diff --git a/workplans/REINAH-WP-0003-governed-runtime-integrity.md b/workplans/REINAH-WP-0003-governed-runtime-integrity.md index d569513..f60c7c5 100644 --- a/workplans/REINAH-WP-0003-governed-runtime-integrity.md +++ b/workplans/REINAH-WP-0003-governed-runtime-integrity.md @@ -916,3 +916,33 @@ weekday canary results. T06 still requires the attended native requester/human approval and fresh spend/window described by the existing metered proposal. Those are existing owner gates; no new task/workplan or substitute approval has been created, and the workplan remains `blocked`. + +### Attended native review preparation — 2026-09-27 + +The user approved the existing EUR 10 single-attempt proposal and completed the +scoped requester authentication. Native spend request +`e9521804-8fce-4fbc-bfdf-8a1aa959fd61` was created without human entries. Memo +`infd-20260927-b01` is loaded at Informed Decision for the actual human reviewer; +the exact execution window is September 27, 16:35–17:35 UTC. Do not extend it +or treat the requested record as accepted spend authority. + +Deployed compact-sitting v4, admitting only that additional exact record while +preserving existing records and MFA requirements. Seven policy tests and the +fixture pass, including wrong-ID, wrong-digest and missing-MFA refusal. Both +rollouts succeeded and the review service reports ready. Flex Auth commits +`331d8c3`/`9993a7c`; Informed Decision commit `e415ec4`. + +The replacement spend/owner/catalog candidate passes offline review (two USD +4.64 holds within EUR 10), and all six action bindings were obtained from the +live named Secrets Engine policy evaluator. Evidence lives in Secrets Engine +`docs/proposals/glas-metered-tool-20260927/` (`0b49b7e`). These are evaluator +inputs, not human entries, consume receipts or execution authority. The temporary +caller credential was destroyed. Host policy hashes remain unchanged and all +three original spend-ledger tables remain empty; no ledger was reset. + +T05/T06 remain `wait`: human spend acceptance and billing/FX confirmation are +pending, followed by native per-lane approval/consume/delivery, current clock +admission and a natural queue attempt. The existing CCR-2026-0025 requester is +scoped to three older frozen T03 requests; its owner must admit the reviewed +six-request command before reuse. No provider credential was retrieved, paid +run dispatched, or new task/workplan opened. T04's tenant-owner gates remain.