coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0056-T04: bind-lane accepts approvals recorded by credential-change.py approve

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 673304@bnt-lap001
Assistant-Session: 959b12c7-cf2e-440b-a60d-91229cc9e96e
This commit is contained in:
tegwick 2026-10-30 23:00:48 +01:00
parent e0719ff663
commit 162b65efd8
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tools/service-binds/bind-lane.py
View file

@ -59,7 +59,7 @@ def contract(name, expected):
ccr, errors, _ = load('credential_change', PLATFORM / 'scripts/credential-change.py').validate_ccr(path)
if errors or ccr['status'] not in {'approved', 'applied', 'verified', 'active'}: raise Refused('ccr_status')
approved = {r['reviewer'].removeprefix('User (').removesuffix(')') for r in ccr['review'].get('comments', [])
if r.get('decision') == 'approved' and r.get('source_ref')}
if r.get('decision') == 'approved' and (r.get('source_ref') or r.get('at'))}
if not APPROVERS <= approved: raise Refused('ccr_approval')
role = 'net-kingdom-' + name + '-bind-eso'
kv = 'platform/workloads/net-kingdom/directory-binds/' + name