5 commits

Author	SHA1	Message	Date
tegwick	876c3f6647	AUDIT-WP-0018-T04: founder-run seed of the nk-bounded-executor bearer; T05 live activation waits ... - scripts/seed-nk-bounded-executor-sender.py (+ silent attended wrapper): one attended process mints once, writes CCR-2026-0063 custody (platform/workloads/net-kingdom/bounded-executor/audit-sender, cas 0) and appends the sender to the audit-core registry (cas), syncs audit-core-senders and compares by hash, restarts the receiver, probes the live scope without writing an event, and checks sso/nk-bind-executor-audit by hash when it exists. Receipt only; no value printed or stored. - Refuses unless CCR-2026-0063 is approved by its three owners, cluster is railiance01, receiver image and live scope ConfigMap match, the ingress policy exists and the coding-agent boundary covers the custody path. - tests/test_seed_nk_bounded_executor_sender.py: 16 synthetic tests, including the probe run against the real receiver over HTTP. - docs/bounded-executor-receipts.md: 2026-11-04 live state and founder runbook (single-object ingress apply, preflight, seed, verify). - Read-only check: ingress policy not live; other nine policies match. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 523928@bnt-lap001 Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350	2026-11-04 01:39:36 +01:00
tegwick	06d0029f1e	AUDIT-WP-0018-T03: record railiance01 release of sha256:5f3d01c8 and scope ConfigMap ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 482098@bnt-lap001 Assistant-Session: 9643c95a-a398-4f4a-b56a-6119be4e845e	2026-11-03 22:08:52 +01:00
tegwick	2b8c9097ad	AUDIT-WP-0018-T03: report bounded-executor runs that started without a receipt ... A sender may declare closing_classes; nk-bounded-executor declares execution.run.started closed by execution.attribution.receipt within 7200s. GET /v1/stream-findings reports opening_without_closing past the bound, counted from the receiver's accepted_at plus the heartbeat grace allowance; a per-run data.window.not_after tightens but never extends. Identifiers and timing only. The overlay may add or shorten, never remove, rebind or lengthen. Both backends: 403 passed (1 unrelated live-catalog env failure). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 482098@bnt-lap001 Assistant-Session: 9643c95a-a398-4f4a-b56a-6119be4e845e	2026-11-03 22:04:14 +01:00
tegwick	7728fde9b4	AUDIT-WP-0018-T02 done: nk-bounded-executor sender scope and sso ingress prepared ... - deploy/senders-scope.{json,yaml}: nk-bounded-executor (source net-kingdom.bounded-executor, tenants [platform], write-only, secret_policy reject, load-bearing); inert until a token is seeded - senders.py: the scope overlay may tighten secret_policy redact->reject, never relax it - networkpolicies.yaml: audit-core-nk-bounded-executor-ingress (sso AND app.kubernetes.io/name=bounded-executor, TCP 8080); not applied - tests on the executor's envelope shape: 202, 200 duplicate, 409, wrong source/tenant, secret-shaped step check 400 - T03 unblocked (window bound = admission window.not_after) - docs: emitter defect: executor AuditCore.emit rejects 202 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5502@bnt-lap001 Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196	2026-10-31 23:02:44 +01:00
tegwick	1ef939b38a	AUDIT-WP-0018: answer NK-WP-0056-T02 — hold bounded-executor receipts, propose event mapping ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 994874@bnt-lap001 Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87	2026-10-31 14:19:10 +01:00