coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Preserve unsigned EUR 10 native activation candidate and evaluator bindings
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
This commit is contained in:
tegwick 2026-09-27 19:00:38 +02:00
parent 11cc0d5452
commit 0b49b7e82f
7 changed files with 2663 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

29
docs/proposals/glas-metered-tool-20260927/README.md Normal file
View file

@ -0,0 +1,29 @@
# EUR 10 native tool-proof candidate — 2026-09-27
Existing work: REINAH-WP-0003-T05/T06 and SECRETS-WP-0009-T03.
The user approved one disposable attempt. This packet is not installed or active.
Native spend request e9521804-8fce-4fbc-bfdf-8a1aa959fd61 is awaiting the human
at https://decisions.coulomb.social/review?memo_id=infd-20260927-b01.
Exact window: 2026-09-27T16:35:00Z through 2026-09-27T17:35:00Z.
Do not extend this window or treat an unsigned/expired memo as spend authority.
`spend-policy.json`, `owner.json` and `catalog/` are replacement candidates only.
The native ID is a requested reference, not evidence of acceptance.
`activation-review.json` passes the offline bounds review with two USD 4.64 holds.
`native-pdp-inputs.json` records the six exact requests and live native evaluator
responses from the named flex-auth-secrets-engine pod over Kubernetes port-forward.
These input bindings are not approval entries, consume receipts or execution authority.
The temporary ten-minute caller credential was destroyed after collecting them.
Host readback still matches owner e0d3fb84 and spend file f31c5859. Reservations,
request_routes and request_reservations remain empty. Recheck under owner lock
before replacement; preserve original policy/ledger and retire the old dispatch
capability. The new ledger filename is a candidate only; never reset old state.
Remaining gates: human spend acceptance, billing/FX including taxes and fees,
exact new native credential approvals and delivery, clock admission, host pins,
and one natural queue attempt with teardown/revocation. CCR-2026-0025 currently
limits its attended requester to three frozen older T03 requests. Admit a reviewed
command and these six exact requests through that owner before reusing the reader;
do not silently broaden it or submit these as the older records. Existing owner
work remains the tracking record; no task or workplan is added.