diff --git a/docs/receipts/stale-memory-quarantine-20260702.json b/docs/receipts/stale-memory-quarantine-20260702.json new file mode 100644 index 0000000..567e7d5 --- /dev/null +++ b/docs/receipts/stale-memory-quarantine-20260702.json @@ -0,0 +1,31 @@ +{ + "schema": "fable.stale_memory.quarantine.v1", + "createdAt": "2026-07-02T00:00:00.000Z", + "source": "factory/deploy memory reconciliation against current policy", + "claims": [ + { + "claim": "8098/deploy-webhook is the trusted deploy path", + "staleBecause": "current policy marks 8098/deploy-webhook as legacy/internal/stale, not canonical deploy authority", + "replacementTruth": "8099/deploy via git-proxy is the canonical signed/gated deploy route", + "severity": "dangerous" + }, + { + "claim": "memory-only factory/deploy state can authorize deploy", + "staleBecause": "current policy orders authority as live receipt > committed receipt > memory", + "replacementTruth": "deploy authority requires a live receipt or, when live state is unavailable, a committed receipt; memory is advisory only", + "severity": "dangerous" + } + ], + "blockedTrustPaths": [ + "8098/deploy-webhook", + "memory-only deploy authority", + "autonomous deploy without fresh gate receipt" + ], + "canonicalTrustPaths": [ + "live receipt > committed receipt > memory", + "8099/deploy via git-proxy", + "explicit approval + fresh valid ZTE/factory gate receipt" + ], + "decision": "quarantined", + "deployAttempted": false +}