coulomb/user-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record approved empty custody bootstrap and source delivery receipt
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 8s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
This commit is contained in:
tegwick 2026-10-03 19:56:11 +02:00
parent 0d0751d39d
commit ae973142fd
2 changed files with 17 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
docs/root-custody-runtime.md
View file

@ -76,7 +76,15 @@ reconciliation updates the baseline. Never delete the row to make a read pass.
## Remaining live acceptance ## Remaining live acceptance
The code and offline fixtures do not establish a real grant. Delivery requires The code and offline fixtures do not establish a real grant. Delivery requires
publisher ceremony provenance, role/policy receipts, projected-token packaging, reviewed publisher provenance (the approved empty entries[] baseline establishes
no grant), role/policy receipts, projected-token packaging,
network trust, owner-reviewed baseline initialization, image digest promotion and network trust, owner-reviewed baseline initialization, image digest promotion and
positive/denial/outage/revocation/supersession/restore receipts through the actual positive/denial/outage/revocation/supersession/restore receipts through the actual
Hub workload route. USER-WP-0037-T03 retains its separate Hub admission blocker. Hub workload route. USER-WP-0037-T03 retains its separate Hub admission blocker.
Approved initial-empty candidate document digest:
`33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248`.
It comes from NetKingdom examples/custody-record/initial-empty-record.json and
the owner provenance packet, not from positive-grant fixtures. Publication and
an actual authenticated read matching this receipt are still required before
baseline initialization.

10
workplans/USER-WP-0037-hub-authority-lookup.md
View file

@ -51,7 +51,7 @@ id: USER-WP-0037-T02
status: wait status: wait
depends_on: [NK-WP-0045-T05] depends_on: [NK-WP-0045-T05]
blocked_on: repo:railiance-platform blocked_on: repo:railiance-platform
blocking_reason: "Consumer transport, durable baseline, pinned canon and optional mapping implemented; awaits NK-WP-0045-T05 real provenance/admission plus owner image promotion, receipt-bound baseline initialization and live integration evidence." blocking_reason: "Consumer transport, durable baseline, pinned canon and optional mapping implemented; awaits NK-WP-0045-T05 reviewed publisher provenance/admission plus owner image promotion, receipt-bound baseline initialization and live integration evidence."
priority: high priority: high
state_hub_task_id: "23a5c211-277b-561e-a4b3-0f8e99537cac" state_hub_task_id: "23a5c211-277b-561e-a4b3-0f8e99537cac"
``` ```
@ -146,7 +146,7 @@ receipt; initialize absent baseline once, never reset. Restore/source changes
require external producer audit/high-water reconciliation before reactivation. require external producer audit/high-water reconciliation before reactivation.
Complete procedures and configuration: `docs/root-custody-runtime.md`. Complete procedures and configuration: `docs/root-custody-runtime.md`.
Validation: full make test passed296 tests (eight optional skips), with layer Validation: full make test passed 296 tests (eight optional skips), with layer
conformance and diff checks passing; isolated disposable conformance and diff checks passing; isolated disposable
PostgreSQL16 verified bootstrap CAS, competing-writer conflict and reconnect PostgreSQL16 verified bootstrap CAS, competing-writer conflict and reconnect
persistence. Wheel build succeeded with embedded policy/schema/provenance. Offline persistence. Wheel build succeeded with embedded policy/schema/provenance. Offline
@ -202,3 +202,9 @@ qualifier was stale. The NetKingdom dependency is carried through
`depends_on: [USER-WP-0037-T02]`; the outstanding owner request is the `depends_on: [USER-WP-0037-T02]`; the outstanding owner request is the
credential admission message `f3bcc516` to `state-hub`, still unanswered, so credential admission message `f3bcc516` to `state-hub`, still unanswered, so
the qualifier now names `state-hub`. the qualifier now names `state-hub`.
Source delivery receipt: implementation commit `0d0751d` pushed to main; image
CI is triggered by source changes, expected tag `main-0d0751d`; immutable digest
and owner promotion receipts remain pending. Empty owner candidate digest
`33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248`
is approved no-grant initialization input, not notice of live publication.