Prepare exact native recipient and record approval service activation

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6

docs/evidence/2026-09-14-approval-engine-deployment.json

@@ -0,0 +1,84 @@
+{
+  "storage": {
+    "schema_version": 5,
+    "expected_schema_version": 5,
+    "schema_current": true,
+    "persistent": true,
+    "required_tables": {
+      "approvals": true,
+      "entries": true,
+      "outbox": true
+    },
+    "integrity": [
+      "ok"
+    ],
+    "foreign_key_violations": 0,
+    "ok": true
+  },
+  "outbox": {
+    "total": 1,
+    "pending": 0,
+    "max_age_seconds": 0,
+    "attempts": 1,
+    "failed_pending": 0,
+    "counts": {
+      "issuance": 0,
+      "use": 0,
+      "supersession": 0,
+      "revocation": 0,
+      "heartbeat": 1
+    }
+  },
+  "restored": {
+    "schema_version": 5,
+    "expected_schema_version": 5,
+    "schema_current": true,
+    "persistent": true,
+    "required_tables": {
+      "approvals": true,
+      "entries": true,
+      "outbox": true
+    },
+    "integrity": [
+      "ok"
+    ],
+    "foreign_key_violations": 0,
+    "ok": true
+  },
+  "readiness": 200,
+  "anonymous_refusal": 401,
+  "invalid_bearer_refusal": 401,
+  "jwks_reachable": true,
+  "timestamp": "2026-09-13T23:06:37.566144+00:00",
+  "status": "deployed_and_restart_restore_verified",
+  "cluster_uid": "a553c742-0115-43d4-99a4-a5ca56fe0786",
+  "pod_uid_before_restart": "95215659-3b17-4ccf-ab8c-98418439cdbe",
+  "pod_uid_after_restart": "7b8c05d9-f1d5-403d-abb3-2250bff9db5e",
+  "image": "forgejo.coulomb.social/coulomb/approval-engine@sha256:251941a5cb2724b57cc32cff6b693b1ab0be695bee4f56f02d51961189c0fa49",
+  "resources": {
+    "limits": {
+      "cpu": "500m",
+      "memory": "256Mi"
+    },
+    "requests": {
+      "cpu": "25m",
+      "memory": "64Mi"
+    }
+  },
+  "caller_token_automount": false,
+  "tests": {
+    "repository": 156,
+    "changed_manifest": 6
+  },
+  "backup": {
+    "persistent_path": "/data/t03-initial-backup-20260914.sqlite",
+    "independent_local_copy": "/tmp/t03-approval-backup/restored.sqlite",
+    "restore_exercise": "isolated copy opened with actual engine; live database was not overwritten",
+    "retention": "initial test backups only; long-term backup schedule/retention not established"
+  },
+  "limitations": [
+    "No real approval created, human entry supplied, or credential consumed.",
+    "Consumer client-side reader and requesting identity remain unadmitted.",
+    "Heartbeat acknowledgment/outbox persistence proved; independent audit archive retrieval remains Audit Core owner work."
+  ]
+}