Last full rewrite was 2026-09-11, when the file correctly said "nothing is deployed." Sixteen days of production reality since then went unrecorded here: the decision overview and its list action (INFD-WP-0003/0004), the layer correction to Staff (GH-DEC-2026-017), audit-core going live (AUDIT-WP-0009 finished), the walking-skeleton proof landing (INFD-WP-0001-T08), and today's login fixes, requesting- party field, and two approved declaration-form amendments. Rewrote Status, Layer, and Open against directly-observed live state (kubectl exec inspect, fresh pytest runs: 382/66 local, 440/8 with the real Approval Engine) rather than carrying old numbers forward. Corrected one line in Out of Scope that read as false now that the overview exists (clarified it lists this repo's own memos, not an approval-engine list capability). Tightened the decision_attributable claim now that flex-auth can sign but this repository still doesn't verify. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 169987@bnt-lap001 Assistant-Session: 322ef1ef-9048-4021-8570-b6d6f6347999 |
||
|---|---|---|
| deploy | ||
| docs | ||
| history/20260909-initial-exploration | ||
| informed_decision | ||
| intakes | ||
| schemas | ||
| tests | ||
| tools | ||
| workplans | ||
| .custodian-brief.md | ||
| .dockerignore | ||
| .gitignore | ||
| .repo-classification.yaml | ||
| AGENTS.md | ||
| Containerfile | ||
| Containerfile.memo-input | ||
| Containerfile.memo-input.dockerignore | ||
| GOAL.md | ||
| INTENT.md | ||
| layer.yaml | ||
| Makefile | ||
| pep-stance.yaml | ||
| pyproject.toml | ||
| README.md | ||
| requirements.lock | ||
| SCOPE.md | ||
| uv.lock | ||
| WORK-RECORDS.md | ||
informed-decision
User interface for executive decisions, modelled as a sign-and-return book — the German Umlaufmappe / Zeichnungsbuch, made cryptographic.
A Decision Memo carries a question, the context needed to answer it, the requested act, and a binding between identity, what was shown, and what was bound. The promise is not "the file was signed" but "this person, in this role, was shown this view, and bound this act."
One object model from a ten-second login (L0) to a multi-party instrument (L5).
Where to start
| File | What it is |
|---|---|
INTENT.md |
Why this repository exists and what it must never become |
GOAL.md |
The current stage, its invariants, and its definition of done |
workplans/ |
Current work |
history/20260909-initial-exploration/ |
Founding exploration — schema, state transitions, canonicalization, vectors |
Stage 1
Own the browser-facing approver UI that approval-engine deliberately does
not contain, and answer in writing who owns it. approval-engine is a
bearer-token resource server with no browser client; key-cape
(KEY-WP-0013-T02) is waiting on a client_id and callback URI that no
component has claimed. This repository claims them.
See GOAL.md.
Boundaries
This repository renders questions and records answers. It does not decide
(access-engine), does not own the approval object (approval-engine), does
not author approval doctrine (gate-house), does not authenticate anyone
(key-cape), and does not archive the trail (audit-core).