From 4608f10632225e71b78cb4d809a4bb9c021e70b0 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 6 Sep 2026 19:45:40 +0200 Subject: [PATCH] docs: record production policy deployment and remaining approval gates Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb --- ...2026-09-06-174000-production-deployment.md | 49 +++++++++++++++++++ ...12-first-local-profile-production-proof.md | 12 +++++ 2 files changed, 61 insertions(+) create mode 100644 history/2026-09-06-174000-production-deployment.md diff --git a/history/2026-09-06-174000-production-deployment.md b/history/2026-09-06-174000-production-deployment.md new file mode 100644 index 0000000..b3e6c38 --- /dev/null +++ b/history/2026-09-06-174000-production-deployment.md @@ -0,0 +1,49 @@ +# Production deployment result — 2026-09-06 + +User authorized production deployment. The dedicated secrets-engine policy +service is deployed; the complete approval/credential chain is not activated. + +## Deployed + +- Helm release flex-auth-secrets-engine, namespace flex-auth, revision 1. +- Image forgejo.coulomb.social/coulomb/flex-auth at + sha256:89086c02c74a931068423e70937d03df7850fa0db9c63e70be56b3558f1756af, + verified against CI tag main-dd3ce4c before application. +- Policy secrets-engine.catalog-lane.lifecycle v1. +- Endpoint http://flex-auth-secrets-engine.flex-auth.svc.cluster.local:8080. +- Available 1/1; caller-auth warn per FLEX-WP-0021-T04. This mode does not + enforce authenticated caller identity. Ingress requires the secrets-engine + namespace and app.kubernetes.io/name=secrets-engine pod label. +- Helm lint and server dry-run passed. Five published Check fixtures returned + two allows (rotate, dual-control destroy) and three denies (unknown subject, + missing destroy claim, unknown revoke action). These are policy evaluations, + not actual protected actions or approval consumption. +- Network probes verified allowed identity access after initial propagation + retry, plus wrong-label and wrong-namespace denial across retries. All six + temporary pods and the local port-forward were removed. +- Existing ops-warden, user-engine and tenant-engine Deployment specs compared + equal before/after. New secrets-engine namespace retained for future consumer. +- Deployment input lives in flex-auth/values/secrets-engine.yaml; first-install + rollback is removal of only this dedicated Helm release. + +## Remaining production gates + +approval-engine is not deployed. Live preflight found: + +1. The two required KeyCape clients are absent; confidential client credentials + and audience/scope validation are still needed. +2. audit-core sender scope registers only user-engine. Approval sender + registration, token custody and ingress are still needed. +3. Store tenant platform, requested client tenant:coulomb and PDP tenant:platform + differ. Owner contracts must align before exact tenant verification can pass. +4. The approval image still needs a built/scanned immutable release digest. + +Corrected approval-engine's deployment issuer to https://kc.coulomb.social and +JWKS service DNS to keycape.sso.svc.cluster.local, matching observed live +configuration. No KeyCape client, audit registry or secret custody was mutated. +No secret values were emitted and no Anthropic key was read. + +Live records: FLEX-WP-0021-T04 done, T05 awaiting consumer adoption/handoff; +APPROVAL-WP-0002-T01/T03/T04 remain gated; SECRETS-WP-0009-T03 and +GLAS-WP-0012-T02 remain waiting. The local Glas profile stays blocked. This +partial deployment must not be described as a production Claude run. diff --git a/workplans/GLAS-WP-0012-first-local-profile-production-proof.md b/workplans/GLAS-WP-0012-first-local-profile-production-proof.md index 867ec08..cc02d8b 100644 --- a/workplans/GLAS-WP-0012-first-local-profile-production-proof.md +++ b/workplans/GLAS-WP-0012-first-local-profile-production-proof.md @@ -279,3 +279,15 @@ combined Glas acceptance remain outstanding. T02–T05 stay wait. Review found no pending local changes or new inbox messages. Corrected stale README wording that still called owner execution missing; the implemented mechanism and its separate proofs do not change profile readiness. + +## 2026-09-06 production deployment action + +User authorized production deployment. Dedicated flex-auth-secrets-engine Helm +release is available 1/1 at revision 1; five policy fixtures and allowed/denied +network probes passed. CI image is digest-pinned; existing consumers unchanged. +Caller authentication remains warn pending identity adoption. See +[deployment evidence](../history/2026-09-06-174000-production-deployment.md). +Approval-engine remains undeployed: live KeyCape clients and audit sender are +absent, the tenant contract needs alignment, and a release digest is required. +Corrected its stale issuer/JWKS deployment inputs. No production credential +lane or real Claude run was activated; T02 remains wait.