coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(identity): record verified live upstream issuer and completed cleanup

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-08 23:50:54 +02:00
parent 7ecc78f410
commit 41f6916a5d
5 changed files with 177 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/upstream-issuer-proof.md
View file

@ -1,8 +1,10 @@
# One-shot upstream issuer proof
Prepared for KEY-WP-0013-T02/T07 on 2026-09-08. This packet needs
NetKingdom/platform deployment-owner admission before its temporary workload
uses the existing KeyCape configuration. It does not approve CCR-2026-0017/0018.
Executed with explicit user admission on 2026-09-08: the verified signed issuer
is **`https://auth.coulomb.social`**. The Job exited successfully and all temporary
resources were removed. [Live receipt](evidence/2026-09-08-upstream-issuer-live-proof.json).
This completed run did not approve CCR-2026-0017/0018 or change the normal config.
The procedure below is retained for an admitted recheck after relevant changes.
The missing evidence is the actual signed Authelia ID token produced by the
existing confidential `keycape` registration and server-side token exchange.