24 lines
1.6 KiB
Diff
24 lines
1.6 KiB
Diff
--- a/workplans/FLEX-WP-0024-decision-envelope-authenticity.md
|
|
+++ b/workplans/FLEX-WP-0024-decision-envelope-authenticity.md
|
|
@@ -325,3 +325,21 @@
|
|
Frozen rollout R1, Platform P2 and the package extraction2b/current05a remain
|
|
unchanged. T06 stays `progress`; actual stopped-fence verification and all native
|
|
admission gates remain open under the same existing task.
|
|
+
|
|
+
|
|
+2026-10-16 Access owner exact native plan review (Custodian
|
|
+`access-native-plan-review-next/`): approved bounded Access workload/Helm/outbox/
|
|
+stopped-only rollback plan for frozen rollout R2 manifest5be7a7f and Platform P4
|
|
+manifest9eec861, chartdc0420/image84c78e OCI09a83b/projection8ce375f. Offline
|
|
+verification checks every R2 manifest/source digest and reproduces both exact
|
|
+Helm render bytes. The mandatory execution supplement names actual repo/Helm/CI
|
|
+paths and excludes unrelated legacy rollback recipes, records the owner/founder
|
|
+manual-writer acknowledgement, supplies a verified stopped-revision rollback
|
|
+shape, and separates120-second stop/readiness gates from atomic rollback and
|
|
+the600-second recovery decision. No production source change was needed.
|
|
+Existing read-only preflight admits all7exact resources but still observes
|
|
+unsigned05a/revision4running, no installed stopped fence or held window. T06
|
|
+stays progress: actual founder entity/expiry/window/executor and five final
|
|
+external scope dispositions, custody/trust/caller, actual stopped Helm revision,
|
|
+PVC/PV Retain and native producer/consumer/restart/failure receipts remain open.
|
|
+No live mutation, credential access, new key, authority or protected effect follows.
|