tegwick d4b77a8c0e Cut review over to the sitting PDP and load seven memos.

FLEX-WP-0028 admitted a dedicated package. Runtime ConfigMap and
NetworkPolicy now pin flex-auth-informed-decision-sitting. Memos are
in the live store for the existing named recipient. No human bind.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267

2026-09-15 23:35:35 +02:00

4.6 KiB

Raw Blame History

Compact sitting — operator packet (INFD-WP-0002-T03)

Review group: net-kingdom-admins. Surface: https://decisions.coulomb.social/ Contract: docs/specs/CompactSignoffBatches.md.

An agent may draft, order, and record evidence. It may not accept / decline / seal. Do not mark INFD-WP-0002 finished on a partial sitting.

What is already proven

On 2026-09-14 around 01:06 UTC this origin took three real human accepts for SECRETS-WP-0010-T03-{apply,verify,exec}. That is T08 history, not this batch. infd-20260914-c01 must not reuse those approval ids.

Live accept reopened (2026-09-14 22:16 UTC)

audit-core /readyz was hanging; the Service had no ready endpoints; this origin refused accept (/readyz 503). audit-core b0e6792 rolled out. Now:

Origin /healthz 200, /readyz 200 ready, /auth/start 303 to KeyCape
Review pod reaches audit-core.audit-core.svc:8080 healthz/readyz 200
Preflight: live_accept=open, still not ready_to_sit

Evidence: docs/evidence/2026-09-14-infd-0002-t03-accept-reopened.json.

What still blocks this sitting

Flex Auth still admits only the three T03 memo ids (FLEX-WP-0027, examples/informed-decision-t03). Compact ids would be denied. Request shape: policy-request.md. Do not expand the T03 mandate in place.
No approval:create requester whose binding.actor matches these acts. Requested, not applied: docs/keycape-sitting-requester-registration.md. Do not reuse secrets-engine-requester for WSL2, clock ownership, mason plan, or warden seal. Create intents (not posted): approval-create-intents.json. c01 is undecided between this client and secrets-engine-requester.
Drafts still have approval_id: null and principal pending-human-session. Live review refuses missing_act_binding / wrong_recipient.
A human must bind. An agent must not.

Eight unsigned memos (this sitting)

Open in this order. One question each. No approve-all.

n	memo_id	Blocking record
1	`infd-20260914-c01`	SECRETS-WP-0010 native delivery
2	`infd-20260914-c02`	RPF-WP-0035-T02
3	`infd-20260914-c03`	NK-WP-0032-T03
4	`infd-20260914-c04`	WARDEN-WP-0027-T02
5	`infd-20260914-d01`	CUST-WP-0038-T08
6	`infd-20260914-d02`	HFACT-WP-0001-T03
7	`infd-20260914-d03`	MASON-WP-0005 plan
8	`infd-20260914-d04`	RCLK-WP-0002-T01

After requester, receipts, and policy admission

uv run python tools/sitting_bind_preflight.py --origin https://decisions.coulomb.social — live_accept must stay open.
Sitting requester is live (CCR-2026-0026/0027, exchange proof 2026-09-15). Create seven objects from an attended reader session (skips c01):

Installed warden may not know this catalog id. Use the attended wrapper so BAO_ADDR is http://127.0.0.1:18200 (public bao.coulomb.social is retracted). 2026-09-15 20:27Z: login succeeded; the create child wrote a failed preflight receipt with no failure class. Retry overwrites that failed receipt and now records a named failure.
```
kubectl -n approval-engine port-forward svc/approval-engine 18281:8080
python3 /home/worsch/railiance-platform/scripts/openbao-attended-exec.py \
  --lane informed-decision-sitting-requester-login -- \
  /home/worsch/informed-decision/tools/create_sitting_approvals.sh
```
Dry-run (this shell): uv run python tools/create_sitting_approvals.py --dry-run. Do not invent a digest. c01 stays off this client until decided.
uv run python tools/attach_compact_bindings.py --principal <exact-keycape-sub> --receipt <created.json> writes bound/ copies. Unsigned drafts stay unsigned.
Flex Auth admits a new package pinning those eight memo: ids to the native approval id/digest, same identity bar as T03, deny everything else.
2026-09-15 21:31 UTC: review runtime now uses sitting PDP flex-auth-informed-decision-sitting / informed-decision.compact-sitting. Seven memos are in the live store for the existing named recipient. c01 is not loaded.
Sign in at https://decisions.coulomb.social/ . Open in order:

/review?memo_id=infd-20260914-c02 /review?memo_id=infd-20260914-c03 /review?memo_id=infd-20260914-c04 /review?memo_id=infd-20260914-d01 /review?memo_id=infd-20260914-d02 /review?memo_id=infd-20260914-d03 /review?memo_id=infd-20260914-d04

Acknowledge the required highlight. Bind that memo. Repeat.
Unfinished memos stay in the batch. File-level owning-repo updates are T04 after a human bind, via fix-consistency, never POST /workplans/.

4.6 KiB Raw Blame History