Reconcile product inputs and prove durable work handoffs
Dependency Audit / dependency-audit (push) Successful in 1m48s
Deployment Installer / deployment-installer (push) Successful in 6s
Security Audit / security-audit (push) Successful in 12m2s

This commit is contained in:
2026-08-06 16:06:18 +02:00
parent 69ba1037bf
commit b269791c48
18 changed files with 523 additions and 40 deletions
@@ -28,5 +28,7 @@ The artifact remains a `product` package. Promotion to `reference` requires:
access; and
- version-pinned user and administrator documentation.
Optional Notifications, Portal, Reporting, and Workflow Engine integrations do
not change the package boundary when absent.
Optional Notifications, Portal, Reporting, Tasks, and Workflow Engine
integrations do not change the package boundary when absent. When Tasks is
present, acknowledgement, reconciliation, and operator intervention remain
owned by their source modules and are projected into the common work inbox.
@@ -21,6 +21,7 @@
{"module_id": "notifications"},
{"module_id": "portal"},
{"module_id": "reporting"},
{"module_id": "tasks"},
{"module_id": "workflow_engine"}
],
"evidence": [
@@ -37,8 +37,10 @@ The artifact remains a `product` package. Promotion to `reference` requires:
aggregate disclosure; and
- version-pinned user and administrator documentation.
Optional Connectors, Files, Notifications, and Workflow Engine integrations
must remain capability-based and absence-safe.
Optional Connectors, Files, Notifications, Tasks, and Workflow Engine
integrations must remain capability-based and absence-safe. Tasks may present
review and recovery handoffs, but Dataflow and Risk Compliance remain the
authoritative owners of run and screening state.
## Executable evidence
@@ -21,6 +21,7 @@
{"module_id": "connectors"},
{"module_id": "files"},
{"module_id": "notifications"},
{"module_id": "tasks"},
{"module_id": "workflow_engine"}
],
"evidence": [
+11 -4
View File
@@ -33,6 +33,11 @@ values, evidence payloads, Decision reasoning, operative results, and
conditions are excluded; every candidate is authorized again before it is
shown.
When Tasks is present, explicit work and source-owned Workflow handoffs appear
in one resumable inbox with typed account, group, role, function, or assignment
responsibility. Workflow Engine retains process state and completion commands;
Tasks retains only explicit tasks and the aggregation surface.
## Security And Recovery
Every provider is tenant-bound. Missing or conflicting authority fails closed.
@@ -46,9 +51,11 @@ The executable fixture in
`tests/test_institutional_governance_journey.py` proves SQL-backed Service,
Case, Party, Mandate, Committee meeting/agendum/vote/minute, and Decision state.
`tests/test_institutional_service_journey.py` separately proves exact Portal
Form launch, persisted submission provenance, and idempotent replay.
Form launch, persisted submission provenance, idempotent replay, and a durable
Workflow handoff that remains visible through Tasks after the database session
is reopened and disappears only after the Workflow Engine records completion.
Module-level Records source tests prove exact Form submission, Case revision,
and Decision revision filing. Target-environment browser accessibility,
resumable work guidance, production identity and delivery, a named archive
profile, and recovery evidence are still required before this product package
may claim `reference_ready` maturity.
production identity and delivery, a named archive profile, and recovery evidence
are still required before this product package may claim `reference_ready`
maturity.