coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record audit sender OpenBao authority
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-08-14 20:12:33 +02:00
parent 68c5f0b177
commit c2af842c55
2 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
View file

@ -236,6 +236,13 @@ Findings fixed on the way:
T02 done for the provisioned-lane + no-delivery-gap claim. Empty senders
KV wrap-migrate is follow-on, not a founder paste.
Follow-on completed 2026-08-14: the live registry was streamed directly from
Kubernetes into `platform/workloads/audit-core/senders` under an attended
KeyCape/MFA platform-admin session. ExternalSecret `audit-core-senders` is
`SecretSynced`, owns the derived Secret, and preserved its pre-migration
checksum. The receiver rolled successfully and `/readyz` remained durable
`archive`; no sender token was printed or staged.
## T03 - Deploy the receiver
```task