From 260f734806c07d9e12a479f5c81d1362629e2417 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 17 Jul 2026 00:33:20 +0200 Subject: [PATCH] company-email: mark OpenBao lane provisioned and active Red provision and capabilities-safe verify complete (WARDEN-WP-0028). --- integrations/company-email-openbao.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/integrations/company-email-openbao.md b/integrations/company-email-openbao.md index c48039e..4ceec7d 100644 --- a/integrations/company-email-openbao.md +++ b/integrations/company-email-openbao.md @@ -1,6 +1,6 @@ # Company Email → Net Kingdom / OpenBao Integration Plan -> Status: Blue facts complete — 2026-07-17 (WARDEN-WP-0028). +> Status: lane active — provision done — 2026-07-17 (WARDEN-WP-0028). > Goal: `bernd.worsch@binky-hedgehog.com` becomes an agent-readable event > source so StB replies, bank and authority notices reach the control plane. > **Credential handover is a single Red-lane founder step** — no agent solicits @@ -63,7 +63,7 @@ password so consumers get one fetch surface. **Password never in git/chat.** | Fields | `IMAP_USERNAME`, `IMAP_PASSWORD` | | Policy | `workload-kv-read-binky-company-email-imap` | | OIDC role | `binky-company-email-imap-workload-kv-read` | -| Catalog | `binky-company-email-imap` (draft until provision) | +| Catalog | `binky-company-email-imap` (active, resolvable) | | Risk | high | ## email-connect consumer config (non-secret) @@ -91,8 +91,8 @@ Scan output under `mailmeta/` — metadata only (no message bodies in git). 3. [x] CCR-2026-0007 + policy + OIDC role applied (metadata only) 4. [x] ops-warden draft catalog + playbooks 5. [x] Confirm IMAP host/provider facts (IONOS: `imap.ionos.de:993` SSL/TLS) -6. [ ] **Red lane — founder:** provision username/password via `@file` only -7. [ ] Capabilities-safe verify + promote catalog to active/resolvable +6. [x] **Red lane — founder:** provision username/password via `@file` only +7. [x] Capabilities-safe verify + promote catalog to active/resolvable 8. [ ] First read-only scan; file metadata evidence; add to OperatingRhythm 9. [ ] Recurring scan via activity-core (BINKY-WP-0003 follow-ons)