coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0058-T04 done: bx, four founder commands plus the approval
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
bx ready / request / run / status (close for emergencies): inputs in a state file, receipts numbered
by the tool, every command safe to repeat and one value-free line. OpenBao steps run as silent
children of the warden platform-admin lane (executor-lanes.py --quiet); run closes the window in the
same child, also on error. Runbook sections 5-6 replaced; pilot-run.sh deleted. 134 tests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 943911@bnt-lap001
Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0
This commit is contained in:
tegwick 2026-11-05 23:45:02 +01:00
parent a29d92ecda
commit 646ced3f9e
10 changed files with 577 additions and 120 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/bounded-execution-contract-table.md
View file

@ -400,9 +400,9 @@ Argo pin with live) cover the gap.
- **Owner request to ops-warden:** strip `OPENBAO_TOKEN` too, or every token variable by pattern (T07).
- **The second pattern:** net-kingdom's window commands assume a token in the shell instead. They run several
commands, and `pilot-run.sh` keeps that session open across a whole run.
- **Proposal:** run `executor-lanes.py window-open`, `window-close` and the T03 readiness check as warden lanes. They
already write their own receipts and print one line. `pilot-run.sh` then opens one lane per command and needs no
shell login.
- **Done (T04, 2026-11-05):** `tools/bounded-execution-run/bx.py` runs the window commands and the OpenBao status
as silent children of the warden lane (`executor-lanes.py --quiet`). `ready` and `run` each need one login,
and no shell login is left open. `pilot-run.sh` is deleted.
### F1: the founder's steps, 2026-11-04/05
@ -424,7 +424,8 @@ Argo pin with live) cover the gap.
There are about 45 commands across three runbooks, with five kinds of values carried by hand: UID and resource
version, approval id, CCR digests, receipt numbers and `trust_satisfied`. That fits the reported ~50 rounds. T04's
state file removes the carried values: `ready`, `request`, `run` and `status` read and write it, and the receipt
numbers come from the tool.
numbers come from the tool. **Done (T04):** `bx ready`, `bx request`, the approval, `bx run`, `bx status`. Sections 5
and 6 of the T06 runbook now describe only these.
### F2: the browser identity