coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare signed lifecycle runtime admission and receipt verification
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Failing after 59s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
This commit is contained in:
tegwick 2026-10-16 10:48:28 +02:00
parent ec21518e25
commit 919ce25a37
9 changed files with 364 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

17
examples/secrets-engine/signer-receipt-admission.template.json Normal file
View file

@ -0,0 +1,17 @@
{
"schema": "access-engine.signer-receipt-check.v1",
"trust_file": "/absolute/owner-admitted/public-trust.json",
"verifier": "/absolute/installed/secrets-engine-pdp-verify",
"verifier_sha256": "REPLACE_WITH_INDEPENDENTLY_REVIEWED_INSTALLED_HELPER_SHA256",
"allow_request": "/absolute/sanitized-native-receipts/allow-request.json",
"allow_envelope": "/absolute/sanitized-native-receipts/allow-envelope.json",
"allow_record": "/absolute/sanitized-native-receipts/allow-source-record.json",
"deny_request": "/absolute/sanitized-native-receipts/deny-request.json",
"deny_envelope": "/absolute/sanitized-native-receipts/deny-envelope.json",
"deny_record": "/absolute/sanitized-native-receipts/deny-source-record.json",
"expected_caller": {
"mode": "enforce",
"principal": "system:serviceaccount:secrets-engine:secrets-engine",
"audience": "flex-auth"
}
}