Founder-run under CCR-2026-0055: setup, verify and realm_bootstrap.py --rotate-bind --from-openbao with the admin MFA proof. The first apply's check got a code that was not admin's, so both MFA prompts now name the user. Custody re-sealed after setup. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 896183@bnt-lap001 Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2
14 lines
445 B
JSON
14 lines
445 B
JSON
{
|
|
"action": "setup",
|
|
"ccr_sha256": "97e8e4b17e12d6bcbffe5acd4f8fbd68f52fe340333968bb175e8da18ecb6513",
|
|
"coding_agents_denied": true,
|
|
"custody_is_current": true,
|
|
"kv_version": 1,
|
|
"lane": "svc-privacyidea",
|
|
"phase": "done",
|
|
"source_ccr": "CCR-2026-0055",
|
|
"source_sha256": "5b31b3567af07bba09530c6d3b0ed8b5c947df22bd13ac0442dc33c0d9b420c0",
|
|
"status": "custody_prepared",
|
|
"values_recorded": false,
|
|
"workload_access": false
|
|
}
|