coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Verify image publication without Python and bind local managed package
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Successful in 58s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
This commit is contained in:
tegwick 2026-10-16 19:52:09 +02:00
parent 0a05383195
commit 84c78e072c
4 changed files with 121 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

28
docs/native-signer-workload.json
View file

@ -33,17 +33,33 @@
"kid"
],
"proposed_catalog_workload_reference": {
"name": "flex-auth",
"declaration_ref": "access-engine/tenancy.yaml#/workload_identity",
"rapp_id": "rapp-flex-auth-secrets-engine",
"name": "flex-auth-secrets-engine",
"deployable": "flex-auth-secrets-engine",
"declaration_ref": "rapp-flex-auth-secrets-engine/declarations/rapp.yaml",
"declaration_commit": "d52f811ed5ec0be27c9c367e71d476125b3228be",
"exact_binding": "system:serviceaccount:flex-auth:flex-auth-secrets-engine",
"resolution": "unknown until owner custody and managed-package admission; do not mark resolvable merely from source binding"
"resolution": "Local source tuple resolves draft. This is an owner-proposed catalog pointer only; actual Platform catalog/custody is unchanged and remains pending admission."
},
"key_created_or_admitted": false
},
"managed_package_limit": {
"rapp_declaration_ref": null,
"status": "Existing managed-deployable migration debt remains unknown under security-zones_v0.1 \u00a76; no matching authoritative rapp declaration was established. Existing source tenancy declaration supplies owner identity binding but cannot substitute for managed-package admission.",
"no_fiction": "Do not invent a rapp tuple or describe this Helm-managed Deployment as an independent operational unit to bypass the rule."
"rapp_declaration_ref": "rapp-flex-auth-secrets-engine/declarations/rapp.yaml",
"status": "Canonical local package declaration now exists at exact recorded commit/hash. Repo Manager resolves the exact tuple/deployable under /home/worsch with ownership_repo access-engine and readiness draft. Existing unrelated rapp-forgejo declaration_missing remains visible. This source resolution does not claim central registration, private source access/placement, reef admission, signer custody, native deployment or independent consumer trust.",
"no_fiction": "Do not invent a rapp tuple or describe this Helm-managed Deployment as an independent operational unit to bypass the rule.",
"owner_selected_reference": {
"rapp_id": "rapp-flex-auth-secrets-engine",
"name": "flex-auth-secrets-engine",
"deployable": "flex-auth-secrets-engine",
"declaration_ref": "rapp-flex-auth-secrets-engine/declarations/rapp.yaml",
"declaration_commit": "d52f811ed5ec0be27c9c367e71d476125b3228be",
"declaration_tree": "d4fbad71bdc8ef870603526ccd1f53195d0322af",
"declaration_sha256": "0b722431bc5162dd86f72b15f12424e149aca8f2a8790adf2c57e8511ea73b4c",
"local_resolver_root": "/home/worsch",
"local_resolution": "resolved",
"readiness_state": "draft",
"scope": "Committed canonical local declaration and exact local source resolution only; no central/private read-placement, reef binding, custody, live deployment or consumer trust admission."
}
},
"unchanged_limits": [
"tenancy and zones grades are unchanged",