Bind immutable model lifecycle sources at startup

[dotnetpower]

Problem

Model lifecycle reconciliation can produce proposal-only evidence and deterministic expired-unmerged review decisions, and the Operator service has a bounded asynchronous Key Vault source adapter. The active startup path still consumes file or inline JSON without one shared immutable source revision, so lifecycle holds cannot yet prove parity with the model mapping bound by Core and Operator.

Scope

Complete the authority-free model lifecycle source and review path. This issue does not authorize model mapping changes, PR merge, provider activation, or managed-resource execution.

Exit criteria

• Proposal evidence binds the exact source-model digest and affected capabilities.
• Expired unmerged proposals deterministically move affected capabilities to human review without changing model mappings.
• The service-owned asynchronous Key Vault source validates origin, audience, secret identity and version, expiration, bounds, timeout, and redaction.
• An asynchronous startup owner publishes one immutable source revision to capability binding and lifecycle-hold evaluation.
• Core and Operator reject a source-revision mismatch before model capability binding.
• Trusted PR lifecycle observation verifies proposal and decision digests and persists the resulting review decision.
• Pre-binding capability holds are applied without mapping or execution authority.
• A governed scheduled reconciliation receipt proves deprecation or family drift creates only a sanitized draft PR.

Validation

Focused unit, integration, Ruff, strict mypy, roadmap, localization, punctuation, and link checks must pass for the exact committed paths. Governed Azure or GitHub runtime evidence must target a pushed SHA.

[dotnetpower]

Review update: first three criteria are complete; immutable startup owner, Core/Operator mismatch rejection, trusted PR lifecycle persistence, prebinding holds, scheduled draft-only reconciliation receipt, and focused final gates remain. Local implementation is actionable; do not label blocked.

[dotnetpower]

Verdict: partial.

The first three source/digest and Key Vault adapter criteria remain implemented. No single startup owner, cross-service source-revision fence, trusted PR decision persistence, pre-binding hold, or governed scheduled draft-only receipt is complete.

Residual work: complete those local authority-free lifecycle slices and exact focused gates. This directly overlaps the active rule-catalog lifecycle session and was not edited.

[dotnetpower]

Implementation and governed evidence update (2026-09-05):

• PR feat(models): bind immutable lifecycle revision at startup #442 merged immutable Core and Operator startup revisions, trusted PR lifecycle observations, persisted review decisions, and authority-free pre-binding holds. Its final CI run 33953222870 and container supply-chain run 33953222799 passed.
• PRs fix(models): bind reconciliation receipt to source #446, fix(models): provision lifecycle workflow Python #448, and fix(models): use tracked lifecycle artifact #449 corrected the scheduled receipt source SHA, provisioned the pinned uv environment on the protected runner, and bound reconciliation to the tracked services/assets/resolved-models.json artifact. Their required CI passed before merge.
• Governed workflow run 33955281657 targeted exact protected main commit d2b571de7bc76836f89cf7ecdb9c9f5db25d2418 and completed successfully. Artifact model-lifecycle-33955281657-1 records status=abstained, reason=unavailable, activation_authority=false, zero affected capabilities, and zero changes.
• No model mapping, provider deployment, activation, or execution action occurred.

Remaining blocker: repository variables MODEL_RESOLVER_ACCOUNT_NAME and MODEL_RESOLVER_RESOURCE_GROUP are unset. Until an operator supplies reviewed FDAI-owned provider metadata through the repository settings boundary, the protected workflow correctly abstains and cannot produce the final deprecation/family-drift draft-PR receipt. The issue remains open and labeled blocked.