coulomb/user-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete live empty custody consumer acceptance
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
This commit is contained in:
tegwick 2026-10-03 20:39:15 +02:00
parent f85c9681a7
commit 608cbff477
4 changed files with 157 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

23
workplans/USER-WP-0037-hub-authority-lookup.md
View file

@ -48,10 +48,8 @@ production deployment was added. T02/T03 retain those outstanding owner gates.
```task
id: USER-WP-0037-T02
status: wait
status: done
depends_on: [NK-WP-0045-T05]
blocked_on: repo:railiance-platform
blocking_reason: "Consumer transport, durable baseline, pinned canon and optional mapping implemented; awaits NK-WP-0045-T05 reviewed publisher provenance/admission plus owner image promotion, receipt-bound baseline initialization and live integration evidence."
priority: high
state_hub_task_id: "23a5c211-277b-561e-a4b3-0f8e99537cac"
```
@ -160,6 +158,21 @@ publisher receipt (empty no-grant initialization is acceptable), platform reader
owner image promotion, reviewed baseline initialization and live acceptance.
USER-WP-0037 stays blocked; T03 retains its independent Hub admission dependency.
2026-10-03 LIVE acceptance complete: producer admission/publication returned
ok=true for the approved empty revision1/KV1 document; controlled authenticated
receipt-bound baseline initialization succeeded. Actual consumer pod restart kept
the existing baseline with no reset/reinitialization. Fresh owner read matched;
wrong-audience login and real reader metadata LIST/sibling GET/custody POST were
denied. The internal fixture service harness against the actual live empty source
serialized root_grant:null; this is not a real admitted Hub caller acceptance.
Consumer-injected read failure/same-revision mutation retained the baseline.
Evidence: `docs/evidence/2026-10-03-root-custody-consumer-live.{md,json}`.
T02 is now done for delivered no-grant integration. No certified custodian or
actual grant was invented. Producer recovery/read-audit acceptance remains the
separate RPF-WP-0049/NK-WP-0045-T05 gate; T03 remains wait for real Hub credentials
and private integration. Workplan remains blocked solely on T03.
## Authenticated workload transport and private acceptance
```task
@ -204,7 +217,7 @@ credential admission message `f3bcc516` to `state-hub`, still unanswered, so
the qualifier now names `state-hub`.
Source delivery receipt: implementation commit `0d0751d` pushed to main; image
CI is triggered by source changes, expected tag `main-0d0751d`; immutable digest
and owner promotion receipts remain pending. Empty owner candidate digest
CI is triggered by source changes, expected tag `main-0d0751d`; immutable digest030fe90232e20bb02b372e3d16b8ff659a5407d54f6405eb85754262b9ad7dc6
and owner rollout/restart receipts are now verified (see live consumer evidence). Empty owner candidate digest
`33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248`
is approved no-grant initialization input, not notice of live publication.