coulomb/rein-aharness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record accepted budget and native credential review preparation
Some checks failed
Governed runtime contract / contract (push) Failing after 14s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
This commit is contained in:
tegwick 2026-09-27 21:18:19 +02:00
parent 292aec9f2f
commit 4e666d6fa3
2 changed files with 186 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

39
workplans/REINAH-WP-0003-governed-runtime-integrity.md
View file

@ -946,3 +946,42 @@ admission and a natural queue attempt. The existing CCR-2026-0025 requester is
scoped to three older frozen T03 requests; its owner must admit the reviewed
six-request command before reuse. No provider credential was retrieved, paid
run dispatched, or new task/workplan opened. T04's tenant-owner gates remain.
### Confirmed spend renewal and six credential memos — 2026-09-27
Original b01 acceptance was confirmed at 18:05:35 UTC, after its signed 17:35
execution deadline. No run was dispatched. Replacement b02 was accepted and
confirmed at 18:22:57 UTC, native ID `1e73e514-ef74-4bff-83e7-fa88a3eaba0c`,
valid for the same single EUR 10 attempt from September 27 18:20 through
September 28 18:20 UTC. The user separately confirmed from the billing account
that USD 10 including tax and conversion fees fits EUR 10. No retry or extra
attempt was added; the original signed record is preserved.
The user explicitly approved extending CCR-2026-0025 to the frozen six-request
packet. The contained requester created apply/verify/exec approvals for both
provider and worker-token lanes, without entries or consumes, then exited.
Receipt: Platform `docs/evidence/2026-09-27-metered-approval-requests.json`.
The six memos are loaded and ready for human review under ids
`metered-20260927-{provider,worker}-{apply,verify,exec}`.
Implemented and deployed exact-ID opt-in for ordinary human review in Informed
Decision, preserving default refusal, actual human identity and native ordinary
control. Only the three worker approval IDs are enabled. Policy v6 admits the
six exact memo/native digest pairs with the existing MFA bar. Review source
`34eda52`, image `0557edff`; policy image `86d74ae8`; rollouts and readiness pass.
The review suite passes 386 tests (65 skipped), the actual Approval Engine
contract/exact-ID checks pass 17 tests, policy tests pass 8, and the requester
and token-time suites pass 6. The candidate image scan reports zero findings.
Installed the already-admitted Railiance Clock wheel (`89d1419f`) and its
existing offline wheel dependencies in the host Secrets Engine controller venv;
`pip check` passes. The immutable proof runtime, metered owner, spend policy and
ledger were not changed. No provider/workload credential retrieval, approval
consume or paid dispatch occurred. Evidence and exact IDs:
`docs/evidence/2026-09-27-native-spend-review.json`.
T05/T06 remain waiting for the six human credential dispositions, bounded native
backend delivery/consume, natural execution and recovery acceptance. T04's
existing tenant-owner gates remain. The plan stays blocked; no new task or
workplan was opened. The previous unsigned-spend/requester-mandate blockers above
are superseded by the confirmed evidence in this return.