access-engine

Author	SHA1	Message	Date
tegwick	c1e83c16bf	FLEX-WP-0024: CCR-2026-0050 Access review, signer public receipt and T07 founder gate All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Approve CCR-2026-0050 for Access scope (sent to railiance-platform). Add the exact consumer pin derived at candidate `84c78e0` and an offline projection from the Platform custody receipt to the secrets-engine pdp-trust.v1 bytes plus a public receipt. No key, rollout or admission. T07 waits on founder decision 4fab263d. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 809600@bnt-lap001 Assistant-Session: 40ba228f-c8a0-4ec9-bb29-3129951afdc4	2026-10-21 01:22:46 +02:00
tegwick	ec21518e25	fix(auth): sign served decisions before recording and returning them Some checks failed CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Build and Publish Container Image / build-and-push (push) Failing after 1m27s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 07:51:43 +02:00
tegwick	127f83da4d	Sign decision envelopes and close FLEX-WP-0024. All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 2s Details Build and Publish Container Image / build-and-push (push) Successful in 53s Details Detached Ed25519 over the canonical envelope with signature omitted. Unsigned is stated, not implied. Testdata fixtures prove verify and tamper failure without minting a production key. FLEX-WP-0025 is finished with the validate check from the previous commit. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 09:57:50 +02:00

3 commits