coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare scoped factory audit custody and enforce receiver compatibility

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-11 02:01:57 +02:00
parent d3a502b45c
commit bfe65a5b05
11 changed files with 1053 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

31
workplans/RPF-WP-0035-credential-lane-implementation.md
View file

@ -7,7 +7,7 @@ repo: railiance-platform
status: blocked
owner: codex
created: "2026-09-05"
updated: "2026-09-10"
updated: "2026-09-11"
related:
- RPF-WP-0032
- RPF-WP-0033
@ -393,6 +393,35 @@ receipts to HFACT-WP-0001-T03, SECRETS-WP-0009-T03 and APPROVAL-WP-0002-T01/T05.
Audit receiver/sender custody remains AUDIT-WP-0009-T09 and must not be folded
into this client-identity grant.
## Admit the two factory audit-sender custody lanes
```task
id: RPF-WP-0035-T08
status: progress
priority: high
assignee: railiance-platform
needs_human: true
intervention_note: "CCR-2026-0021/0022 need named platform-operator, audit-core-owner and producer-owner reviews. Receiver upgrade and namespace readiness remain separate preconditions; approval alone does not admit factory execution."
```
Consume AUDIT-WP-0009-T09/T11's exact declarations for approval-engine and
informed-decision: tenant:platform, write-only, load-bearing, redact. Source
preparation supplies two proposed CCRs, independent exact-path policies/ESO
projections, and the attended `factory_audit_custody.py` first-provision helper.
Its CAS and request-provenance checks preserve unrelated senders and recover
interrupted writes without generating replacements. Native reviews and
provision/delivery/receiver-ingestion acceptance remain open.
The 2026-09-11 native read-only check found an additional deployment dependency:
receiver image c2fe39a is 1/1 Ready but does not support evidence_kind. The
synthetic native probe now refuses before any credential read. Current receiver
source passes. AUDIT T09/T11 retain compatible release/source-manifest rollout;
Approval Engine's missing namespace remains its owner prerequisite.
[Review packet](../docs/credential-lane-designs/factory-audit-senders-review.md).
[Preparation evidence](../docs/evidence/2026-09-11-factory-audit-custody.json).
Do not fold these senders into CCR-2026-0019 or the cancelled CCR-2026-0020.
## Dependency review — 2026-09-06
### 2026-09-09 tenant question resolved — no change needed