informed-decision/workplans/INFD-WP-0008-lifecycle-expansion-contracts.md
tegwick ff80c1e944 Index completed lifecycle delivery and registered expansion residuals
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
2026-10-05 01:15:29 +02:00

2.5 KiB

id type title domain repo status owner topic_slug created updated origin origin_ref state_hub_workstream_id
INFD-WP-0008 workplan Lifecycle expansion beyond the initial production audience infotech informed-decision backlog codex netkingdom 2026-10-05 2026-10-05 residual INFD-WP-0007 c7752c09-2b18-55be-85e2-cec44836cfa5

Initial production choices are recorded in docs/specs/LifecycleAdmissionBoundary.md. This workplan preserves expansion work without claiming it was delivered by the initial organizational approval service. These tasks do not authorize live changes.

External workload identity and expanded publication

id: INFD-WP-0008-T01
status: todo
priority: medium
state_hub_task_id: "17787557-b5f8-5161-b449-8ef050e9fd5b"

Contract with KeyCape and Access Engine for agents outside cluster TokenReview, additional tenants/audiences and any anonymous publication. Retain per-record policy and authentication-derived attribution; do not treat arbitrary JWT claims as admission. Initial authenticated publication remains the supported path.

Source connector and retention controls

id: INFD-WP-0008-T02
status: todo
priority: medium
state_hub_task_id: "34c5dbaa-49ac-5294-a576-ab1833c3415e"

Select actual source connectors and define their retrieval/credential boundaries, network restrictions, content limits and provenance. Define retention/export/ erasure requirements and owner review before introducing deletion. Existing caller-supplied evidence and append-only custody remain the default.

Non-approval binding profiles

id: INFD-WP-0008-T03
status: todo
priority: medium
state_hub_task_id: "9c7b6e1d-dcb6-5f96-b623-01b3b4a50f54"

Define and implement non-approval L0/L2 presentation/disposition workflows against the shared schema with the identity, authorization and audit owners. Do not create an Approval Engine object solely to simulate an unrelated binding act. Preserve schema compatibility, human-only binding and revision-specific evidence.

Optional State Hub outcome write-back

id: INFD-WP-0008-T04
status: todo
priority: low
state_hub_task_id: "91d23710-8d7d-508f-98fd-9d778dcc6acd"

Independently admit and verify optional resolution write-back with State Hub. Keep explicit correlation, replay, and uncertain-outcome recovery; a human answer must never become an execution authorization. Current notification delivery and agent outcome retrieval remain available without automatic write-back.