coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add proposed task execution policy and initiating identity contract
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 58s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 19:06:01 +02:00
parent 1d3a8727f5
commit 24c1f56f00
8 changed files with 658 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
examples/secrets-engine-task-execution/policy_fixtures.yaml Normal file
View file

@ -0,0 +1,16 @@
- id: unsigned-provider-refused
request:
tenant: tenant:platform
subject: {id: secrets-engine, type: service}
action: execute-ccr
resource: {id: catalog:test, type: secret-catalog-lane, system: secrets-engine}
context: {human_control: true, verified: true, owner_admission: true}
expect: {effect: deny, reason: initiating_provider_unadmitted}
- id: legacy-action-cannot-borrow-task-policy
request:
tenant: tenant:platform
subject: {id: secrets-engine, type: service}
action: apply
resource: {id: catalog:test, type: secret-catalog-lane, system: secrets-engine}
context: {human_control: true}
expect: {effect: deny, reason: initiating_provider_unadmitted}