net-kingdom/docs/evidence/2026-10-31-nk56-t10-executor-lanes/00-setup-attempt-patch-denied.json
tegwick 12c9b2df43 NK-WP-0056-T10: set cas_required by metadata write (platform-admin has no patch)
First attended setup stopped at cas_required: platform-admin holds
create/read/update/delete/list on platform/*, not patch, so 'kv metadata
patch' was denied. Policies were already applied; nothing after. Now a
metadata write naming only cas_required (KV v2 keeps unnamed fields; checked
on the pinned OpenBao image), guarded by a before/after comparison of
max_versions, delete_version_after and custom_metadata. Receipt of the
stopped attempt kept as evidence.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-10-31 19:42:40 +01:00

8 lines
213 B
JSON

{
"action": "setup",
"phase": "cas_required",
"reason": "LaneError",
"source_sha256": "a9289918254bc98d84b4b573c7ed2895fe50d7fbc538f650167e4d84557d44ae",
"status": "failed",
"values_recorded": false
}