coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: exercise contained KeyCape approval client rollout
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-09 01:32:45 +02:00
parent 896c1200c0
commit ce826cfa8d
3 changed files with 412 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

30
docs/evidence/2026-09-09-keycape-approval-image-exercise.json Normal file
View file

@ -0,0 +1,30 @@
{
"clients": [
{
"client_id": "secrets-engine-approval",
"live_jwks_signature_verified": true,
"exact_claims_verified": true,
"lifetime_seconds": 900,
"excess_scope_denied": true,
"wrong_secret_denied": true,
"pod_verify_client_passed": false,
"real_predecessor_rotation_tested": false,
"observed_wall_clock_expiry": false
},
{
"client_id": "approval-engine-operator",
"live_jwks_signature_verified": true,
"exact_claims_verified": true,
"lifetime_seconds": 900,
"excess_scope_denied": true,
"wrong_secret_denied": true,
"pod_verify_client_passed": false,
"real_predecessor_rotation_tested": false,
"observed_wall_clock_expiry": false
}
],
"human_client_consume_denied": true,
"target": "disposable pinned KeyCape image; synthetic keys and clients only",
"pod_cli_verification": "deferred to live in-pod check",
"cleanup_complete": true
}