Userinterface for executive decisions modeled as a sign and return book.
Find a file
tegwick f3061401fc Retain reviewed work-record index and synchronization metadata
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 18:45:53 +02:00
.forgejo/workflows Prepare independently reviewed zlib-only image candidate 2026-10-11 11:36:02 +02:00
deploy Prepare owner-reviewed zlib-only native release decision 2026-10-11 12:37:05 +02:00
docs Close verified zlib remediation and lifecycle repair workplan 2026-10-11 13:29:23 +02:00
history/20260909-initial-exploration Establish INTENT, Stage 1 GOAL, and founding workplan 2026-09-09 10:47:36 +02:00
informed_decision Reject advisory policy envelopes before lifecycle effects 2026-10-11 02:22:07 +02:00
intakes Retain reviewed work-record index and synchronization metadata 2026-10-11 18:45:53 +02:00
schemas INFD: frictionless decision intake design and workplan (CUST-WP-0075) 2026-10-03 09:21:05 +02:00
tests Prepare purpose image release with bounded custody protocol and owner reviews 2026-10-11 03:54:35 +02:00
tools Prepare independently reviewed zlib-only image candidate 2026-10-11 11:36:02 +02:00
workplans Close verified zlib remediation and lifecycle repair workplan 2026-10-11 13:29:23 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-10-11 13:30:44 +02:00
.dockerignore Package protected review runtime and prepare deployment admission 2026-09-11 01:21:37 +02:00
.gitignore Pin native-verified lifecycle image and production restore evidence 2026-10-04 23:50:19 +02:00
.repo-classification.yaml Use in-vocabulary capability tags 2026-09-09 12:40:50 +02:00
AGENTS.md Raise INFD-IN-0006: is §3's layer vocabulary closed, and what is surface? 2026-09-21 02:11:59 +02:00
Containerfile Prepare authenticated lifecycle runtime and production release candidate 2026-10-04 21:40:19 +02:00
Containerfile.fresh-auth Request fresh KeyCape login for timed reviews with narrow image candidate 2026-10-03 20:33:34 +02:00
Containerfile.fresh-auth.dockerignore Limit fresh authentication image build context to login module 2026-10-03 20:33:44 +02:00
Containerfile.memo-input Require fresh KeyCape authentication for decision review sign-in 2026-09-16 01:35:02 +02:00
Containerfile.memo-input.dockerignore Require fresh KeyCape authentication for decision review sign-in 2026-09-16 01:35:02 +02:00
GOAL.md Define headless decision lifecycle product and delivery plan 2026-10-04 17:33:43 +02:00
INTENT.md Reconcile Staff evidence readiness and retain exact verification residual 2026-10-11 04:17:59 +02:00
layer.yaml Reconcile Staff evidence readiness and retain exact verification residual 2026-10-11 04:17:59 +02:00
Makefile Package protected review runtime and prepare deployment admission 2026-09-11 01:21:37 +02:00
pep-stance.yaml Declare the layer per GH-DEC-2026-012; close T02 2026-09-09 22:25:35 +02:00
pyproject.toml Prepare authenticated lifecycle runtime and production release candidate 2026-10-04 21:40:19 +02:00
README.md Confirm native human acceptance and durable lifecycle production delivery 2026-10-05 00:21:06 +02:00
requirements.lock Prepare authenticated lifecycle runtime and production release candidate 2026-10-04 21:40:19 +02:00
SCOPE.md Record native authoring and discovery release; complete initial lifecycle delivery 2026-10-05 01:14:08 +02:00
uv.lock Prepare authenticated lifecycle runtime and production release candidate 2026-10-04 21:40:19 +02:00
WORK-RECORDS.md Retain reviewed work-record index and synchronization metadata 2026-10-11 18:45:53 +02:00

informed-decision

Decision lifecycle service for agents and humans: research, retrieve, prepare, evaluate, register, publish, comment, refine and human acceptance. The deployed initial architecture separates a headless foundation from the UI at decisions.coulomb.social; new decisions are runtime data, requiring no per-decision infrastructure rollout.

See the product and architecture contract and delivery workplan. The initial production audience is live and human acceptance is confirmed. SCOPE.md records the delivered boundary and remaining work.

A Decision Memo carries a question, the context needed to answer it, the requested act, and a binding between identity, what was shown, and what was bound. The promise is not "the file was signed" but "this person, in this role, was shown this view, and bound this act."

One object model from a ten-second login (L0) to a multi-party instrument (L5).

Where to start

File What it is
INTENT.md Why this repository exists and what it must never become
GOAL.md The current stage, its invariants, and its definition of done
workplans/ Current work
history/20260909-initial-exploration/ Founding exploration — schema, state transitions, canonicalization, vectors

Stage 1

Own the browser-facing approver UI that approval-engine deliberately does not contain, and answer in writing who owns it. approval-engine is a bearer-token resource server with no browser client; key-cape (KEY-WP-0013-T02) is waiting on a client_id and callback URI that no component has claimed. This repository claims them.

See GOAL.md.

Boundaries

This repository renders questions and records answers. It does not decide (access-engine), does not own the approval object (approval-engine), does not author approval doctrine (gate-house), does not authenticate anyone (key-cape), and does not archive the trail (audit-core).

Production intake and historical fallback

For the admitted State Hub / decision-record audience, register, revise and publish through the private lifecycle API, request review, then explicitly queue the returned envelope in the State Hub dispatcher. The human reviews through the existing protected browser path. See the deployed release.

tools/create_sitting_approvals.py / .sh, tools/attach_compact_bindings.py and tools/load_sitting_memos.py are historical compact-sitting fallback tools. They are not the normal path for new admitted decisions. Their original attended custody and approval requirements still apply; do not use them to bypass intake, uncertain-create handling, policy checks or human binding. Historical batch runbooks remain provenance, not the current intake workflow.