coulomb/kaizen-agentic
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
kaizen-agentic/engagements/pilots/eng-coulomb-railiance01-ho-001/access-plan.md
tegwick 2d347d062f
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
ci / test (push) Failing after 9s
Details
feat: Phase 1 FDA host-operator Role and railiance01 pilot (WP-0009 T02–T07) 
Lock DEC-FDA-001 working defaults; add roles/host-operator package with
OS/security and load protocols; scaffold eng-coulomb-railiance01-ho-001
with bound agent, vault, ramp checklists, and Kai quote/ledger.
2026-07-16 10:47:52 +02:00

1.1 KiB
Raw Blame History

Access plan — eng-coulomb-railiance01-ho-001

Target: host railiance01 Classes requested: host_observe, privileged_ops (gated) Secrets: never stored in this tree

Intended path

Step Action Owner
1 Inventory / facts from railiance-hosts (read-only) operator
2 SSH cert via ops-warden (warden sign / cert_command) identity hint agt operator
3 Tunnel if needed (ops-bridge, e.g. state-hub-railiance01) operator
4 Observe session: non-destructive health/load/os checks host-operator agent
5 Privileged ops only after human approval recorded in vault human + agent

Credential routing

  • SSH certificates → ops-warden
  • API keys / DB passwords → OpenBao via warden route (not this agent)
  • Do not message ops-warden for secret values

Verification log

Date Result Notes
pending RU-01 not yet complete

Revocation

Date Action
open On ramp-down: stop renewing agent certs; set schedule disabled; mark here