coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(identity): record verified live upstream issuer and completed cleanup

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-08 23:50:54 +02:00
parent 7ecc78f410
commit 41f6916a5d
5 changed files with 177 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
View file

@ -119,3 +119,12 @@ pin, and the `error_type` to look for if it bites — plus a note that the two
approval clients remain unprovisioned, confirmed by inspection rather than
asserted. G10 stays open: nothing here admits custody, registers the human
callback, or reconciles the OpenBao-token boundary, and no repo-local change can.
2026-09-08 live return: the actual signed-token uncertainty in T03 is now
resolved by KEY-WP-0013-T02's admitted probe. The issuer is exactly
`https://auth.coulomb.social`; signature/audience/time/nonce checks passed and
the Job exited 0. The temporary route, policies, service and Job/Pod were removed.
`docs/evidence/2026-09-08-upstream-issuer-live-proof.json` is the source receipt.
The configuration owner still ensures the exact pin before main rollout; no
normal config or Deployment changed during this proof.