coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(policy): adopt security zone stances
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 33s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0291a-1e87-7151-9934-fcbfe3f65eb1
This commit is contained in:
tegwick 2026-08-22 15:17:13 +02:00
parent fbef547cfa
commit e521e7b715
8 changed files with 248 additions and 49 deletions
Download patch file Download diff file Expand all files Collapse all files

24
examples/ops-warden/registry_snapshot.json
View file

@ -48,9 +48,9 @@
],
"metadata": {
"flex_auth_contract": "protected-system-v0",
"ops_warden_policy_gate": "v2",
"policy_enabled_config": "policy.enabled",
"tenant": "tenant:platform"
"ops_warden_policy_gate": "security-zones-v0.1",
"tenant": "tenant:platform",
"security_zone_standard": "security-zones_v0.1"
}
}
],
@ -66,7 +66,6 @@
"ssh-signing",
"adm"
],
"trust_zone": "platform",
"owner": "team:platform-security",
"attributes": {
"actor_id": "platform-steward",
@ -79,7 +78,10 @@
"platform",
"root"
],
"max_ttl_hours": 8
"max_ttl_hours": 8,
"security_zone": "z2-protected",
"security_zone_admission": "satisfied",
"security_zone_reason": "fixture_enforced"
}
},
{
@ -89,7 +91,6 @@
"ssh-signing",
"agt"
],
"trust_zone": "platform",
"owner": "team:platform-security",
"attributes": {
"actor_id": "ci-deploy-agent",
@ -102,7 +103,10 @@
"deploy",
"git"
],
"max_ttl_hours": 2
"max_ttl_hours": 2,
"security_zone": "z2-protected",
"security_zone_admission": "satisfied",
"security_zone_reason": "fixture_enforced"
}
},
{
@ -112,7 +116,6 @@
"ssh-signing",
"atm"
],
"trust_zone": "platform",
"owner": "team:platform-security",
"attributes": {
"actor_id": "backup-automation",
@ -124,7 +127,10 @@
"allowed_principals": [
"backup"
],
"max_ttl_hours": 1
"max_ttl_hours": 1,
"security_zone": "z2-protected",
"security_zone_admission": "satisfied",
"security_zone_reason": "fixture_enforced"
}
}
],