coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
audit-core/scripts
History
tegwick 3157454b84
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
AUDIT-WP-0018-T04: align seed with settled CCR-2026-0063 (railiance-platform f3b0c4f) 
- sso delivery is ExternalSecret/Secret sso/bounded-executor-tokens key
  audit-core (the Secret the rapp run Job already mounts), not
  nk-bind-executor-audit/audit-token.
- CCR check now also pins the new reader shape (audience openbao, explicit
  max TTL 15m, token_self_lifecycle) and that the CCR names this script as
  its custody procedure and the bounded-executor-tokens delivery.
- Docs/workplan: this script is the single seeder; railiance-platform
  fences the boundary (nk_bind_executor_custody.py fence) and owns
  manifests/nk-bind-executor-eso.yaml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 523928@bnt-lap001
Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350
2026-11-04 02:05:18 +01:00
..
attended-mint-tenant-engine-sender.sh Pin attended sender mint to the operator OpenBao tunnel 2026-09-15 21:59:28 +02:00
attended-prove-sender-bearer-revocation.sh Add attended overlap-then-drop bearer revocation proof 2026-09-15 22:27:01 +02:00
attended-seed-nk-bounded-executor-sender.sh AUDIT-WP-0018-T04: founder-run seed of the nk-bounded-executor bearer; T05 live activation waits 2026-11-04 01:39:36 +01:00
attended-seed-tenant-engine-audit-core-sender.sh Seed tenant-engine sender token into its dedicated KV path (MASON-WP-0007 row 7) 2026-10-03 00:45:57 +02:00
diagnose-platform-admin-login.sh Pin attended sender mint to the operator OpenBao tunnel 2026-09-15 21:59:28 +02:00
failure_matrix.py Implement AUDIT-WP-0006 honest operational custody. 2026-08-16 00:24:33 +02:00
mint-tenant-engine-sender.py Pin attended sender mint to the operator OpenBao tunnel 2026-09-15 21:59:28 +02:00
prove-sender-bearer-revocation.py Add attended overlap-then-drop bearer revocation proof 2026-09-15 22:27:01 +02:00
prove-tenant-engine-accept.py Prove tenant-engine live accept and close AUDIT-WP-0010 2026-09-15 22:21:22 +02:00
register-approval-engine-cadence.py Prepare guarded cadence registry updates and Qonto receiver admission 2026-10-15 21:19:05 +02:00
release_container_check.py Prepare compatible audit receiver with verified container lifecycle 2026-09-11 06:46:15 +02:00
renew-runtime-lease.sh Align ESO token scripts with the periodic token (RPF-WP-0046) 2026-09-24 02:22:49 +02:00
seed-nk-bounded-executor-sender.py AUDIT-WP-0018-T04: align seed with settled CCR-2026-0063 (railiance-platform f3b0c4f) 2026-11-04 02:05:18 +01:00
seed-tenant-engine-audit-core-sender.py Seed tenant-engine sender token into its dedicated KV path (MASON-WP-0007 row 7) 2026-10-03 00:45:57 +02:00
t02_synthetic_load_driver.py feat(AUDIT-WP-0008): add T02 synthetic load driver 2026-08-22 16:46:31 +02:00