests in `tests/test_hub_writeback.py`.
Not wired into the disposition path yet (T07).
Wired into the terminal-disposition outbox and opt-in scheduled runtime (T07).
## Authenticated intake service and ledger
@ -144,19 +144,21 @@ Replaces OPERATOR step A4.
```task
id: INFD-WP-0005-T07
status: wait
blocked_on: message-from:audit-core
blocking_reason: "Local queued notification/posed events and disposition write-back implemented; audit-core event registration and State Hub deduplicated notification contracts required for runtime wiring (docs/intake-dependency-requirements.md)"
status: done
priority: medium
depends_on: [INFD-WP-0005-T04]
state_hub_task_id: "22d361cc-4bf2-59d4-9b97-728d42b1aeee"
```
Notification and evidence: hub message to the founder on each posed memo
(id, question, class, submitter, link; no content); emit
(id, question, class, submitter, signed-in-overview reference; no content); emit
`informed-decision.memo.posed` to audit-core once registered (msg `23b670ac`);
wire `hub_writeback.write_back` into the terminal-disposition path with a local
outbox. Replaces OPERATOR step A5.
outbox. Replaces OPERATOR step A5. Implemented locally using the registered
AUDIT-WP-0011 receiver contract and State Hub's retained notification receipts
(the owner contract prohibits notification URLs).
The optional runtime `intake_delivery` configuration schedules immutable posed
evidence, notification and gated resolution delivery. Live acceptance remains T10.
## State Hub forwarding acceptance
@ -165,12 +167,18 @@ id: INFD-WP-0005-T08
status: wait
priority: medium
blocked_on: message-from:state-hub
blocking_reason: "State Hub as first registered submitter (forwarding decision memos with its SA token) is state-hub's change (msg e30dea31)"
blocking_reason: "Owner dev forwarder 49eeddb refuses governed bool fields (invalid_type); state-hub must fix its contract, choose the actual SA and supply reviewed grant/runtime forwarding (msg e30dea31), alongside T05/T06"
state_hub_task_id: "ce2b36b4-ef82-53b7-aee7-e0063855370b"
```
Register state-hub as a submitter and run an end-to-end pose from a hub
decision through to the founder's review page in a dev stack.
The owner's DevIntakeFixture now has a cross-repo negative fixture against the
real p01 envelope: `_bounded_tree` refuses `requires_new_bind`, `required_ack`
and `sealed` booleans. The owner must accept shared-schema boolean leaves;
removing or coercing binding fields here is not a compatible workaround.
Production submitter registration and browser/PDP acceptance also wait on
T05/T06 and the owner's chosen SA/runtime forwarding.
## Doctrine response
@ -219,10 +227,17 @@ revocation, replay/restart, collisions, daily budget, atomic rollback, uncertain
create refusal and receipt-based load recovery. No deployed listener is enabled.
T05 local create-only transport is implemented; workload token exchange and
custody remain external. T07 local integration jobs are durable and terminal
human dispositions enqueue resolution atomically; the worker preserves stable
ids and leaves unconfigured adapters and disabled write-back pending. Receiver
contracts and scheduled runtime composition remain blocked.
custody remain external. T07 is complete locally: posed jobs enter the ordinary
immutable audit outbox with receipt retention, per-class reconciliation and
optional 24-hour heartbeat; notifications require matching hub receipts and
stable idempotency keys. The scheduled runtime drains these and terminal human
resolutions when explicitly configured; disabled write-back remains pending.
Tests exercise the actual Audit Core receiver, lost-reply replay, counts,
readiness refusal and failed notification retention. Nothing was deployed.
Loose-end audit: all other current and archived workplans have only done/cancel
tasks. T05, T06, T08 and T10 remain waiting on the named external deliveries and
live acceptance; this plan remains blocked. No new task or workplan was opened.
T09: reply 4a290496 incorporated into the spec, with proposed-decision status
preserved. No founder ruling or deployment permission is inferred.