docs: quarantine stale deploy memory
This commit is contained in:
parent
d91e279386
commit
367a39d829
|
|
@ -0,0 +1,31 @@
|
|||
{
|
||||
"schema": "fable.stale_memory.quarantine.v1",
|
||||
"createdAt": "2026-07-02T00:00:00.000Z",
|
||||
"source": "factory/deploy memory reconciliation against current policy",
|
||||
"claims": [
|
||||
{
|
||||
"claim": "8098/deploy-webhook is the trusted deploy path",
|
||||
"staleBecause": "current policy marks 8098/deploy-webhook as legacy/internal/stale, not canonical deploy authority",
|
||||
"replacementTruth": "8099/deploy via git-proxy is the canonical signed/gated deploy route",
|
||||
"severity": "dangerous"
|
||||
},
|
||||
{
|
||||
"claim": "memory-only factory/deploy state can authorize deploy",
|
||||
"staleBecause": "current policy orders authority as live receipt > committed receipt > memory",
|
||||
"replacementTruth": "deploy authority requires a live receipt or, when live state is unavailable, a committed receipt; memory is advisory only",
|
||||
"severity": "dangerous"
|
||||
}
|
||||
],
|
||||
"blockedTrustPaths": [
|
||||
"8098/deploy-webhook",
|
||||
"memory-only deploy authority",
|
||||
"autonomous deploy without fresh gate receipt"
|
||||
],
|
||||
"canonicalTrustPaths": [
|
||||
"live receipt > committed receipt > memory",
|
||||
"8099/deploy via git-proxy",
|
||||
"explicit approval + fresh valid ZTE/factory gate receipt"
|
||||
],
|
||||
"decision": "quarantined",
|
||||
"deployAttempted": false
|
||||
}
|
||||
Loading…
Reference in New Issue