From 162b65efd823056a6d26b8b985e7514e0b9a6285 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 30 Oct 2026 23:00:48 +0100 Subject: [PATCH] NK-WP-0056-T04: bind-lane accepts approvals recorded by credential-change.py approve Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 673304@bnt-lap001 Assistant-Session: 959b12c7-cf2e-440b-a60d-91229cc9e96e --- tools/service-binds/bind-lane.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/service-binds/bind-lane.py b/tools/service-binds/bind-lane.py index 5684728..1c5ff4a 100755 --- a/tools/service-binds/bind-lane.py +++ b/tools/service-binds/bind-lane.py @@ -59,7 +59,7 @@ def contract(name, expected): ccr, errors, _ = load('credential_change', PLATFORM / 'scripts/credential-change.py').validate_ccr(path) if errors or ccr['status'] not in {'approved', 'applied', 'verified', 'active'}: raise Refused('ccr_status') approved = {r['reviewer'].removeprefix('User (').removesuffix(')') for r in ccr['review'].get('comments', []) - if r.get('decision') == 'approved' and r.get('source_ref')} + if r.get('decision') == 'approved' and (r.get('source_ref') or r.get('at'))} if not APPROVERS <= approved: raise Refused('ccr_approval') role = 'net-kingdom-' + name + '-bind-eso' kv = 'platform/workloads/net-kingdom/directory-binds/' + name