state-hub/workplans/STATE-WP-0096-private-decision-dispatch.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	related	state_hub_workstream_id
STATE-WP-0096	workplan	Private decision memo dispatch for the selected State Hub workload	infotech	state-hub	finished	codex	netkingdom	2026-10-04	2026-10-05	INFD-WP-0005 INFD-WP-0007	4cca4a91-3b21-51f0-a61f-902ccb1289c6

Founder requested continued production delivery and selected the existing system:serviceaccount:state-hub:state-hub identity. No new public privileged forwarding endpoint: the existing Hub API has no suitable authenticated-caller boundary for delegating its projected token to arbitrary requests.

Compose the durable private queue worker

id: STATE-WP-0096-T01
status: done
priority: high
state_hub_task_id: "1176f88d-64d4-5462-9471-ce8cd532c0be"

Explicit local enqueue, durable replay/receipt ledger, single-attempt process lock, rotating intake-audience token and fixed bounded no-proxy/no-redirect transport. No API startup hook, auto-discovery, human binding or hub-resolution mutation. Preserve native approval uncertainty: the intake service decides replay versus unresolved refusal. Only reviewed local workload execution queues content.

Package and validate the concrete deployment candidate

id: STATE-WP-0096-T02
status: done
priority: high
state_hub_task_id: "4b5395db-6d99-5f72-adbd-3eb93babba0a"

Standalone non-root image using only standard-library dependencies; isolated single-replica Recreate worker/PVC, existing exact State Hub service account, projected audience token and exact intake network peer. Build/scan, local restart/rotation/concurrency proof and server dry-run. Explicit queue entry means new decisions require no infrastructure rollout. Source assertions do not become caller identity.

Approved deployment and native agent-human-agent acceptance

id: STATE-WP-0096-T03
status: done
priority: high
state_hub_task_id: "1aeb4da7-5411-5634-ae6a-2e4bf0e8738b"

Under the concrete INFD-WP-0007 rollout go, deploy the worker after requester custody and intake/PDP prerequisites. Queue a retained lifecycle review envelope, verify stable receipt and protected human review. Human alone accepts; retrieve native outcome and audit evidence. Unresolved/blocked attempts require review, never automatic clearing. No automatic Hub decision scanning or public enqueue route is included in this initial workload composition.

Implementation evidence — 2026-10-04

The initial cross-service test exposed an overly narrow Hub envelope contract: lifecycle review snapshots do not necessarily name a Hub decision. The parser now accepts exactly the retained review-UUID id/key when serves is absent, while preserving the stable Hub-derived key requirement whenever serves is supplied. No relationship, receipt or approval is invented.

The real Approval Engine/Audit Core component test exercises private queueing, lost response after native creation, restart, same-key receipt replay (201 then 200), human-only review and independent evidence. Identity/custody remain fixtures. Five installed-container checks prove private storage, explicit enqueue, restart and SIGTERM with no network. The three deployment objects pass server dry-run; no live worker or token projection has been created.

Final Forgejo image 410fb6b (source 4a59b23) passed five installed-container checks and Trivy HIGH/CRITICAL scan (zero findings). Owner tests: 28 passed. Cross-service suite: 663 passed, one skipped. Both projected audiences and final image pin passed server dry-run. Receipts: docs/evidence/2026-10-04-memo-dispatch/.

Approved native cutover — 2026-10-05

Founder approved the cutover (State Hub decision d2eaa2e9-6d11-4676-a07f-e3b7e59a88e3). The worker was deployed by a pinned manual Argo application. Native startup exposed inherited setgid on the newly created private queue (2700 instead of 0700). A same-image, non-root init container normalizes only an empty owned 2700 directory; existing nonempty or unsafe custody fails closed. Regression coverage exercises first start under setgid, restart preservation, the empty failed-start repair, and rejection of nonempty or world-readable custody. Human acceptance remains pending.

Native human acceptance — 2026-10-05

The platform-root human opened the retained review, acknowledged its required highlight and accepted at 2026-10-04T22:17:19Z (00:17:19 Europe/Berlin). Approval Engine 22b30fe7-c565-46f2-8193-d8875975ad9e has a confirmed human entry, linked to presentation pres-484c0ef3-0a87-4dbf-aa30-05fd21e19c91 and source infd-20261005-lifecycle-production-proof revision 2. Independent Audit Core reconciliation matches with pending 0. The selected workload retrieves that confirmed outcome. No agent bound or consumed.

Initial scope complete. Broader browser/discovery profiles remain with the live INFD-WP-0007-T02/T05 work records; no new caller or public delegation is admitted. Root receipts: informed-decision/docs/evidence/2026-10-05-lifecycle-cutover/.