user-engine/docs/evidence/2026-10-03-root-custody-consumer-live.json
tegwick 608cbff477
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Complete live empty custody consumer acceptance
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
2026-10-03 20:39:15 +02:00

67 lines
2.9 KiB
JSON

{
"date": "2026-10-03",
"workplan": "USER-WP-0037-T02",
"source_commit": "0d0751d",
"image_digest": "sha256:030fe90232e20bb02b372e3d16b8ff659a5407d54f6405eb85754262b9ad7dc6",
"canon_commit": "db319335b27b61b855382ee5af5d690f06eeb010",
"approved_document_sha256": "33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248",
"initialization": {
"actual_grant": false,
"baseline_initially_absent": true,
"baseline_receipt_matched": true,
"empty_no_grant_document": true,
"empty_record_returns_no_grant": true,
"failure_preserves_baseline": true,
"fresh_authenticated_owner_read": true,
"initialized_from_authenticated_receipt": true,
"injected_read_failure_returns_no_grant": true,
"ok": true,
"other_tenant_returns_no_grant": true,
"owner_read_clock_aware": true,
"reconnect_preserves_baseline": true,
"record_id_matched": true,
"record_revision": 1,
"runtime_enabled": true,
"same_revision_mutation_preserves_baseline": true,
"wrong_audience_login_denied": true
},
"after_controlled_pod_restart": {
"actual_grant": false,
"baseline_initially_absent": false,
"baseline_receipt_matched": true,
"baseline_survives_actual_pod_restart": true,
"capability_probe_read_at": "2026-10-03T18:30:58.194568+00:00",
"capability_probe_read_digest_matched": true,
"custody_write_denied": true,
"custody_write_denied_http_status": 403,
"empty_no_grant_document": true,
"empty_record_returns_no_grant": true,
"existing_baseline_receipt_matched": true,
"failure_preserves_baseline": true,
"fixture_service_serializes_live_empty_root_grant_null": true,
"fresh_authenticated_owner_read": true,
"hub_private_route_acceptance_claimed": false,
"injected_read_failure_returns_no_grant": true,
"metadata_list_denied": true,
"metadata_list_denied_http_status": 403,
"ok": true,
"other_tenant_returns_no_grant": true,
"owner_read_clock_aware": true,
"read_request_id": "91cd7235-9cfe-06c3-57a6-64a013d1cfcb",
"reader_login_request_id": "29a2fac4-8108-7ca5-d0a6-682c4a31f48d",
"reconnect_preserves_baseline": true,
"record_id_matched": true,
"record_revision": 1,
"runtime_enabled": true,
"same_revision_mutation_preserves_baseline": true,
"sibling_read_denied": true,
"sibling_read_denied_http_status": 403,
"wrong_audience_login_denied": true
},
"limitations": [
"No actual root grant exists: approved entries[] record.",
"Read failure and same-revision mutation are injected consumer checks, not production OpenBao outage or mutation.",
"Service serialization uses in-memory synthetic accounts/authorization harness against live authenticated empty custody source; no private Hub caller admission claimed.",
"Producer recovery/restore/audit completeness remains with railiance-platform; request IDs are correlation references, not inspected audit-log receipts."
]
}