secrets-engine/docs/proposals/glas-metered-tool-20260927/README.md
tegwick 62192028d6
Some checks failed
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Has been cancelled
Reconcile completed evidence and block remaining external acceptance
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e72b-466d-75c0-b550-2474a3be5f36
2026-09-28 10:43:27 +02:00

2.3 KiB

EUR 10 native tool-proof candidate — 2026-09-27

Historical preparation packet. The replacement-window final outcome supersedes the pending installation and approval statements below. Native credential delivery/revocation completed; the owner attempt failed. Accounting reconciliation, corrected runtime admission and separate retry authority remain.

Existing work: REINAH-WP-0003-T05/T06 and SECRETS-WP-0009-T03. The user approved one disposable attempt. This packet is not installed or active. Native spend request e9521804-8fce-4fbc-bfdf-8a1aa959fd61 is awaiting the human at https://decisions.coulomb.social/review?memo_id=infd-20260927-b01. Exact window: 2026-09-27T16:35:00Z through 2026-09-27T17:35:00Z. Do not extend this window or treat an unsigned/expired memo as spend authority.

spend-policy.json, owner.json and catalog/ are replacement candidates only. The native ID is a requested reference, not evidence of acceptance. activation-review.json passes the offline bounds review with two USD 4.64 holds. native-pdp-inputs.json records the six exact requests and live native evaluator responses from the named flex-auth-secrets-engine pod over Kubernetes port-forward. These input bindings are not approval entries, consume receipts or execution authority. The temporary ten-minute caller credential was destroyed after collecting them.

Host readback still matches owner e0d3fb84 and spend file f31c5859. Reservations, request_routes and request_reservations remain empty. Recheck under owner lock before replacement; preserve original policy/ledger and retire the old dispatch capability. The new ledger filename is a candidate only; never reset old state.

Remaining gates: human spend acceptance, billing/FX including taxes and fees, exact new native credential approvals and delivery, clock admission, host pins, and one natural queue attempt with teardown/revocation. CCR-2026-0025 currently limits its attended requester to three frozen older T03 requests. Admit a reviewed command and these six exact requests through that owner before reusing the reader; do not silently broaden it or submit these as the older records. Existing owner work remains the tracking record; no task or workplan is added.