coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Close RPF-WP-0042 after sitting-requester exchange proof.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Verified create-only token, sibling deny, and no sitting POST.
Sittings remain INFD-WP-0002.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
This commit is contained in:
codex 2026-09-15 20:57:50 +02:00
parent 9ce42da97e
commit be8f18c464
3 changed files with 21 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

12
docs/evidence/2026-09-15-sitting-requester-exchange.json Normal file
View file

@ -0,0 +1,12 @@
{
"observed_at": "2026-09-15T18:56:32.167229+00:00",
"status": "verified",
"phase": "requester_verified",
"credential_values_emitted": false,
"sitting_post": false,
"secret_present": true,
"signature_verified": true,
"excess_scopes_refused": true,
"wrong_secret_refused": true,
"reader_scope_verified": true
}

2
workplans/README.md
View file

@ -14,7 +14,7 @@ implementations or independent incidents.
| [RPF-WP-0035](RPF-WP-0035-credential-lane-implementation.md) | Three remaining lanes: secrets-engine JWT, Fluid operator KV, KeyCape approval clients | Signing T04 is complete; T05 admission answered and awaiting owner approval plus a founder-attended window. |
| [RPF-WP-0036](RPF-WP-0036-platform-service-assurance.md) | Implemented local assurance/admission; waits for recurring restore evidence, Q2 reception and owner handoff | Run the assurance commands; live acceptance and external ownership remain gated. |
| [RPF-WP-0038](RPF-WP-0038-forgejo-scaleway-primary-coverage.md) | Native backup, full Scaleway archive recovery and 273 MiB Nextcloud essentials recovery verified; scheduled tier cutover remains | Bind recurring caller/dependencies, verified inventory, quota checks and separate owner retention. |
| [RPF-WP-0042](RPF-WP-0042-informed-decision-sitting-requester.md) | Sitting-requester custody applied; exchange proof remains | No sitting POST until create-only token proof. |
RPF-WP-0036-T02/T05/T07 are complete; T03/T04/T06 retain the remaining
acceptance gates. Treat credential exposure closure as the highest-priority attended

10
workplans/RPF-WP-0042-informed-decision-sitting-requester.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Allocate Informed Decision sitting-requester custody"
domain: financials
repo: railiance-platform
status: active
status: finished
flavor: implementation
owner: grok
topic_slug: railiance
@ -38,7 +38,7 @@ non-resolvable. ESO projection is unapplied source.
```task
id: RPF-WP-0042-T02
status: progress
status: done
priority: high
state_hub_task_id: "c6fbf99c-de2b-55be-9f0c-58be9fe7c518"
```
@ -66,3 +66,9 @@ and `scripts/prove-sitting-requester-exchange.sh`. It does not POST sittings.
failed at `preflight` with no failure class. A first browser sign-in did not
complete. Retry records a named failure class, reads KV through `bao`, and
overwrites a failed receipt only.
Retry 2026-09-15T18:56:32Z: receipt `verified`. Exact KV read, sibling and
parent deny, create-only RS256 token, excess scopes refused, wrong secret
refused. No sitting POST. Evidence:
`docs/evidence/2026-09-15-sitting-requester-exchange.json`. Platform custody
for this client is complete; sittings are INFD-WP-0002.