tegwick 45feaa13cc NK-WP-0056-T20 done: oidc-service-client 0.2 with the owner reviews; memo r2 ... ESO role audience + explicit max TTL and ESO policy self-lifecycle (ops-mason R3/R4, railiance-platform R3); consumer role renamed to differ from its policy (railiance-platform R4); default SA and external-secrets/openbao namespaces refused (ops-mason R6); consumer-cannot-read-delivered-secret verification (ops-warden R7, ops-mason R7); excess scope invalid_profile_usage (key-cape R3); attended rotation, broker admission pending, one rollout per case; catalog fields (ops-warden R6). First case consumer_owner_repo rapp-bounded-executor. CCR-2026-0060/0061 names checked by test. Memo r2 validated against informed-decision intake and State Hub dispatcher. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5502@bnt-lap001 Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196		2026-11-01 00:34:17 +01:00
..
test_approval_request.py	NK-WP-0056-T20 done: oidc-service-client 0.2 with the owner reviews; memo r2	2026-11-01 00:34:17 +01:00
test_clients.py	NK-WP-0056-T18: accept audit-core 202/200, distinct 409; progress note	2026-10-31 23:04:44 +01:00
test_executor.py	NK-WP-0056-T13 (part): executor CLI, clients, Containerfile, image workflow	2026-10-31 16:51:07 +01:00
test_openbao_lanes.py	NK-WP-0056-T10: wait for OpenBao reachability before the first login	2026-10-31 20:33:17 +01:00
test_operations.py	NK-WP-0056-T12 done: pilot operations; synthetic rotation and revert pass	2026-10-31 16:24:17 +01:00