state-hub/workplans/STATE-WP-0096-private-decision-dispatch.md

---
id: STATE-WP-0096
type: workplan
title: "Private decision memo dispatch for the selected State Hub workload"
domain: infotech
repo: state-hub
status: finished
owner: codex
topic_slug: netkingdom
created: "2026-10-04"
updated: "2026-10-05"
related: [INFD-WP-0005, INFD-WP-0007]
state_hub_workstream_id: "4cca4a91-3b21-51f0-a61f-902ccb1289c6"
---

Founder requested continued production delivery and selected the existing
system:serviceaccount:state-hub:state-hub identity. No new public privileged
forwarding endpoint: the existing Hub API has no suitable authenticated-caller
boundary for delegating its projected token to arbitrary requests.

## Compose the durable private queue worker

```task
id: STATE-WP-0096-T01
status: done
priority: high
state_hub_task_id: "1176f88d-64d4-5462-9471-ce8cd532c0be"
```

Explicit local enqueue, durable replay/receipt ledger, single-attempt process
lock, rotating intake-audience token and fixed bounded no-proxy/no-redirect
transport. No API startup hook, auto-discovery, human binding or hub-resolution
mutation. Preserve native approval uncertainty: the intake service decides replay
versus unresolved refusal. Only reviewed local workload execution queues content.

## Package and validate the concrete deployment candidate

```task
id: STATE-WP-0096-T02
status: done
priority: high
state_hub_task_id: "4b5395db-6d99-5f72-adbd-3eb93babba0a"
```

Standalone non-root image using only standard-library dependencies; isolated
single-replica Recreate worker/PVC, existing exact State Hub service account,
projected audience token and exact intake network peer. Build/scan, local
restart/rotation/concurrency proof and server dry-run. Explicit queue entry means
new decisions require no infrastructure rollout. Source assertions do not become
caller identity.

## Approved deployment and native agent-human-agent acceptance

```task
id: STATE-WP-0096-T03
status: done
priority: high
state_hub_task_id: "1aeb4da7-5411-5634-ae6a-2e4bf0e8738b"
```

Under the concrete INFD-WP-0007 rollout go, deploy the worker after requester
custody and intake/PDP prerequisites. Queue a retained lifecycle review envelope,
verify stable receipt and protected human review. Human alone accepts; retrieve
native outcome and audit evidence. Unresolved/blocked attempts require review,
never automatic clearing. No automatic Hub decision scanning or public enqueue
route is included in this initial workload composition.


## Implementation evidence — 2026-10-04

The initial cross-service test exposed an overly narrow Hub envelope contract:
lifecycle review snapshots do not necessarily name a Hub decision. The parser
now accepts exactly the retained review-UUID id/key when serves is absent, while
preserving the stable Hub-derived key requirement whenever serves is supplied.
No relationship, receipt or approval is invented.

The real Approval Engine/Audit Core component test exercises private queueing,
lost response after native creation, restart, same-key receipt replay (201 then
200), human-only review and independent evidence. Identity/custody remain fixtures.
Five installed-container checks prove private storage, explicit enqueue, restart
and SIGTERM with no network. The three deployment objects pass server dry-run;
no live worker or token projection has been created.

Final Forgejo image 410fb6b (source 4a59b23) passed five installed-container
checks and Trivy HIGH/CRITICAL scan (zero findings). Owner tests: 28 passed.
Cross-service suite: 663 passed, one skipped. Both projected audiences and final
image pin passed server dry-run. Receipts: docs/evidence/2026-10-04-memo-dispatch/.

## Approved native cutover — 2026-10-05

Founder approved the cutover (State Hub decision d2eaa2e9-6d11-4676-a07f-e3b7e59a88e3).
The worker was deployed by a pinned manual Argo application. Native startup
exposed inherited setgid on the newly created private queue (2700 instead of
0700). A same-image, non-root init container normalizes only an empty owned
2700 directory; existing nonempty or unsafe custody fails closed. Regression
coverage exercises first start under setgid, restart preservation, the empty
failed-start repair, and rejection of nonempty or world-readable custody.
Human acceptance remains pending.

## Native human acceptance — 2026-10-05

The platform-root human opened the retained review, acknowledged its required
highlight and accepted at 2026-10-04T22:17:19Z (00:17:19 Europe/Berlin).
Approval Engine 22b30fe7-c565-46f2-8193-d8875975ad9e has a confirmed human entry,
linked to presentation pres-484c0ef3-0a87-4dbf-aa30-05fd21e19c91 and source
infd-20261005-lifecycle-production-proof revision 2. Independent Audit Core
reconciliation matches with pending 0. The selected workload retrieves that
confirmed outcome. No agent bound or consumed.

Initial scope complete. Broader browser/discovery profiles remain with the live
INFD-WP-0007-T02/T05 work records; no new caller or public delegation is admitted.
Root receipts: informed-decision/docs/evidence/2026-10-05-lifecycle-cutover/.