feat: list synthetic workflow admissions on a public ledger - #34
Merged
Conversation
Add production-workflow-admissions.json as an append-only ledger of qualification-admission object references. The release ledger stays qualification-release-only. The validator still prints 7 active release admissions and now requires at least one active synthetic tutorial workflow admission. The GitHub issuer stays inactive. This is not a MockMed production_acceptance flip.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The reviewer is whoever gates OpenAdaptAI/.github. This PR lists the existing synthetic workflow admissions so a consumer can see them without treating a product release admission as a qualified workflow.
production-lifecycle-admissions.jsonstays qualification-release-only. The seven Flow/object-reference rows are unchanged, including the Flow 1.34.0 row at registry revision 2 /6e28818a. New file:production-workflow-admissions.json. Sevenqualification-admissionobject references. First row is the Flow synthetic tutorial bundlesha256:dcdb32a762aca87fbb1a7c9df5d346403b167ec5850d35fe47fd64d942684a04(DSSEsha256:1773f9dd2b0c3a78bf2454cfba5d038151925f4b7c5aa1a2d7ed46b5f9315c32). The other six bind registry revision 3 the same way the remaining-six release rows do.The validator still prints 7 active release admissions. It now also fails closed unless at least one listed workflow admission is active, remote-safe-synthetic, bundle
0.0.0-synthetic,expires_atJSON null. Campaign counts stay 1x3 withreconciliation_required_count=3on uncertain delivery.evals_production_acceptanceis still false. This is not a MockMedproduction_acceptanceflip.The GitHub issuer
issue-qualification-admission.ymlstaysactivation_state: inactive. Offline-issued objects are enough to list. Don't flip that workflow until Flow/web pin the exact verifier. Signer remainsqa-ed25519-9cf4bca214c01d79/ outeroa-public-trust-ed25519-9cf4bca214c01d79. No new App keys.Please check:
python3 scripts/validate_production_lifecycle.pyprints the 7 release admissions; history-only vs current origin/main is append-only on the release ledger and empty-to-seven on the workflow ledger.Opened by an agent session, not the founder.