coulomb/glas-harness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record enforced caller proof and published approval release
All checks were successful
ci / validate (push) Successful in 1m35s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
This commit is contained in:
tegwick 2026-09-06 23:37:38 +02:00
parent a20b9f3861
commit 74a6071e84
6 changed files with 230 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

96
docs/evidence/GLAS-WP-0015-caller-auth-2026-09-06.json Normal file
View file

@ -0,0 +1,96 @@
[
{
"test": "issuance",
"principal": "system:serviceaccount:secrets-engine:secrets-engine",
"audience": [
"flex-auth"
],
"issued_at": 1788729746,
"not_after": 1788730346
},
{
"test": "positive-adoption",
"mode": "warn",
"http_status": 200,
"expected_status": 200,
"checked_at": 1788729745,
"effect": "allow",
"policy_version": "v2"
},
{
"test": "adoption-warning-check",
"warnings": 0
},
{
"test": "positive-enforced",
"mode": "enforce",
"http_status": 200,
"expected_status": 200,
"checked_at": 1788729813,
"effect": "allow",
"policy_version": "v2"
},
{
"test": "issuance",
"principal": "system:serviceaccount:secrets-engine:secrets-engine",
"audience": [
"flex-auth"
],
"issued_at": 1788729831,
"not_after": 1788730431
},
{
"test": "positive-enforced",
"mode": "enforce",
"http_status": 200,
"expected_status": 200,
"checked_at": 1788729831,
"effect": "allow",
"policy_version": "v2"
},
{
"test": "N1-missing-token",
"mode": "enforce",
"http_status": 401,
"expected_status": 401,
"checked_at": 1788729832,
"effect": null,
"policy_version": null
},
{
"test": "N2-wrong-principal",
"mode": "enforce",
"http_status": 403,
"expected_status": 403,
"checked_at": 1788729832,
"effect": null,
"policy_version": null
},
{
"test": "N3-wrong-audience",
"mode": "enforce",
"http_status": 401,
"expected_status": 401,
"checked_at": 1788729832,
"effect": null,
"policy_version": null
},
{
"test": "N4-expired-token",
"mode": "enforce",
"http_status": 401,
"expected_status": 401,
"checked_at": 1788730498,
"effect": null,
"policy_version": null
},
{
"test": "positive-fresh-after-expiry",
"mode": "enforce",
"http_status": 200,
"expected_status": 200,
"checked_at": 1788730499,
"effect": "allow",
"policy_version": "v2"
}
]