coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/docs/proposals/glas-metered-tool-20260927
History
tegwick 0b49b7e82f
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details
Preserve unsigned EUR 10 native activation candidate and evaluator bindings 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c
2026-09-27 19:00:38 +02:00
..
catalog Preserve unsigned EUR 10 native activation candidate and evaluator bindings 2026-09-27 19:00:38 +02:00
activation-review.json Preserve unsigned EUR 10 native activation candidate and evaluator bindings 2026-09-27 19:00:38 +02:00
native-pdp-inputs.json Preserve unsigned EUR 10 native activation candidate and evaluator bindings 2026-09-27 19:00:38 +02:00
owner.json Preserve unsigned EUR 10 native activation candidate and evaluator bindings 2026-09-27 19:00:38 +02:00
README.md Preserve unsigned EUR 10 native activation candidate and evaluator bindings 2026-09-27 19:00:38 +02:00
spend-policy.json Preserve unsigned EUR 10 native activation candidate and evaluator bindings 2026-09-27 19:00:38 +02:00

README.md

EUR 10 native tool-proof candidate — 2026-09-27

Existing work: REINAH-WP-0003-T05/T06 and SECRETS-WP-0009-T03. The user approved one disposable attempt. This packet is not installed or active. Native spend request e9521804-8fce-4fbc-bfdf-8a1aa959fd61 is awaiting the human at https://decisions.coulomb.social/review?memo_id=infd-20260927-b01. Exact window: 2026-09-27T16:35:00Z through 2026-09-27T17:35:00Z. Do not extend this window or treat an unsigned/expired memo as spend authority.

spend-policy.json, owner.json and catalog/ are replacement candidates only. The native ID is a requested reference, not evidence of acceptance. activation-review.json passes the offline bounds review with two USD 4.64 holds. native-pdp-inputs.json records the six exact requests and live native evaluator responses from the named flex-auth-secrets-engine pod over Kubernetes port-forward. These input bindings are not approval entries, consume receipts or execution authority. The temporary ten-minute caller credential was destroyed after collecting them.

Host readback still matches owner e0d3fb84 and spend file f31c5859. Reservations, request_routes and request_reservations remain empty. Recheck under owner lock before replacement; preserve original policy/ledger and retire the old dispatch capability. The new ledger filename is a candidate only; never reset old state.

Remaining gates: human spend acceptance, billing/FX including taxes and fees, exact new native credential approvals and delivery, clock admission, host pins, and one natural queue attempt with teardown/revocation. CCR-2026-0025 currently limits its attended requester to three frozen older T03 requests. Admit a reviewed command and these six exact requests through that owner before reusing the reader; do not silently broaden it or submit these as the older records. Existing owner work remains the tracking record; no task or workplan is added.