From 13027544f4b204e957a5ac99b85749f474b88d71 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 5 Sep 2026 21:15:14 +0200 Subject: [PATCH] docs: confirm Anthropic key custody and remaining runtime gates Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb --- docs/anthropic-workload-key.md | 14 ++++++++++++++ .../GLAS-WP-0012-anthropic-custody-2026-09-05.json | 10 ++++++++++ ...WP-0012-first-local-profile-production-proof.md | 7 +++++-- 3 files changed, 29 insertions(+), 2 deletions(-) create mode 100644 docs/evidence/GLAS-WP-0012-anthropic-custody-2026-09-05.json diff --git a/docs/anthropic-workload-key.md b/docs/anthropic-workload-key.md index 4a9f83d..49c5b57 100644 --- a/docs/anthropic-workload-key.md +++ b/docs/anthropic-workload-key.md @@ -90,3 +90,17 @@ a second contained login after correcting empty-response parsing; both sessions were revoked. See the non-secret evidence in `evidence/GLAS-WP-0012-anthropic-empty-entry-2026-09-05.json`. The user can now create version 2 in the UI. + +## Custody confirmed + +On 2026-09-05 the user reported saving the API key through the UI. A contained +metadata-only read confirmed live version 2, created at +`2026-09-05T19:12:40.442796563Z`, neither deleted nor destroyed. The session +was revoked. No secret value or field content was read; provider authentication +is not yet verified. Evidence: +`evidence/GLAS-WP-0012-anthropic-custody-2026-09-05.json`. + +The UI handoff is complete. Do not run the empty initializer again. The next +implementation is an exact sandbox-owner machine binding and protected key +delivery, followed by enforced provider egress and the bounded real proof. +CCR-2026-0016 remains in flight until those acceptance gates pass. diff --git a/docs/evidence/GLAS-WP-0012-anthropic-custody-2026-09-05.json b/docs/evidence/GLAS-WP-0012-anthropic-custody-2026-09-05.json new file mode 100644 index 0000000..d955879 --- /dev/null +++ b/docs/evidence/GLAS-WP-0012-anthropic-custody-2026-09-05.json @@ -0,0 +1,10 @@ +{ + "ccr": "CCR-2026-0016", + "path": "platform/metadata/workloads/glas-harness/claude-agent-dev", + "current_version": 2, + "created_time": "2026-09-05T19:12:40.442796563Z", + "live_successor_observed": true, + "secret_value_read": false, + "provider_authentication_verified": false, + "request_id": "d0b60424-a749-c72f-593b-ced6172dd183" +} diff --git a/workplans/GLAS-WP-0012-first-local-profile-production-proof.md b/workplans/GLAS-WP-0012-first-local-profile-production-proof.md index c8cfacd..214639a 100644 --- a/workplans/GLAS-WP-0012-first-local-profile-production-proof.md +++ b/workplans/GLAS-WP-0012-first-local-profile-production-proof.md @@ -93,8 +93,11 @@ selection. Authentication lane, credential delivery/revocation, provider egress, pinning the Claude executable, and deployed profile review remain open. The credential catalog has no matching Anthropic/Claude workload lane; the user selected a dedicated Anthropic workload API key. See [the concrete custody proposal](../docs/anthropic-workload-key.md) and owner -CCR-2026-0016 (in flight). Organization/budget, protected custody writer and -verified machine binding remain outstanding; no key has been created. +CCR-2026-0016 (in flight). Organization/key metadata is supplied and the user saved the key in OpenBao. +A metadata-only owner check confirmed live version 2 on 2026-09-05, without +reading the value. Custody handoff is complete. Verified machine binding, +protected runtime delivery, workspace scope/budget and provider egress remain +outstanding; provider authentication has not been tested. See docs/local-profile-acceptance.md. ## Review and validate the versioned Glas proof candidate