coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0055-T11: plan audit sender payloads, chain correlation id, core PDP readiness
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
FLEX-WP-0031 gains T10 (final per-pin payloads for AUDIT-WP-0013-T02) and
T11 (cross-stream correlation id, FLEX-WP-0024 relation); T02 no longer waits
on the settled failure-path ruling. New proposed FLEX-WP-0039 covers ADR-0018
readiness surface, per-consumer fail-closed receipts and policy import options.
SCOPE.md: secrets-engine pin enforces caller auth since 6e3dfae.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4515@bnt-lap001
Assistant-Session: 0bf96127-6e04-41be-bfda-d11717c3f354
This commit is contained in:
tegwick 2026-10-27 22:35:31 +01:00
parent b2ddb4b3eb
commit 7cbd4e5328
4 changed files with 204 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
SCOPE.md
View file

@ -122,7 +122,8 @@ secret-catalog-lane`, twelve actions delivered by secrets-engine rather than
inferred, `destroy` gated on a dual-control approval claim, and a dedicated
`flex-auth-secrets-engine` pin at
`http://flex-auth-secrets-engine.flex-auth.svc.cluster.local.:8080` —
trailing dot required, in-cluster only — with `callerAuth.mode: warn`. Adoption is not complete: secrets-engine is a CLI
trailing dot required, in-cluster only — with `callerAuth.mode: enforce` (since
2026-09-06, `6e3dfae`, verified operator caller identity). Adoption is not complete: secrets-engine is a CLI
rather than a workload, and the pin's default-deny ingress admits a pod, so an
operator-run access path is still undecided.