Record the three unapproved T03 memo version 3 approval requests.

Assistant: grok Assistant-Session: 01a10745-04a2-78c1-99f7-822afb404d5f
2026-10-04 16:27:41 +02:00 · 2026-10-04 16:27:41 +02:00 · e59b5fa70f
commit e59b5fa70f
parent 8c7c34e84b
1 changed files with 147 additions and 0 deletions
--- a/docs/evidence/2026-09-27-t03-approval-requests.json
+++ b/docs/evidence/2026-09-27-t03-approval-requests.json
@ -0,0 +1,147 @@
+{
+  "observed_at": "2026-10-04T14:24:21.538321+00:00",
+  "status": "created",
+  "phase": "three_unapproved_requests_created",
+  "requests": [
+    {
+      "memo_id": "SECRETS-WP-0010-T03-apply",
+      "memo_version": 3,
+      "action": "apply",
+      "approval": {
+        "binding": {
+          "action": "apply",
+          "actor": "secrets-engine",
+          "digest": "sha256:03cc5b37437f14e86b686ce4054f976556334eff3fa260b03e8014ed3d9217e5",
+          "human_control": true,
+          "pdp_digest": "sha256:933427642c58c54f65dd4781b8e4c8e2f358eb96497ae35870fff4bd593d2b84",
+          "pdp_path": true,
+          "principal": "secrets-engine",
+          "purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
+          "target": {
+            "attributes": {
+              "auth_targets": [
+                "se-prod-openrouter-llm-connect"
+              ],
+              "fields": [],
+              "policy_targets": [
+                "se-prod-openrouter-llm-connect"
+              ],
+              "stage": "prod"
+            },
+            "id": "catalog:openrouter-llm-connect",
+            "system": "secrets-engine",
+            "type": "secret-catalog-lane"
+          }
+        },
+        "created_at": "2026-10-04T14:24:25+00:00",
+        "entries": [],
+        "id": "b5fcbfcc-ad56-456f-bc36-c823052e9917",
+        "required_count": 1,
+        "status": "requested",
+        "superseded_by": null,
+        "updated_at": "2026-10-04T14:24:25+00:00",
+        "validity": {
+          "expires_at": "2026-10-05T14:24:25.313653+00:00",
+          "not_before": "2026-10-04T14:24:25.313653+00:00"
+        }
+      }
+    },
+    {
+      "memo_id": "SECRETS-WP-0010-T03-verify",
+      "memo_version": 3,
+      "action": "verify",
+      "approval": {
+        "binding": {
+          "action": "verify",
+          "actor": "secrets-engine",
+          "digest": "sha256:72d9267d038c17107c880ffc9009793ce9c70defbddfe2219628854b811a04b2",
+          "human_control": true,
+          "pdp_digest": "sha256:9e36cdbf3890cc5a7e550fd57191f9c0f2a6b2180909aac302aa3b999e7e6b25",
+          "pdp_path": true,
+          "principal": "secrets-engine",
+          "purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
+          "target": {
+            "attributes": {
+              "auth_targets": [
+                "se-prod-openrouter-llm-connect"
+              ],
+              "fields": [
+                "OPENROUTER_API_KEY"
+              ],
+              "policy_targets": [
+                "se-prod-openrouter-llm-connect"
+              ],
+              "stage": "prod"
+            },
+            "id": "catalog:openrouter-llm-connect",
+            "system": "secrets-engine",
+            "type": "secret-catalog-lane"
+          }
+        },
+        "created_at": "2026-10-04T14:24:25+00:00",
+        "entries": [],
+        "id": "4e9ff881-d59f-4143-9155-929afbe8dd43",
+        "required_count": 1,
+        "status": "requested",
+        "superseded_by": null,
+        "updated_at": "2026-10-04T14:24:25+00:00",
+        "validity": {
+          "expires_at": "2026-10-05T14:24:25.597392+00:00",
+          "not_before": "2026-10-04T14:24:25.597392+00:00"
+        }
+      }
+    },
+    {
+      "memo_id": "SECRETS-WP-0010-T03-exec",
+      "memo_version": 3,
+      "action": "exec",
+      "approval": {
+        "binding": {
+          "action": "exec",
+          "actor": "secrets-engine",
+          "digest": "sha256:f2cf0fb53b740900756ccde5587c3578fcff44beef2f1edab17b9a198a4033d8",
+          "human_control": true,
+          "pdp_digest": "sha256:9f17812750fc8962b0fc58fc09df136850c9935a864fafa998a1c030dfb75bd9",
+          "pdp_path": true,
+          "principal": "secrets-engine",
+          "purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
+          "target": {
+            "attributes": {
+              "auth_targets": [
+                "se-prod-openrouter-llm-connect"
+              ],
+              "fields": [
+                "OPENROUTER_API_KEY"
+              ],
+              "policy_targets": [
+                "se-prod-openrouter-llm-connect"
+              ],
+              "stage": "prod"
+            },
+            "id": "catalog:openrouter-llm-connect",
+            "system": "secrets-engine",
+            "type": "secret-catalog-lane"
+          }
+        },
+        "created_at": "2026-10-04T14:24:26+00:00",
+        "entries": [],
+        "id": "a24e0898-b3c5-4e50-85a8-18a2c2aa229e",
+        "required_count": 1,
+        "status": "requested",
+        "superseded_by": null,
+        "updated_at": "2026-10-04T14:24:26+00:00",
+        "validity": {
+          "expires_at": "2026-10-05T14:24:25.857562+00:00",
+          "not_before": "2026-10-04T14:24:25.857562+00:00"
+        }
+      }
+    }
+  ],
+  "credential_values_emitted": false,
+  "signature_verified": true,
+  "excess_scopes_refused": true,
+  "wrong_secret_refused": true,
+  "reader_scope_verified": true,
+  "human_entries_created": false,
+  "approvals_consumed": false
+}