coulomb/glas-harness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: isolate rein results and normalize manager startup failures
Some checks failed
ci / validate (push) Has been cancelled
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
This commit is contained in:
tegwick 2026-09-06 01:13:23 +02:00
parent 73cee37ad8
commit 53f2abf7e0
8 changed files with 152 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

10
docs/anthropic-workload-key.md
View file

@ -18,7 +18,7 @@ passes and apply-plan refuses the incomplete request.
| Provider expiry | `2027-01-31T22:00:00+01:00` = `2027-01-31T21:00:00Z` (user supplied) |
| KV-v2 entry | `platform/workloads/glas-harness/claude-agent-dev` |
| Only secret field | `ANTHROPIC_API_KEY` |
| Read policy name | `workload-kv-read-glas-claude-agent-dev` |
| Proposed read policy name | `se-prod-glas-claude-agent-dev-anthropic` |
| Proposed route | `glas-claude-agent-dev-anthropic` |
| Consumer | Sand-boxer owner delivery to the selected Claude workload |
@ -119,3 +119,11 @@ policy name; neither policy has been applied by this work. Adoption is tracked
in SECRETS-WP-0009. The production exec gate refuses before OpenBao while
SECRETS-WP-0007-T04 and SECRETS-WP-0008-T02/T06 remain unresolved.
No production profile selects the unactivated route.
Owner update received 2026-09-06 (message
`3bd23bc9-e863-4f1f-8c76-415812ec0656`): secrets-engine reports the local
authorization join fixed at `627810b`. Live activation still waits on the
approval-engine ActionAuthorization claim endpoint and access-engine Check
service, then configuration, per-lane approval and positive/negative checks.
The owner explicitly distinguishes these durable objects from State Hub
decisions. This update does not activate the route or verify the provider key.