coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FLEX-WP-0024: CCR-2026-0050 Access review, signer public receipt and T07 founder gate
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Approve CCR-2026-0050 for Access scope (sent to railiance-platform).
Add the exact consumer pin derived at candidate 84c78e0 and an offline
projection from the Platform custody receipt to the secrets-engine
pdp-trust.v1 bytes plus a public receipt. No key, rollout or admission.
T07 waits on founder decision 4fab263d.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 809600@bnt-lap001
Assistant-Session: 40ba228f-c8a0-4ec9-bb29-3129951afdc4
This commit is contained in:
tegwick 2026-10-21 01:22:46 +02:00
parent c130b7d739
commit c1e83c16bf
6 changed files with 236 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

14
docs/decision-envelope-signature.md
View file

@ -166,3 +166,17 @@ owner-bound loopback tunnel and caller audience; installation of the reviewed
consumer verifier binary (the Python wheel alone omits it); exact consumer source
and hash drift check; and native positive/negative/rotation plus record-custody
receipts. Local fixtures and chart renders do not establish those outcomes.
## Public receipt for consumer admission (2026-10-21)
The consumer's trust file has a closed field set (`schema`, `evaluator`, `mode`,
`policy_package`, `policy_version`, `policy_package_digest`, `keys{kid: pubkey}`), so
provenance travels beside it, not in it. `tools/prepare_signer_public_receipt.py`
reads only the public fields of the Platform `railiance-platform.signer-cas-receipt.v1`
plus `docs/native-signer-public-pin.json`, refuses non-final custody, a kid other
than the reviewed rollout kid, a malformed key or fingerprint, or any private-looking
field, and writes two files: the exact trust bytes the founder signs, and
`access-engine.signer-public-receipt.v1` carrying kid, public key, fingerprint, pin,
the trust file's SHA-256 and the custody/CCR/plan/pin hashes. The Access owner
authenticates the receipt by committing it under `docs/evidence/`. Neither file
admits trust; the founder signature does (Secrets `docs/founder-admission.md`).

24
docs/native-signer-public-pin.json Normal file
View file

@ -0,0 +1,24 @@
{
"schema": "access-engine.signer-public-pin.v1",
"purpose": "Exact issuer/policy pin the retained Secrets lifecycle PDP signs under. Input to tools/prepare_signer_public_receipt.py; never a key and never consumer trust by itself.",
"expected_kid": "flex-auth-lifecycle-20261016-r1",
"pin": {
"evaluator": "flex-auth/local",
"mode": "standalone",
"policy_package": "secrets-engine.catalog-lane.lifecycle",
"policy_version": "v2",
"policy_package_digest": "sha256:bd11c5fe77ce6439c65fea225ad6b71d2110efc5e7b5bc9b499c59cd0a53b8b4"
},
"derivation": {
"date": "2026-10-21",
"source_revision": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0",
"image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f",
"policy_file": "examples/secrets-engine/policy_package.md",
"policy_file_sha256": "sha256:657fa9312c9dcabee059ec31c89ee13396fe9aa54d852edc9e6559a74bbc139a",
"command": "git archive 84c78e0 | tar -x -C <dir>; cd <dir>; go run ./cmd/access-engine check -policy examples/secrets-engine/policy_package.md -registry examples/secrets-engine/registry_snapshot.json -request examples/secrets-engine/check_request_allow_rotate.json",
"result": "provenance fields above; signature {mode: unsigned} (no key in source)",
"rollout_manifest": "the-custodian docs/changes/netkingdom-target-2026-10-16/access-native-admission/rollout-r2/manifest.json sha256:5be7a7f438624dcb35b7dbc96e7c9e5a8e2d5d1b1966cb4338aa5aecbe3a8b59",
"rollout_activation_values_sha256": "sha256:e76a30967add800ed8b588368757e7a5fa0ce4d8305ef658b5a4a08e377eb5b8",
"confirmation_required": "The first native signed allow/deny must carry these exact provenance values; tools/verify_native_signer_receipt.py refuses otherwise. A changed policy package, image or source is a new pin and a new receipt."
}
}