[gael-obin]

Draft: installation setup authority

This candidate extends the existing Authority issue/check and signed-delivery paths with attempt-bound, exact-method setup calls and dispatch before activation. This is an owner fix candidate that reuses Authority's existing lifecycle, scope and delivery mechanisms.

Blocked; do not merge. The production trusted-host fixture path supplies no consent receipt, but the dispatcher requires one. It cannot reach its callback and leaves installation pending. An Authority-owned design for authentic attempt-bound trusted-host evidence and a production-wired regression are required. Do not invent person consent or skip acknowledgement. The handbook's HOST-INST stories require pending and acknowledgement; no accepted cross-repository decision was found for this exact-method capability. A proposal, owner agreement and independent review of this revision and affected consumers remain required.

The new Core fields depend on Core's draft at da5e9b0de91584459d4ae201b4f2855cc7122524. That fork commit is not resolvable as a codefly-dev/core Go revision yet; dependency pins remain old and this branch is not independently buildable with released dependencies. Generated outputs are carried from the candidate and must be regenerated/verified through Codefly against the accepted contracts before merge.

Validation and limits

• With a local uncommitted workspace selecting that exact Core draft, passed go test ./authority ./decide ./delivered ./offers ./memstore in authority-core and go test ./plugins/composition ./plugins/installation ./pkg/business/state in the local service.
• Reconciled onto Authority main d021053; newer module-page and edge changes affect shared files and need broader consumer/conformance qualification.
• No real composed schema-owner run, SaaS parity, hosted deployment, full CI or production fixture regression was verified. Prior independent source review found the fixture blocker above; its reviewed dirty snapshot predates this rebased revision.

Independent review status

Independent architecture-bouncer review at c06a93c does not establish design acceptance and blocks implementation qualification. Committed dependency versions do not compile; callback acknowledgement/failure semantics diverge from the accepted lifecycle; fixture-driven installations can lack the required consent record. Local substituted tests are narrower evidence. Owner contract disposition, lifecycle correction and compatible published dependencies are required.