Skip to content

Issue #226: corroborate Jira assignee activity without inferring handoff acceptance - #242

Merged
KAVentures merged 5 commits into
mainfrom
feat/issue226-jira-assignee-action-corroboration
Oct 16, 2026
Merged

KAVentures merged 5 commits into
mainfrom
feat/issue226-jira-assignee-action-corroboration

Conversation

@KAVentures

Copy link
Copy Markdown
Owner

Product gap

Observed ownership transition alone cannot prove a cross-person handoff actually progressed. Jira's authorized changelog sometimes supplies a second independent audit event: the newly assigned account later changes the issue status.

Change

  • HMAC-pseudonymize the Jira changelog's optional author.accountId on valid status transitions using the existing per-install secret; never emit user IDs, display names, comments, issue keys, or status labels.
  • For each exact-issue assignee transition, look for a strictly later, independently audited valid status ID transition authored by the new assignee; annotate subsequent_status_action_by_assignee_observed, the corroborating opaque source audit reference and observed count.
  • Keep accepted_by_new_assignee=false, work_completed_by_new_assignee=false, verified_human_handoffs=0, verified_business_outcome=false, and document that no evidence of later status change does not mean no work. Bounds, authorization, and default-OFF behavior unchanged.
  • Synthetic tests cover matching and nonmatching actor actions, missing author data, strict ordering, output redaction, and persistent refusal to declare acceptance.

This is source-corroborated later activity, not a verified human handshake, cross-system confirmation, customer outcome or real provider account test. Changes only Jira source code + existing Jira tests/docs, with no overlap with PR #240's local Stripe setup or #241's trial runner. Draft pending CI and customer-authorized Jira test; does not alone close #226.

@KAVentures
KAVentures marked this pull request as ready for review October 16, 2026 12:44
@KAVentures
KAVentures merged commit 4b1c330 into main Oct 16, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Verified record graph: authorized audit-log joins, outcome receipts, and handoffs

1 participant