net-kingdom/tools/service-binds
tegwick 7350ba8003 NK-WP-0058-T03 step 1: name the causes (window-command identity phase, approval_entry field)
executor-lanes.py: the identity phase distinguishes openbao_unreachable, openbao_sealed and
platform_admin_login_required, with a one-line hint; LaneError keeps its fixed code. executor.py:
approval_entry:<approver_not_listed|not_human|not_aal2|self_approval>, never the subject.
Note: executor.py changed, so the next admission pins a new image.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 943911@bnt-lap001
Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0
2026-11-05 23:24:08 +01:00
..
bind-lane.py NK-WP-0056-T04: svc-privacyidea lane in OpenBao custody with attended write-through 2026-10-31 11:06:53 +01:00
executor-lanes.py NK-WP-0058-T03 step 1: name the causes (window-command identity phase, approval_entry field) 2026-11-05 23:24:08 +01:00
write-role-audit.py write-role-audit: report write-policy request times and orphan first_seen; check period is required 2026-11-05 16:53:54 +01:00