net-kingdom/docs/evidence/2026-09-09-keycape-activation-attempts.json
tegwick 303a584bd0
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
feat: accept KeyCape approval clients with tested recovery
Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
2026-09-09 02:18:12 +02:00

316 lines
12 KiB
JSON

{
"attempts": [
{
"schema": "platform.keycape-approval-custody.v1",
"status": "failed",
"lanes": [],
"started_at": "2026-09-08T23:34:28.315053+00:00",
"credential_values_emitted": false,
"client_side_read_admitted": false,
"keycape_rollout_completed": false,
"error": "command_failed",
"finished_at": "2026-09-08T23:34:28.559853+00:00"
},
{
"schema": "platform.keycape-approval-custody.v1",
"status": "failed",
"lanes": [
{
"ccr": "CCR-2026-0017",
"source_sha256": "dc2bbd86e213edecc2f2f91a99d0f51136e9a0853a90e55f65dda2b942305416",
"policy_applied": true,
"role_applied": true,
"custody_seeded": true,
"kv_version": 1,
"request_id": "94c98373-33fa-591d-c201-d36dddf9879b",
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "34502b48-ed5d-4a1d-bc43-aa282392775e",
"secret_resource_version": "58736028",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
},
{
"ccr": "CCR-2026-0018",
"source_sha256": "99148133ddf1eb15dce3c03862b51dc001818ca3121045035a0b0e5897c55dad",
"policy_applied": true,
"role_applied": true,
"custody_seeded": true,
"kv_version": 1,
"request_id": "a62ee5c5-b5ba-b7dc-0f51-e6fd8a6dde32",
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "e6f42c4b-dbca-480d-96a4-c475f1298e7f",
"secret_resource_version": "58736036",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
}
],
"started_at": "2026-09-08T23:36:01.727953+00:00",
"credential_values_emitted": false,
"client_side_read_admitted": false,
"keycape_rollout_completed": false,
"issuer_pin_revision": "58713343",
"phase": "keycape_rollout",
"coding_agent_boundary_extended_only_to_new_paths": true,
"initial_values_generation": "independent CSPRNG 48-byte values; memory-to-OpenBao stdin only; CAS=0",
"namespace_probe_cleanup_requested": true,
"keycape": {
"existing_human_login_before": true,
"protected_recovery_retained": true,
"compatible_pair_restored": true
},
"verifier_delivery_disabled_custody_versions_retained": true,
"error": "keycape_readiness_timeout",
"finished_at": "2026-09-08T23:39:24.210112+00:00"
},
{
"schema": "platform.keycape-approval-custody.v1",
"status": "failed",
"lanes": [
{
"ccr": "CCR-2026-0017",
"source_sha256": "dc2bbd86e213edecc2f2f91a99d0f51136e9a0853a90e55f65dda2b942305416",
"custody_seeded": false,
"existing_version_reused": true,
"kv_version": 1,
"initial_request_id": "94c98373-33fa-591d-c201-d36dddf9879b",
"policy_applied": false,
"role_applied": true,
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "b85ce6bb-45c4-49ab-81c9-e92f001500b2",
"secret_resource_version": "58741915",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
},
{
"ccr": "CCR-2026-0018",
"source_sha256": "99148133ddf1eb15dce3c03862b51dc001818ca3121045035a0b0e5897c55dad",
"custody_seeded": false,
"existing_version_reused": true,
"kv_version": 1,
"initial_request_id": "a62ee5c5-b5ba-b7dc-0f51-e6fd8a6dde32",
"policy_applied": false,
"role_applied": true,
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "faad6d54-a6b1-4a3d-9102-4e35aeea67a5",
"secret_resource_version": "58741919",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
}
],
"started_at": "2026-09-08T23:54:16.437123+00:00",
"credential_values_emitted": false,
"client_side_read_admitted": false,
"keycape_rollout_completed": false,
"issuer_pin_revision": "58737048",
"phase": "keycape_rollout",
"custody_versions_unchanged": true,
"namespace_probe_cleanup_requested": true,
"keycape": {
"existing_human_login_before": true,
"protected_recovery_retained": true,
"deployment_uid": "99ddd83c-cb3f-4847-bcf8-35f1aa87627f",
"generation": 32,
"pod_uid": "28a62a5a-1ac6-4d6c-a1e1-4a414a621559",
"single_ready_replica": true,
"clients": [],
"compatible_pair_restored": true
},
"verifier_delivery_disabled_custody_versions_retained": true,
"error": "contained_operation_failed",
"finished_at": "2026-09-08T23:55:02.310001+00:00"
},
{
"schema": "platform.keycape-approval-custody.v1",
"status": "failed",
"lanes": [
{
"ccr": "CCR-2026-0017",
"source_sha256": "dc2bbd86e213edecc2f2f91a99d0f51136e9a0853a90e55f65dda2b942305416",
"custody_seeded": false,
"existing_version_reused": true,
"kv_version": 1,
"initial_request_id": "94c98373-33fa-591d-c201-d36dddf9879b",
"policy_applied": false,
"role_applied": true,
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "827b4e04-6727-4dd4-9cdb-2554ecc84441",
"secret_resource_version": "58743272",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
},
{
"ccr": "CCR-2026-0018",
"source_sha256": "99148133ddf1eb15dce3c03862b51dc001818ca3121045035a0b0e5897c55dad",
"custody_seeded": false,
"existing_version_reused": true,
"kv_version": 1,
"initial_request_id": "a62ee5c5-b5ba-b7dc-0f51-e6fd8a6dde32",
"policy_applied": false,
"role_applied": true,
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "ca949cda-6a4f-4c24-9a06-6a9c7e00e4aa",
"secret_resource_version": "58743276",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
}
],
"started_at": "2026-09-08T23:58:13.955525+00:00",
"credential_values_emitted": false,
"client_side_read_admitted": false,
"keycape_rollout_completed": false,
"issuer_pin_revision": "58742089",
"phase": "keycape_rollout",
"custody_versions_unchanged": true,
"namespace_probe_cleanup_requested": true,
"keycape": {
"existing_human_login_before": true,
"protected_recovery_retained": true,
"deployment_uid": "99ddd83c-cb3f-4847-bcf8-35f1aa87627f",
"generation": 34,
"pod_uid": "dabd15a0-f9c3-47f2-82ee-e53590754558",
"single_ready_replica": true,
"acceptance_phase": "in_pod_verifier",
"clients": [],
"acceptance_client": "secrets-engine-approval",
"failure_class": "LaneError",
"compatible_pair_restored": true
},
"verifier_delivery_disabled_custody_versions_retained": true,
"error": "command_failed",
"finished_at": "2026-09-08T23:59:06.395926+00:00"
},
{
"schema": "platform.keycape-approval-custody.v1",
"status": "failed",
"lanes": [
{
"ccr": "CCR-2026-0017",
"source_sha256": "dc2bbd86e213edecc2f2f91a99d0f51136e9a0853a90e55f65dda2b942305416",
"custody_seeded": false,
"existing_version_reused": true,
"kv_version": 1,
"initial_request_id": "94c98373-33fa-591d-c201-d36dddf9879b",
"policy_applied": false,
"role_applied": true,
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "1e0c888a-c35b-4fe2-8fc5-c510256c19df",
"secret_resource_version": "58745995",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
},
{
"ccr": "CCR-2026-0018",
"source_sha256": "99148133ddf1eb15dce3c03862b51dc001818ca3121045035a0b0e5897c55dad",
"custody_seeded": false,
"existing_version_reused": true,
"kv_version": 1,
"initial_request_id": "a62ee5c5-b5ba-b7dc-0f51-e6fd8a6dde32",
"policy_applied": false,
"role_applied": true,
"native_reader_verified": true,
"cross_path_denied": true,
"parent_listing_denied": true,
"auth_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"store_ready": true,
"external_secret_ready": true,
"delivery_matches": true,
"secret_uid": "50b18e82-6187-47d1-9b07-199f9b999f47",
"secret_resource_version": "58745999",
"wrong_namespace_denied": true,
"outside_namespace_store_denied": true
}
],
"started_at": "2026-09-09T00:06:30.650774+00:00",
"credential_values_emitted": false,
"client_side_read_admitted": false,
"keycape_rollout_completed": false,
"issuer_pin_revision": "58743475",
"phase": "keycape_rollout",
"custody_versions_unchanged": true,
"namespace_probe_cleanup_requested": true,
"keycape": {
"existing_human_login_before": true,
"protected_recovery_retained": true,
"deployment_uid": "99ddd83c-cb3f-4847-bcf8-35f1aa87627f",
"generation": 36,
"pod_uid": "011de4b4-c2cd-429d-ba04-e7c72b2f1f9e",
"single_ready_replica": true,
"acceptance_phase": "signature_and_claims",
"clients": [],
"acceptance_client": "secrets-engine-approval",
"failure_class": "ImmatureSignatureError",
"compatible_pair_restored": true
},
"verifier_delivery_disabled_custody_versions_retained": true,
"error": "contained_operation_failed",
"finished_at": "2026-09-09T00:07:25.670140+00:00"
}
],
"all_sessions_revoked": true
}