Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
2.2 KiB
Lifecycle authoring and discovery release — 2026-10-05
Founder authorized deployment and the remaining INFD-WP-0007 implementation. Authority: ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED.
- Service source
da2c5a7; image 7f5c6cb29c9f70a026bfe30e72934274ddc69261676cf6d476f81dd32812d173. - Review policy source f234d01; owner CI image 6c6dc263f4a7f6461e109e133c004c080e8e373acfead8611856c5fb3e44168e.
- Owner Helm release flex-auth-informed-decision-sitting revision 13, compact-sitting v13.
- Manual Argo source
9207a5134f; Platform pin db3e13a. - Argo reports Synced/Healthy; health/readiness 200; public private-API paths 404.
- Store remains schema 5, 25 confirmed submissions, 174 delivered outbox rows, two lifecycle records/nine events, no pending lifecycle delivery.
A fresh protected off-cluster backup preceded each rollout. Authoring's offline restore preserved all counts; discovery changes no schema. Discovery backup SHA256: 8ac7bbe79de7cdcff5ebc9fa8adc9c49498bf8a3298c8fbc9bd7501be1a379bb. The superseded immutable runtime ConfigMap was pruned through a resource-scoped Argo operation after the new pod became healthy; its content remains in Git.
671 Python tests passed (one skip), 32 embedded owner policy tests passed, owner InformedDecision Go regressions passed, 13 installed container checks passed. Both artifact scans found zero HIGH/CRITICAL vulnerabilities. The prior authoring Chromium receipt has 16 passing checks, with synthetic identity.
Native authenticated service-caller evaluation replays retained human claims with their original assurance timestamp: recipient listing allows, another recipient is denied, and read with stale assurance is denied. It records no new human login or disposition. The actual State Hub workload retrieves the exact handoff and the previously confirmed human outcome. Only the human's earlier acceptance is claimed; agent verification never binds.
Initial release contracts are in LifecycleAdmissionBoundary.md. Expansion work has live records INFD-WP-0008-T01 through T04, and Platform issuer rotation remains RPF-IN-0004. No credential rotation, anonymous publication, external identity admission or non-approval signing profile was enabled here.