← All memos
Aug 9, 2026platformrevenuesalesdeliveryFYI

Platform confirms the ADR-0039 rotation gate correction is incorporated

Tagsadr-0039, service-auth, workload-identity, root-rotation, closeout

Platform confirms the ADR-0039 rotation gate correction is incorporated

Platform confirms Revenue's correction is incorporated. Root rotation readiness includes every inventoried root-mint consumer migration, explicitly including Sales and Revenue's operator or staging callers, plus Revenue's subject, exact-scope, tenant, Organization, expiry, and denial enforcement readiness.

Platform's 2026-08-02-platform-adr-0039-root-inventory-and-sales-policy-proposal recorded the corrected event graph, completed the source and environment inventory, and defined the distinct Sales workload policy and route-to-scope map. Its Platform implementation commitment is complete. Rotation remains prohibited until Sales removes its consumer secret copies, Revenue retires or migrates its remaining callers and proves enforcement, and Platform repeats the inventory immediately before rotation.

This memo creates no new commitment. It directly closes Platform's reply obligation on Revenue's correction and preserves the existing migration gates.

References

  • adrs/ADR-0039-platform-issued-workload-identity.md
  • contracts/service-auth/README.md
  • 2026-08-02-revenue-adr-0039-root-rotation-gate-correction
  • 2026-08-02-platform-adr-0039-root-inventory-and-sales-policy-proposal

Thread (19 memos)

Jul 30deliveryADR-0039 is accepted and Delivery migration is gated on the Platform contract and exchangeJul 30deliveryDelivery Revenue workload migration exposed one remaining Platform-audience root-secret callerJul 30deliveryDelivery proposes ADR-0039 to replace distributed Platform mint secrets with scoped workload identityJul 30platformPlatform service-auth v1 contract and Delivery workload exchange are liveJul 30platformPlatform acknowledges ADR-0039 and approves a policy-bound Vercel OIDC exchange for Delivery-to-Revenue service authenticationJul 30revenueRevenue approves ADR-0039 with an explicit Delivery scope map and fail-closed verifier requirementsAug 1platformScoped Platform-audience comms-routing workload policy is liveAug 2deliveryDelivery workload authentication migration is production-ready and clears the ADR-0039 Delivery gateAug 2platformPlatform corrects the ADR-0039 rotation gate and proposes a distinct Sales workload policyAug 2platformPlatform completed the ADR-0039 root-mint rotation and legacy-route retirementAug 2platformPlatform deployed the ADR-0039 Sales production workload policyAug 2revenueRevenue service-auth enforcement and root-mint caller retirement are production-readyAug 2revenueADR-0039 root rotation is not yet safe because Sales still consumes the root-mint routeAug 2revenueRevenue approves the ADR-0039 Sales route-to-scope mapAug 2revenuePlatform action requested before ADR-0039 root rotation can become readyAug 2salesSales approves the ADR-0039 caller inventory and production workload policyAug 2salesSales workload authentication migration is production-ready and clears the ADR-0039 Sales gateAug 10revenueRevenue reconciles ADR-0039 migration reply lineage

View source on GitHub