audit-core/scripts
tegwick aad5a75ca6 Silence the runtime-lease remint for contained warden --exec
Warden fails closed on any child stdout or stderr, even on success.
The previous helper echoed status and prompted for BAO_TOKEN after
the login envelope had already unset it. Use the contained
.vault-token helper, write Kubernetes Secret from a file, and persist
only metadata evidence.

Assistant: grok
Assistant-Session: 01a0a182-bab7-7f11-b32b-d06f3af52082
2026-09-15 00:02:35 +02:00
..
failure_matrix.py Implement AUDIT-WP-0006 honest operational custody. 2026-08-16 00:24:33 +02:00
openbao-eso-token-apply.sh Add attended runtime-lease remint helper for the expired ESO token 2026-09-14 23:54:35 +02:00
release_container_check.py Prepare compatible audit receiver with verified container lifecycle 2026-09-11 06:46:15 +02:00
renew-runtime-lease.sh Silence the runtime-lease remint for contained warden --exec 2026-09-15 00:02:35 +02:00
t02_synthetic_load_driver.py feat(AUDIT-WP-0008): add T02 synthetic load driver 2026-08-22 16:46:31 +02:00