coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
audit-core/docs
History
tegwick 3157454b84
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
AUDIT-WP-0018-T04: align seed with settled CCR-2026-0063 (railiance-platform f3b0c4f) 
- sso delivery is ExternalSecret/Secret sso/bounded-executor-tokens key
  audit-core (the Secret the rapp run Job already mounts), not
  nk-bind-executor-audit/audit-token.
- CCR check now also pins the new reader shape (audience openbao, explicit
  max TTL 15m, token_self_lifecycle) and that the CCR names this script as
  its custody procedure and the bounded-executor-tokens delivery.
- Docs/workplan: this script is the single seeder; railiance-platform
  fences the boundary (nk_bind_executor_custody.py fence) and owns
  manifests/nk-bind-executor-eso.yaml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 523928@bnt-lap001
Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350
2026-11-04 02:05:18 +01:00
..
evidence Accept native Qonto sender admission and hourly receiver registration 2026-10-15 21:41:46 +02:00
approval-engine-source-registration.md Evaluate declared emission cadence and close AUDIT-WP-0009 (T05) 2026-09-22 22:44:45 +02:00
audit-backend-contract.md AUDIT-WP-0009-T01 — derive tamper_evidence from live attestation state 2026-09-06 20:34:22 +02:00
availability-recovery.md Record the availability exercise and finish the tenancy posture plan. 2026-09-24 15:53:09 +02:00
bounded-executor-receipts.md AUDIT-WP-0018-T04: align seed with settled CCR-2026-0063 (railiance-platform f3b0c4f) 2026-11-04 02:05:18 +01:00
cadence-registration.md Accept native Qonto sender admission and hourly receiver registration 2026-10-15 21:41:46 +02:00
cross-repo-evidence-admission.md AUDIT-WP-0018: answer NK-WP-0056-T02 — hold bounded-executor receipts, propose event mapping 2026-10-31 14:19:10 +01:00
erasure-and-audit.md Implement AUDIT-WP-0008 T03, T06, T07, T08. 2026-08-18 15:24:55 +02:00
event-envelope.md Register informed-decision.memo.posed for the platform tenant. 2026-10-03 21:18:13 +02:00
flex-auth-secrets-engine-admission.md Define retained PDP audit admission and complete-ledger reconciliation 2026-10-16 19:25:03 +02:00
informed-decision-source-registration.md Register informed-decision.memo.posed for the platform tenant. 2026-10-03 21:18:13 +02:00
integrity.md fix: repair chained imports and track blocked evidence dependencies 2026-10-04 11:36:06 +02:00
interface-card.yaml Refine AUDIT-WP-0008 open tasks against draft-8. 2026-08-18 15:20:58 +02:00
operator-runbook.md AUDIT-WP-0013-T06: independent full-scope readers may count any source (NK-WP-0035-T04) 2026-10-28 09:49:10 +01:00
recovery-synthetic-load-driver.md feat(AUDIT-WP-0008): add T02 synthetic load driver 2026-08-22 16:46:31 +02:00
section-4-source-of-evidence.md AUDIT-WP-0013-T06: independent full-scope readers may count any source (NK-WP-0035-T04) 2026-10-28 09:49:10 +01:00
senders.example.json AUDIT-WP-0009-T03/T09 — evidence_kind, and approval-engine's registration inputs 2026-09-06 22:31:37 +02:00
stream-completeness.md AUDIT-WP-0018-T03: report bounded-executor runs that started without a receipt 2026-11-03 22:04:14 +01:00
tenant-engine-source-registration.md AUDIT-WP-0010 T01/T03/T04 — admit tenant-engine, and the envelope does not match 2026-09-10 16:34:45 +02:00