feat(AUDIT-WP-0008): enforce temporary sender expiry
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a025c2-407a-7a32-b40a-f37a52f03f62
This commit is contained in:
tegwick 2026-08-22 11:59:26 +02:00
parent e916c957ea
commit abd22fa0a6
6 changed files with 136 additions and 7 deletions

View file

@ -16,5 +16,15 @@
"may_write": true,
"may_read": true,
"secret_policy": "redact"
},
{
"name": "temporary-evidence-sender",
"tokens": ["replace-with-short-lived-token"],
"sources": ["whitehat-security"],
"tenants": ["tenant:trial:named-fixture"],
"may_write": true,
"may_read": true,
"secret_policy": "redact",
"expires_at": "2026-08-22T18:15:00Z"
}
]