diff --git a/docs/root-custody-runtime.md b/docs/root-custody-runtime.md index d7cef23..d6eb2ce 100644 --- a/docs/root-custody-runtime.md +++ b/docs/root-custody-runtime.md @@ -76,7 +76,15 @@ reconciliation updates the baseline. Never delete the row to make a read pass. ## Remaining live acceptance The code and offline fixtures do not establish a real grant. Delivery requires -publisher ceremony provenance, role/policy receipts, projected-token packaging, +reviewed publisher provenance (the approved empty entries[] baseline establishes +no grant), role/policy receipts, projected-token packaging, network trust, owner-reviewed baseline initialization, image digest promotion and positive/denial/outage/revocation/supersession/restore receipts through the actual Hub workload route. USER-WP-0037-T03 retains its separate Hub admission blocker. + +Approved initial-empty candidate document digest: +`33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248`. +It comes from NetKingdom examples/custody-record/initial-empty-record.json and +the owner provenance packet, not from positive-grant fixtures. Publication and +an actual authenticated read matching this receipt are still required before +baseline initialization. diff --git a/workplans/USER-WP-0037-hub-authority-lookup.md b/workplans/USER-WP-0037-hub-authority-lookup.md index bcb953f..b7cf136 100644 --- a/workplans/USER-WP-0037-hub-authority-lookup.md +++ b/workplans/USER-WP-0037-hub-authority-lookup.md @@ -51,7 +51,7 @@ id: USER-WP-0037-T02 status: wait depends_on: [NK-WP-0045-T05] blocked_on: repo:railiance-platform -blocking_reason: "Consumer transport, durable baseline, pinned canon and optional mapping implemented; awaits NK-WP-0045-T05 real provenance/admission plus owner image promotion, receipt-bound baseline initialization and live integration evidence." +blocking_reason: "Consumer transport, durable baseline, pinned canon and optional mapping implemented; awaits NK-WP-0045-T05 reviewed publisher provenance/admission plus owner image promotion, receipt-bound baseline initialization and live integration evidence." priority: high state_hub_task_id: "23a5c211-277b-561e-a4b3-0f8e99537cac" ``` @@ -146,7 +146,7 @@ receipt; initialize absent baseline once, never reset. Restore/source changes require external producer audit/high-water reconciliation before reactivation. Complete procedures and configuration: `docs/root-custody-runtime.md`. -Validation: full make test passed296 tests (eight optional skips), with layer +Validation: full make test passed 296 tests (eight optional skips), with layer conformance and diff checks passing; isolated disposable PostgreSQL16 verified bootstrap CAS, competing-writer conflict and reconnect persistence. Wheel build succeeded with embedded policy/schema/provenance. Offline @@ -202,3 +202,9 @@ qualifier was stale. The NetKingdom dependency is carried through `depends_on: [USER-WP-0037-T02]`; the outstanding owner request is the credential admission message `f3bcc516` to `state-hub`, still unanswered, so the qualifier now names `state-hub`. + +Source delivery receipt: implementation commit `0d0751d` pushed to main; image +CI is triggered by source changes, expected tag `main-0d0751d`; immutable digest +and owner promotion receipts remain pending. Empty owner candidate digest +`33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248` +is approved no-grant initialization input, not notice of live publication.