coulomb/glas-harness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: confirm Anthropic key custody and remaining runtime gates
All checks were successful
ci / validate (push) Successful in 2m3s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
This commit is contained in:
tegwick 2026-09-05 21:15:14 +02:00
parent 39e9562802
commit 13027544f4
3 changed files with 29 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

14
docs/anthropic-workload-key.md
View file

@ -90,3 +90,17 @@ a second contained login after correcting empty-response parsing; both sessions
were revoked. See the non-secret evidence in
`evidence/GLAS-WP-0012-anthropic-empty-entry-2026-09-05.json`.
The user can now create version 2 in the UI.
## Custody confirmed
On 2026-09-05 the user reported saving the API key through the UI. A contained
metadata-only read confirmed live version 2, created at
`2026-09-05T19:12:40.442796563Z`, neither deleted nor destroyed. The session
was revoked. No secret value or field content was read; provider authentication
is not yet verified. Evidence:
`evidence/GLAS-WP-0012-anthropic-custody-2026-09-05.json`.
The UI handoff is complete. Do not run the empty initializer again. The next
implementation is an exact sandbox-owner machine binding and protected key
delivery, followed by enforced provider egress and the bounded real proof.
CCR-2026-0016 remains in flight until those acceptance gates pass.

10
docs/evidence/GLAS-WP-0012-anthropic-custody-2026-09-05.json Normal file
View file

@ -0,0 +1,10 @@
{
"ccr": "CCR-2026-0016",
"path": "platform/metadata/workloads/glas-harness/claude-agent-dev",
"current_version": 2,
"created_time": "2026-09-05T19:12:40.442796563Z",
"live_successor_observed": true,
"secret_value_read": false,
"provider_authentication_verified": false,
"request_id": "d0b60424-a749-c72f-593b-ced6172dd183"
}

7
workplans/GLAS-WP-0012-first-local-profile-production-proof.md
View file

@ -93,8 +93,11 @@ selection. Authentication lane, credential delivery/revocation, provider egress,
pinning the Claude executable, and deployed profile review remain open. The
credential catalog has no matching Anthropic/Claude workload lane; the user selected a dedicated Anthropic workload API key. See
[the concrete custody proposal](../docs/anthropic-workload-key.md) and owner
CCR-2026-0016 (in flight). Organization/budget, protected custody writer and
verified machine binding remain outstanding; no key has been created.
CCR-2026-0016 (in flight). Organization/key metadata is supplied and the user saved the key in OpenBao.
A metadata-only owner check confirmed live version 2 on 2026-09-05, without
reading the value. Custody handoff is complete. Verified machine binding,
protected runtime delivery, workspace scope/budget and provider egress remain
outstanding; provider authentication has not been tested.
See docs/local-profile-acceptance.md.
## Review and validate the versioned Glas proof candidate