diff --git a/docs/evidence/2026-09-27-native-spend-review.json b/docs/evidence/2026-09-27-native-spend-review.json new file mode 100644 index 0000000..ef75143 --- /dev/null +++ b/docs/evidence/2026-09-27-native-spend-review.json @@ -0,0 +1,147 @@ +{ + "schema": "rein-metered-human-acceptance/v1", + "original": { + "dispositions": [ + { + "actor": { + "kind": "person", + "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local" + }, + "approval_id": "e9521804-8fce-4fbc-bfdf-8a1aa959fd61", + "at": "2026-09-27T18:05:35Z", + "id": "disp-ac17da64-a66c-4dcf-b38a-b9865cc4c406", + "memo_id": "infd-20260927-b01", + "memo_version": 1, + "note": null, + "presentation_id": "pres-dfb6ddd3-67eb-4ce4-9bd9-c4e186a6f868", + "reasons": [], + "verb": "accept" + } + ], + "submissions": [ + { + "disposition_id": "disp-ac17da64-a66c-4dcf-b38a-b9865cc4c406", + "approval_id": "e9521804-8fce-4fbc-bfdf-8a1aa959fd61", + "state": "confirmed", + "approved_at": "2026-09-27T18:05:35+00:00" + } + ] + }, + "original_execution_expires_at": "2026-09-27T17:35:00Z", + "original_usable_for_dispatch": false, + "reason": "confirmed acceptance occurred after the signed execution window", + "billing_confirmation": { + "source": "user reply in Codex session 2026-09-27", + "confirmed_usd_10_including_tax_and_conversion_fees_within_eur_10": true + }, + "replacement_memo": "infd-20260927-b02", + "replacement_native_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c", + "replacement_window": [ + "2026-09-27T18:20:00Z", + "2026-09-28T18:20:00Z" + ], + "paid_dispatches": 0, + "host_policy_replaced": false, + "replacement_acceptance": { + "dispositions": [ + { + "actor": { + "kind": "person", + "sub": "uid=platform-root,ou=people,dc=netkingdom,dc=local" + }, + "approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c", + "at": "2026-09-27T18:22:57Z", + "id": "disp-50329033-6c8b-4a78-a85b-40aa9b0272eb", + "memo_id": "infd-20260927-b02", + "memo_version": 1, + "note": null, + "presentation_id": "pres-17397b67-78cb-48dd-8ea4-2dd3977a6170", + "reasons": [], + "verb": "accept" + } + ], + "submissions": [ + { + "disposition_id": "disp-50329033-6c8b-4a78-a85b-40aa9b0272eb", + "approval_id": "1e73e514-ef74-4bff-83e7-fa88a3eaba0c", + "state": "confirmed", + "approved_at": "2026-09-27T18:22:57+00:00" + } + ] + }, + "credential_requests": [ + { + "memo_id": "metered-20260927-provider-apply", + "catalog": "glas-claude-agent-dev-anthropic", + "action": "apply", + "approval_id": "0c05bd0a-f81f-451d-840c-5565628e2edc", + "human_control": true, + "status_at_create": "requested" + }, + { + "memo_id": "metered-20260927-provider-verify", + "catalog": "glas-claude-agent-dev-anthropic", + "action": "verify", + "approval_id": "47f118a3-a86c-43ad-969d-42e09a0f45bb", + "human_control": true, + "status_at_create": "requested" + }, + { + "memo_id": "metered-20260927-provider-exec", + "catalog": "glas-claude-agent-dev-anthropic", + "action": "exec", + "approval_id": "7b32443a-a817-400c-a130-01b9ef04c8ee", + "human_control": true, + "status_at_create": "requested" + }, + { + "memo_id": "metered-20260927-worker-apply", + "catalog": "activity-core-metered-worker-token", + "action": "apply", + "approval_id": "2ce76d7f-01c3-4b63-8476-8d1230679769", + "human_control": false, + "status_at_create": "requested" + }, + { + "memo_id": "metered-20260927-worker-verify", + "catalog": "activity-core-metered-worker-token", + "action": "verify", + "approval_id": "c2af4bcf-15b4-4305-aac1-acc7e4dcb099", + "human_control": false, + "status_at_create": "requested" + }, + { + "memo_id": "metered-20260927-worker-exec", + "catalog": "activity-core-metered-worker-token", + "action": "exec", + "approval_id": "dc22666a-d5d7-46bc-9490-ebe9fe09dc38", + "human_control": false, + "status_at_create": "requested" + } + ], + "requester_extension_approved": true, + "review_deployment": { + "policy_version": "v6", + "policy_image": "sha256:86d74ae88bc3005bb6f1cc854e223f6f6abb6cbe66f74149f23951dc150032c9", + "review_source": "34eda52", + "review_image": "sha256:0557edffb0efccc2e283cb878bc3f85deacd8165b45eefde830c21f6f02710c8", + "exact_ordinary_ids_only": true, + "vulnerability_findings": 0, + "ready": true + }, + "validation": { + "review_suite_passed": 386, + "review_suite_skipped": 65, + "policy_tests_passed": 8, + "native_engine_contract_and_exact_id_tests_passed": 17, + "requester_tests_passed": 4, + "token_time_tests_passed": 2 + }, + "host_controller_clock": { + "wheel_sha256": "89d1419f038eff485a27a4206a19101ce7ca2976092971bbc796a77188fc93ad", + "installed_into": "/home/tegwick/secrets-engine/.venv", + "source": "existing /opt/railiance-clock/wheels", + "pip_check": "passed", + "proof_runtime_changed": false + } +} diff --git a/workplans/REINAH-WP-0003-governed-runtime-integrity.md b/workplans/REINAH-WP-0003-governed-runtime-integrity.md index f60c7c5..f6c74ff 100644 --- a/workplans/REINAH-WP-0003-governed-runtime-integrity.md +++ b/workplans/REINAH-WP-0003-governed-runtime-integrity.md @@ -946,3 +946,42 @@ admission and a natural queue attempt. The existing CCR-2026-0025 requester is scoped to three older frozen T03 requests; its owner must admit the reviewed six-request command before reuse. No provider credential was retrieved, paid run dispatched, or new task/workplan opened. T04's tenant-owner gates remain. + +### Confirmed spend renewal and six credential memos — 2026-09-27 + +Original b01 acceptance was confirmed at 18:05:35 UTC, after its signed 17:35 +execution deadline. No run was dispatched. Replacement b02 was accepted and +confirmed at 18:22:57 UTC, native ID `1e73e514-ef74-4bff-83e7-fa88a3eaba0c`, +valid for the same single EUR 10 attempt from September 27 18:20 through +September 28 18:20 UTC. The user separately confirmed from the billing account +that USD 10 including tax and conversion fees fits EUR 10. No retry or extra +attempt was added; the original signed record is preserved. + +The user explicitly approved extending CCR-2026-0025 to the frozen six-request +packet. The contained requester created apply/verify/exec approvals for both +provider and worker-token lanes, without entries or consumes, then exited. +Receipt: Platform `docs/evidence/2026-09-27-metered-approval-requests.json`. +The six memos are loaded and ready for human review under ids +`metered-20260927-{provider,worker}-{apply,verify,exec}`. + +Implemented and deployed exact-ID opt-in for ordinary human review in Informed +Decision, preserving default refusal, actual human identity and native ordinary +control. Only the three worker approval IDs are enabled. Policy v6 admits the +six exact memo/native digest pairs with the existing MFA bar. Review source +`34eda52`, image `0557edff`; policy image `86d74ae8`; rollouts and readiness pass. +The review suite passes 386 tests (65 skipped), the actual Approval Engine +contract/exact-ID checks pass 17 tests, policy tests pass 8, and the requester +and token-time suites pass 6. The candidate image scan reports zero findings. + +Installed the already-admitted Railiance Clock wheel (`89d1419f`) and its +existing offline wheel dependencies in the host Secrets Engine controller venv; +`pip check` passes. The immutable proof runtime, metered owner, spend policy and +ledger were not changed. No provider/workload credential retrieval, approval +consume or paid dispatch occurred. Evidence and exact IDs: +`docs/evidence/2026-09-27-native-spend-review.json`. + +T05/T06 remain waiting for the six human credential dispositions, bounded native +backend delivery/consume, natural execution and recovery acceptance. T04's +existing tenant-owner gates remain. The plan stays blocked; no new task or +workplan was opened. The previous unsigned-spend/requester-mandate blockers above +are superseded by the confirmed evidence in this return.