Record accepted spend authority for SECRETS-WP-0009-T03
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 6s

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 272244@bnt-lap001
Assistant-Session: c8962fa7-b290-47df-865f-403ddb6c77e9
This commit is contained in:
tegwick 2026-09-21 21:53:15 +02:00
parent 8c3c3b8856
commit bc5b256ca5

View file

@ -316,3 +316,20 @@ Received from the operator (Bernd), recorded here as inputs, not authorization:
CCR-2026-0019 approval-client reader token from the attended Warden session CCR-2026-0019 approval-client reader token from the attended Warden session
(real, reviewed, scoped only to its own KV path) written to a 0600 tmpfs file. (real, reviewed, scoped only to its own KV path) written to a 0600 tmpfs file.
No new identity or authority is minted. No new identity or authority is minted.
### 2026-09-21 spend authority accepted (step A)
The operator accepted Informed Decision memo `infd-20260921-b01` at 19:51:29 UTC
under fresh AAL2 MFA, after acknowledging that the EUR 100 monthly limit is not
enforced. Approval Engine approval `ba5ce2d8-8b6d-40be-af89-2e8c147029a3`
(binding `sha256:e9eaf454…`) carries the confirmed human entry. It is the
SpendPolicy `authority_ref` for envelope `hfact-glas-anthropic-2026-09`.
Enforced values: per_run_eur 5, daily_eur 20, total_eur 500, eur_per_usd 0.87,
max_liability_usd 5.74, max_budget_usd 5.00, expires 2027-01-31T23:59:59+01:00.
Path: flex-auth compact-sitting v2 (`4f66c4d`/`882b381`, image `d77378e1…`,
package `sha256:24a52478…`); informed-decision `c8c60eb`..`4065450` (memo,
parametrized create/attach tools, WSL2 clock-skew fix, review cutover inputs).
Receipt: informed-decision `docs/evidence/2026-09-21-budget-sitting-accept.json`.
This approval authorizes spend only; it is not the apply/verify/exec approval.
Next: step B, SpendPolicy scope fields from the admitted factory profile.