net-kingdom/bounded-executor/tests
tegwick 1cdc18f75f NK-WP-0056-T10: one OpenBao login per lane; renew before the 15m lease ends
The executor logs in separately for the bind write (CCR-2026-0058) and the
journey read (CCR-2026-0059) and refuses one role for both; every login is
revoked at exit, also when setup fails. Clients log in again (re-reading the
rotating projected JWT) before the lease ends, since a run's budget (20m)
outlasts a 15m token. Synthetic pilot with per-lane tokens: completed and
reverted, all_met.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-10-31 19:01:44 +01:00
..
test_clients.py NK-WP-0056-T13 (part): executor CLI, clients, Containerfile, image workflow 2026-10-31 16:51:07 +01:00
test_executor.py NK-WP-0056-T13 (part): executor CLI, clients, Containerfile, image workflow 2026-10-31 16:51:07 +01:00
test_openbao_lanes.py NK-WP-0056-T10: one OpenBao login per lane; renew before the 15m lease ends 2026-10-31 19:01:44 +01:00
test_operations.py NK-WP-0056-T12 done: pilot operations; synthetic rotation and revert pass 2026-10-31 16:24:17 +01:00