coulomb/key-cape
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
key-cape/docs
History
tegwick 82b471fc36
Some checks failed
Authentication acceptance / acceptance (push) Failing after 56s
Details
Authentication acceptance / provider-contract (push) Successful in 13s
Details
Build and Publish Container Image / build-and-push (push) Successful in 26s
Details
Add approval:read to informed-decision-sitting-requester (source only) 
informed-decision's present_existing intake (INFD-WP-0010, 0e66a33) must GET
an existing approval before presenting it. This grants read only: no consume,
no approve, and the audience, subject, tenant and secret stay the same. The
tests pin the exact scope pair and keep the published JSON equal to the
source row.

The live registry is not changed. docs/sitting-requester-read-scope.md has the
record diff and the founder-run keycape-client.py remove/add/restart steps,
and lists the railiance-platform and informed-decision copies that still pin
create-only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-11-01 00:34:07 +01:00
..
adr feat: implement T01-T04 — Go module, canonical model, LDAP validator, error taxonomy 2026-03-13 01:27:54 +01:00
evidence Record verified KEY39 source acceptance and remaining execution prerequisites 2026-10-11 19:35:51 +02:00
proposals KEY-WP-0043: per-run agent identity assessment and proposed workplan 2026-10-24 23:49:33 +02:00
reviews Publish reviewed bounded JWT ready handoff and retained owner history 2026-10-11 18:31:04 +02:00
approval-clients-deployment.patch.yaml docs(keycape): prepare pinned approval-client rollout and recovery 2026-09-08 17:03:59 +02:00
approval-clients-rollout.md docs: close live approval service registration gate 2026-09-09 02:18:12 +02:00
approval-engine-auth-contract.md Register the approver client now its callback exists 2026-09-10 22:50:13 +02:00
approval-engine-provisioning-request.yaml Register the approver client now its callback exists 2026-09-10 22:50:13 +02:00
audit-core-sender-package.md KEY-WP-0044: traceparent correlation task and audit-core intake package (NK-WP-0055-T11) 2026-10-27 23:28:54 +01:00
authorization-code-bindings.md Document the authorization-code bindings for relying parties 2026-09-07 00:17:56 +02:00
credential-renewal-release-2026-09-13.md Record provider credential renewal release and remaining owner handoff 2026-09-13 14:27:35 +02:00
current-token-client.md Bind online human ID tokens to the exact current access grant 2026-10-18 12:13:56 +02:00
enrollment-assurance-release-2026-09-13.md Retain provider acceptance CI and synchronized assurance task binding 2026-09-13 17:06:32 +02:00
forgejo-oidc-client-request.yaml KEY-WP-0038: Forgejo custody path derived by case type; propose KEY-WP-0039 negative-probe tokens 2026-10-10 12:29:32 +02:00
native-authentication.md Ship the live-registration check both blocked tasks depend on 2026-09-08 14:30:43 +02:00
nk49-isolated-restore-owner-acceptance-2026-10-27.md Record KeyCape owner acceptance of NK-WP-0049 isolated restore (issuer side) 2026-10-27 21:40:11 +01:00
offline-checker-owner-review-2026-10-16.json Review exact offline checker behavior for browser registration 2026-10-16 22:08:05 +02:00
offline-checker-owner-review-2026-10-16.md Review exact offline checker behavior for browser registration 2026-10-16 22:08:05 +02:00
oidc-browser-relying-party-type-review.md Review oidc-browser-relying-party 1.0 against KeyCape's client field rules 2026-10-10 12:39:31 +02:00
oidc-service-client-type-review.md Review oidc-service-client 0.1 against KeyCape's client field rules 2026-10-31 23:02:54 +01:00
online-token-status.md Bind online human ID tokens to the exact current access grant 2026-10-18 12:13:56 +02:00
openbao-negative-probe-clients.yaml Publish reviewed KEY39 lifecycle source and preserve failed review history 2026-10-11 15:33:14 +02:00
openbao-negative-probe-session-proposal.md Publish reviewed KEY39 lifecycle source and preserve failed review history 2026-10-11 15:33:14 +02:00
openbao-negative-token-producer-decision.json Publish reviewed bounded JWT ready handoff and retained owner history 2026-10-11 18:31:04 +02:00
openbao-negative-token-producer-decision.md Publish reviewed bounded JWT ready handoff and retained owner history 2026-10-11 18:31:04 +02:00
openbao-service-auth-contract.md Correct platform infrastructure client tenant bindings 2026-09-27 16:43:31 +02:00
operations.md KEY-WP-0046: directory bind password from KEYCAPE_LLDAP_BIND_PW 2026-10-31 10:24:22 +01:00
optional-mfa.md Record deployed P06 policy and completed platform acceptance 2026-09-14 00:10:25 +02:00
qonto-runtime-identity-contract.md Define Qonto runtime identity contract 2026-07-26 13:34:56 +02:00
secrets-engine-openbao-owner-packet.md Confirm groups and MFA for the secrets-engine-openbao operator reader 2026-10-06 14:05:37 +02:00
sitting-requester-read-scope.md Add approval:read to informed-decision-sitting-requester (source only) 2026-11-01 00:34:07 +01:00
sitting-requester-registration.json Add approval:read to informed-decision-sitting-requester (source only) 2026-11-01 00:34:07 +01:00
t03-requester-registration.json Register create-only Secrets Engine approval requester 2026-09-14 02:47:31 +02:00
t03-requester-registration.md Register create-only Secrets Engine approval requester 2026-09-14 02:47:31 +02:00
tenant-claim-contract.md Correct platform infrastructure client tenant bindings 2026-09-27 16:43:31 +02:00
upstream-issuer-proof.md docs(identity): record verified live upstream issuer and completed cleanup 2026-09-08 23:50:54 +02:00