diff --git a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md index 7d03d09..8cbba68 100644 --- a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md +++ b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md @@ -316,3 +316,20 @@ Received from the operator (Bernd), recorded here as inputs, not authorization: CCR-2026-0019 approval-client reader token from the attended Warden session (real, reviewed, scoped only to its own KV path) written to a 0600 tmpfs file. No new identity or authority is minted. + +### 2026-09-21 spend authority accepted (step A) + +The operator accepted Informed Decision memo `infd-20260921-b01` at 19:51:29 UTC +under fresh AAL2 MFA, after acknowledging that the EUR 100 monthly limit is not +enforced. Approval Engine approval `ba5ce2d8-8b6d-40be-af89-2e8c147029a3` +(binding `sha256:e9eaf454…`) carries the confirmed human entry. It is the +SpendPolicy `authority_ref` for envelope `hfact-glas-anthropic-2026-09`. +Enforced values: per_run_eur 5, daily_eur 20, total_eur 500, eur_per_usd 0.87, +max_liability_usd 5.74, max_budget_usd 5.00, expires 2027-01-31T23:59:59+01:00. + +Path: flex-auth compact-sitting v2 (`4f66c4d`/`882b381`, image `d77378e1…`, +package `sha256:24a52478…`); informed-decision `c8c60eb`..`4065450` (memo, +parametrized create/attach tools, WSL2 clock-skew fix, review cutover inputs). +Receipt: informed-decision `docs/evidence/2026-09-21-budget-sitting-accept.json`. +This approval authorizes spend only; it is not the apply/verify/exec approval. +Next: step B, SpendPolicy scope fields from the admitted factory profile.