key-cape/docs/openbao-negative-token-producer-decision.json
tegwick 0f47e0c666 Publish reviewed bounded JWT ready handoff and retained owner history
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 18:31:04 +02:00

82 lines
4 KiB
JSON

{
"proposal_id": "KEY-WP-0039-T02/private-producer-handoff-v4",
"status": "owner_choice_required",
"native_authority": false,
"native_readiness": false,
"lifecycle_manifest_sha256": "84542ddcff00932fc7ce22dcb2626be8942a3c006c5098a62fdd6b2478d0cd14",
"recommended_human": {
"client_id": "netkingdom-bootstrap-console",
"audience": "netkingdom-bootstrap-console",
"scope": "openid",
"callback": "http://127.0.0.1:8876/oidc/callback",
"existing_client_purpose_reuse_admitted": false,
"fresh_mfa_verified": false
},
"coding_agent": {
"client_id": "codex-railiance-platform",
"audience": "codex-railiance-platform",
"scope": "openbao:login",
"subject": "service:codex:railiance-platform",
"tenant": "tenant:platform",
"secret_env": "KEYCAPE_CODEX_RAILIANCE_PLATFORM_CLIENT_SECRET",
"live_registration_verified": false,
"existing_custody_admission_receipt": null,
"consumer_delivery_coordinates": null,
"alternative_if_missing": "Platform-owned new narrow admission proposal; do not silently provision"
},
"handoff": {
"adapter": "scripts/openbao_negative_private_handoff.py",
"pipe_fd": 3,
"private_tmpfs_jwt_files_approved": false,
"exact_launcher_source_digest": null,
"ssh_transport_admission_receipt": null,
"destination": "railiance01 Linux main-thread V5 stdin",
"no_pty": true,
"caller_files_explicit_consumption": true,
"delivery_timeout_seconds": 5,
"decoded_claim_checks_are_signature_verification": false,
"launcher": "scripts/openbao_negative_private_launcher.py",
"ready_schema": "key39-private-input-ready/v1",
"ready_before_any_token_load_consume_write": true,
"ready_requires_nonce_source_envelope_health_window_match": true,
"marker_is_authenticated_authority": false,
"launcher_or_transport_admitted": false,
"remote_child_sha256": "24b7b803e4eb7e6e7c0700a069dad0ec315ee7eb5538a88b9e56147f8fab5cdd",
"remote_wrapper_sha256": "76ac013d1a676a0dfa58aea1ce87b0c3e72483ccd21f586a22c5475e9132f6c1",
"stdio_alias_rejection": "device/inode aliases of0/1/2 and data/control pipes",
"exclusive_same_uid_custody_required": true,
"atomic_inode_delete_guaranteed": false,
"credential_copy_cleanup_verified": false,
"credential_files_remain_possible": true,
"private_unknown_implies_sticky_consumer_unknown": true,
"preparation_total_seconds": 5,
"original_budget_shared_from_main_through_contract_spawn_ready_and_handoff": true,
"source_files_nonblocking_nofollow_regular_stable": true,
"source_contract_envelope_max_bytes": 65536,
"source_hash_file_max_bytes": 262144
},
"node_route": {
"selected_reviewed_origin": null,
"allowed_v5_origins": [
"http://127.0.0.1:18200",
"http://openbao.openbao.svc:8200"
],
"owner_route_receipt": null,
"public_health_preflight_guard_source_digest": null,
"health_before_tokens_credentials_mutations_restarts": true,
"workstation_observation_is_node_route_evidence": false
},
"decisions_required": [
"Founder existing console reuse versus new client",
"NetKingdom current registration/MFA/callback/runtime/guarded health ordering",
"Platform coding-agent live/custody/consumer admission and node route",
"Exact trusted launcher and private-file allowance",
"Fresh exact founder live proposal decision after all evidence",
"Separate founder directSSH control profile, exact launcher and continuously exclusive sameUID private tmpfs custody; marker is not a grant"
],
"previous_producer_manifest_sha256": "569672ecdb3f1f5b46122183dc3b82e83ff168c07c87db7211ec26bc1ce6184a",
"previous_producer_consumer_refusal_sha256": "a1ed14e6b2db1ae77c3fd638fd7e47b5bd50c25eebba418e31aba89bb4b7f88e",
"lifecycle_proposal_id": "KEY-WP-0039-T02/attended-lifecycle-v9-ready-input",
"previous_pair_source_refusal_sha256": "8353eb8aae11be8ce874887d6a5ca10bf37c6fba73c3f85f0644a7546dd7d33f",
"previous_source_refusal_sha256": "38abf660701194f85934a076a0c01d3047e6bfe790e02ba1b0e4616e356634e6"
}