{
  "schema": "informed-decision.protected-browser-review.v1",
  "observed_at": "2026-09-10T22:29:50.412419+00:00",
  "base_commit": "2cc32168acedb19698fa196911385745fbf897b1",
  "contract_source_commits": {
    "approval-engine": "a0a602976eef818f36dde35f76f7f2e589bd051b",
    "audit-core": "5c0ad522fb36092aa7ec2e8d72f63a5a91853b5b",
    "flex-auth": "88b354377c8e26b162f1234e673072f1c06dcd89",
    "key-cape": "139994cfac28ff97163ce4bf263f2bb035bbe0a7"
  },
  "source_task": "INFD-WP-0001-T08",
  "source_task_status": "progress",
  "verification": {
    "command": "INFD_APPROVAL_ENGINE_SOURCE=/home/worsch/approval-engine INFD_AUDIT_CORE_SOURCE=/home/worsch/audit-core INFD_FLEX_AUTH_BINARY=<compiled-flex-auth> make check",
    "tests_passed": 344,
    "tests_failed": 0,
    "tests_skipped": 0,
    "new_tests": 86,
    "schema_json_valid": true,
    "flex_binary_sha256": "c7a1f35aa2cd7cf2733272923ace7fc4b4e55171db4ef8f3d0d6629183dcf1fa",
    "browser_checks_passed": 12,
    "browser_receipt": "2026-09-11-browser-result.json",
    "components": "actual Flex Auth HTTP server with caller enforcement and Approval Engine/Audit Core APIs; synthetic issuer, TokenReview, assignments and credentials"
  },
  "implemented": [
    "fresh pinned PDP checks before render, download and each action, with separate workload caller",
    "immutable policy observations and original act binding snapshot; decision_attributable remains false",
    "English organizational approval UI with explicit acknowledgments and accept/return/discuss/decline",
    "original confirmed entry and visible unresolved state; no automatic mutation retry",
    "owner runtime configuration, rotating token file callbacks, scheduled bounded audit delivery and readiness",
    "atomic SQLite schema v1-to-v2 upgrade; old UI-release/profile refusal"
  ],
  "browser_findings_fixed": [
    "no-referrer produced Origin:null on real form POST; same-origin pages preserve exact-origin CSRF checks"
  ],
  "component_findings_fixed": [
    "native caller plain-text 401/403 must remain caller_refused instead of policy_unavailable"
  ],
  "source_sha256": {
    "SCOPE.md": "b4568fe033b443d66833d1501fd5b04e01c9d6e95b44bae9666134e914ae758a",
    "docs/browser-authentication.md": "9354f8a95914cb353b93256df9e85c455bcf425107f507dd8f1ba6206026794a",
    "docs/durable-review-evidence.md": "f7f4a15faa479f3a132120a6fae27837bd2673afda93df7dbd29e8171a7911d0",
    "docs/evidence/2026-09-11-browser-result.json": "f405f5d11ae695a9ca8098f6c6a5f125042a62c3af9e87f21bc5e266b6f5a397",
    "docs/evidence/2026-09-11-recorded-desktop.png": "89f6e5396094155f2b1e04599f0a2b2d040f4dce004afa4dda752f234eef566a",
    "docs/evidence/2026-09-11-review-desktop.png": "e050eceb62cb389d516e4a889c67b1610df3f5539d04efdbafa4874700e90ca3",
    "docs/evidence/2026-09-11-review-mobile.png": "3a0b5b1e37b3a54c4eb34688b04bb38b18181b94106b062150fc1b70aa4f3f8a",
    "docs/flex-auth-review-contract.md": "3324b7b022fb5397d02520310bf43e0bfbff8c919e95ba9fecc94334dae8caf9",
    "docs/protected-browser-review.md": "28f5666a795997db6b6483ab6c3e0c6dab4cc7df948e57f1e5d02e5c45968317",
    "informed_decision/approval_http.py": "203f462ff78f1409f2f924d4723197fdd502087c7f6da319f46ffffce2a9d478",
    "informed_decision/http_transport.py": "fc9c1fd05cc89120d70bfcdb4c60fe244b81c8054d21505df8cfa9c5a229f7bc",
    "informed_decision/memo.py": "697058863a4e6de2c143a2433eaaf5e15e5e7375dc5459af6911b146567e8b5d",
    "informed_decision/oidc.py": "35b37bae67968c2179b22af8151afe2981d5468debf4488771eaf3121b75e221",
    "informed_decision/policy.py": "7bf814a8332ff054bf5f1f651d8816a408138b1f197b17da0abb7f87411e8812",
    "informed_decision/review.py": "c2d2aa1cf48d10d85b3606acf2830ab22701c1274221e5e2760d29901adfd786",
    "informed_decision/runtime.py": "6bc6a74657f526743cca6c6cdc0a86fff43d8282e0b867dc9288344636abe5eb",
    "informed_decision/store.py": "7a58b36d409cb4161b65985545e13573a5196779b4c6e95ca03ce45c6fada808",
    "informed_decision/ui.py": "69fb7fc1794c8842f42e7f0f5a261c4cf64176053ef0a532db46ee6566621219",
    "informed_decision/web.py": "00300dc25af3e272db7de748c255f8b1aa0b0182a54f2573e874ed5865da0fd8",
    "pyproject.toml": "26e77b2da1ce7d6f1878fb6ca46fdb2acebbad0f6e17f5528d5a1f1d01defe42",
    "tests/browser_fixture.py": "31feaf6e3351d9560498ffac2f06cae602f0762a01474bcff2c919c33db3cfcf",
    "tests/browser_review.mjs": "0285f2cff70e5d569f31c7e99c8b3a5b5ce98b3eb51c2203de3f2e958f2ac684",
    "tests/fixtures/review-policy/fixtures.json": "4c84a411383bfdbd32e15763ce2e934eefec570d93bc68389d6c81d11f3d4243",
    "tests/fixtures/review-policy/pin.json": "91c77e4daa0a1c8c394e14e6b0c9d9c493ff21389fefa592656aa363c1104611",
    "tests/fixtures/review-policy/policy.md": "cd0a5a79db840e1dad7cabece3976d1683387c71d8a5507476f49b421d180c24",
    "tests/fixtures/review-policy/registry.json": "cd358b139f5987dcd0b4c8ac9fffee7d86951b15a22216f6ec21240a51ec41cf",
    "tests/review_components.py": "415ef229aedd4def7af737274b4d341ddf4f40a912a8103a017d901b2cdecf2e",
    "tests/test_browser_auth.py": "c70e24495d2f968c0a48e4082032666b4f4325f60d7e736c5a27d0fb99ef0f33",
    "tests/test_http_transport.py": "d3dcf8051a7acfd152a583f7a865327ae60d880b9b07abc5f5fa9c693e95354e",
    "tests/test_policy_client.py": "8ab6f8a06e8b28b4933e0d8d23650c9781a5365343fc4926080c7c2d5e2962ed",
    "tests/test_review_component.py": "cd28100fbc66b64703f065c2a3638486043bee5e3e4a6e75de19eb58235f0d47",
    "tests/test_review_controller.py": "df3ddfb60dd06728ee871225df96da13462d69f648f214a5ea1b040388c78d53",
    "tests/test_review_runtime.py": "e230d9f590b86675b4d42f978cfd2bc769de404b3f5ad510a400ff2fcec62bbd",
    "workplans/INFD-WP-0001-founding-specs-and-approver-ui-ownership.md": "49f68a11c301b436655144d4819e827d0ec036fdb2b4463d2679ce8c36cc3b3a"
  },
  "limits": [
    "fixture-only policy; native caller/package/assignment admission pending",
    "unsigned decisions remain unattributable under GH-DEC-2026-010 / FLEX-WP-0024",
    "no native registration rollout, human login, deployment or audit custody proof",
    "English organizational approve profile only; German and wider product acceptance remain T08",
    "uncertain entry causation remains unresolved; no reset/retry shortcut",
    "audit accepted_at and source occurred_at counts do not prove completeness or reconstructability",
    "production packaging, private state, backup/restore and recovery admission pending"
  ],
  "browser_routes_implemented": true,
  "native_policy_admitted": false,
  "native_human_login_proven": false,
  "production_audit_custody_proven": false,
  "deployed": false,
  "factory_attempts": 0,
  "paid_model_calls": 0,
  "remaining_live_task": "INFD-WP-0001-T08",
  "factory_gate_task": "HFACT-WP-0001-T03"
}