40 lines
2.5 KiB
JSON
40 lines
2.5 KiB
JSON
|
{
|
||
|
|
"proposal_id": "USER-CATALOGUE-INFDEC-20261011-R1",
|
||
|
|
"revision": "executor-preparation-2-owner-findings",
|
||
|
|
"status": "prepared-not-approved-not-executed",
|
||
|
|
"historical_proposal_manifest_sha256": "60b185aabbf6a8448c0c3aef57279b6741db1cd1361b8dab48be29df9f14f78e",
|
||
|
|
"executor_sha256": "b0dbbb9786e927055030acf849a72e9a44e9d3d55c84efdf245e419d381684f3",
|
||
|
|
"supervisor_transport_sha256": "3e594e0e8561100ae1eeb34d7208cd5b5e387ae56c29689f155aed94219770f3",
|
||
|
|
"records_sha256": "23577cc4f3ea6c0ca43eb21ca0e3280eb53fb64e29b030dcd31251593f0f3f2f",
|
||
|
|
"expected_runtime_image": "forgejo.coulomb.social/coulomb/user-engine@sha256:f239bbf332b8eb87320c86390fddca1dcb4f7c628a7af75e79dee8058d446a7b",
|
||
|
|
"fresh_pod_uid_required": true,
|
||
|
|
"deadline": "2026-10-12T23:59:59Z",
|
||
|
|
"authority": "separate founder-approved supervised administrative exception; out-of-band supervisor validates native receipt",
|
||
|
|
"existing_r2_does_not_approve_catalogue_mutation": true,
|
||
|
|
"normal_pdp_refusal_required": true,
|
||
|
|
"catalogue_entities": [
|
||
|
|
"applications/informed-decision",
|
||
|
|
"application_bindings/informed-decision"
|
||
|
|
],
|
||
|
|
"target_tenant": "tenant:platform",
|
||
|
|
"retained_events": [
|
||
|
|
"application.registered"
|
||
|
|
],
|
||
|
|
"new_endpoint": false,
|
||
|
|
"runtime_image_change": false,
|
||
|
|
"iam_grants": false,
|
||
|
|
"credentials_exported": false,
|
||
|
|
"budget_estimate": {
|
||
|
|
"cost_eur_upper_bound": 0.1,
|
||
|
|
"supervised_seconds_estimate": 300,
|
||
|
|
"application_downtime_expected_seconds": 0
|
||
|
|
},
|
||
|
|
"risk": "Exactly one administrative catalogue mutation bypasses ordinary application.register PDP admission under an explicit maintenance exception, retaining genuine denial and truthful service attribution. Public browser login/MFA remains unverified; downstream events may prevent automatic rollback.",
|
||
|
|
"rollback": "Only exact originally created rows; original consumed grant digest; before expiry; no dependencies; delivery lock; refuse any claimed/delivered/missing event; retain audits and dead-letter unsent registered event. No full downstream reversal claim. Dead-lettering stops automatic drain only; existing privileged targeted delivery/replay can revive the retained event. This maintenance grant authorizes neither; any later replay requires separate owner reconciliation/disposition.",
|
||
|
|
"owner_review_required": [
|
||
|
|
"User Engine audit/service attribution and transaction semantics",
|
||
|
|
"NetKingdom exception scope, catalogue facts, event consumers/dead-letter semantics",
|
||
|
|
"Custodian precise founder disposition and conditional close-down obligation"
|
||
|
|
]
|
||
|
|
}
|