2.5 KiB
| id | type | title | domain | repo | status | flavor | owner | topic_slug | created | updated | depends_on | state_hub_workstream_id |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| APPROVAL-WP-0004 | workplan | Retain exact authenticated consume source provenance | infotech | approval-engine | active | implementation | codex | netkingdom | 2026-10-16 | 2026-10-16 | 688edc60-a179-5618-90f1-468aadc2af58 |
Explicit NetKingdom target demand under CUST-WP-0080 selects the source evidence subset of APPROVAL-WP-0002-T01/T04/T05. INTENT basis: authenticated consumable object, exact binding and atomic local evidence. Existing authoritative CAS, confirmation transport and audit adapter are reused. No second approval/PDP service, portable signer, foreign owner review or live action is added.
Preserve verified consumer and approved operation in the use source row
id: APPROVAL-WP-0004-T01
status: done
priority: high
state_hub_task_id: "b0b0a5a9-f7e7-508b-96d0-4b02457b16fc"
Source implementation supplies the HTTP-verified Identity to consume and writes its bounded metadata plus native act/PDP bindings into the existing atomic use outbox. Body-provided provenance is ignored, internal calls retain null, original idempotent evidence is immutable, and historical rows remain untouched. No DB schema change, response/claim widening or identity scope change is needed. Seven new source tests cover signature-verified HTTP consumption, restart, adapter preservation, spoofed fields, denied identities, retry immutability and rollback. Source checks do not establish native acceptance.
Integrate independently reviewed source and synchronize work records
id: APPROVAL-WP-0004-T02
status: todo
priority: high
state_hub_task_id: "2b932ef8-e143-5bb7-856e-4cba4fb22c09"
The Custodian coordinator independently reviews the exact patch/manifest, then integrates and synchronizes the canonical owner record. Temporary-checkout work is not a canonical synchronized record or formal delegated-owner assent.
Existing native delivery obligations remain live under APPROVAL-WP-0002: T01 exact issuer/profile and release/migration, T04 admitted lifecycle source delivery/reconciliation, T05 named served PEP consumption before protected effect. Platform owns mediator transport/identity/custody, the one-shot journal and native effect; Secrets owns its actual strict handoff and task-scoped backend. Access owns the signed decision and exact request/action/representation binding. No claim that an isolated source test closes any of these gates is made.