coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0055-T15: credential rotation-lane register with coverage check
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 308701@bnt-lap001
Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56
This commit is contained in:
tegwick 2026-10-28 11:01:08 +01:00
parent 5466c831cd
commit 666160a390
8 changed files with 559 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
tools/security-tools.json
View file

@ -20,6 +20,9 @@
{"id": "service-identity", "path": "tools/service-identity", "answers": "Do the declared service accounts conform to the identity and privilege standard?",
"run": "make service-identity-check", "test": "make service-identity-test", "agent_may_run": "yes",
"standard": "canon/standards/service-identity-privilege_v0.1.md"},
{"id": "rotation-lanes", "path": "tools/rotation-lanes", "answers": "Does every known credential have a rotation lane with blast radius, verification step and owner?",
"run": "make rotation-lanes-check", "test": "make rotation-lanes-test", "agent_may_run": "yes",
"standard": "canon/standards/credential-management_v0.2.md"},
{"id": "custody-record", "path": "tools/custody-record", "answers": "Is a platform-root custody record valid, and may a root grant be observed from it?",
"run": "uv run tools/custody-record/validate.py <record.json>", "test": "make custody-record-test", "agent_may_run": "yes",
"standard": "docs/adr/ADR-0017-root-grant-custody-and-account-authority.md"},