tegwick
db56d8468e
operations.py: OpenBao KV v2 CAS, LLDAP self-rotation (forward and revert), ExternalSecret force-sync and status, rollout restart (RolloutFailed is a definite failure), pilot checks. synthetic_pilot.py on the T08 stack plus OpenBao 2.5.4 with CCR-2026-0058's policy: rotation completed; a one-off wrong delivery reverted in declared order with the earlier value restored. Runner: revert steps run in declared order (BEA-10), definite failures revert, unknown outcomes stop, receipts carry error types. Found and corrected (in railiance-platform) CCR-2026-0058's required_parameters refusing reads. Packaging moved to new T13. 29 executor tests. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 994874@bnt-lap001 Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87
162 lines
3 KiB
JSON
162 lines
3 KiB
JSON
{
|
|
"schema": "netkingdom.bounded-executor.synthetic-pilot/v1",
|
|
"started_at": "2026-10-31T15:21:55+00:00",
|
|
"images": {
|
|
"openbao": "quay.io/openbao/openbao@sha256:436eaf9778cad75507ff70ea26ace30dcbe15606e619ac3823495663d7f7c115"
|
|
},
|
|
"policy_file_sha256": "f14f0e0b885302b5931c1e84e258b5ee32a596fafab5b961d88becf7825eeeb0",
|
|
"runs": [
|
|
{
|
|
"admission": "BEA-2026-9001",
|
|
"outcome": "completed",
|
|
"reason": null,
|
|
"kv_version": [
|
|
1,
|
|
2
|
|
],
|
|
"kv_value_changed": true,
|
|
"previous_value_refused_by_lldap": true,
|
|
"current_kv_value_signs_in": true,
|
|
"steps": [
|
|
[
|
|
"generate",
|
|
"step",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"set-directory",
|
|
"step",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"deliver",
|
|
"step",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"restart",
|
|
"step",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
]
|
|
],
|
|
"reverted": false,
|
|
"pdp": "not-evaluated",
|
|
"events": [
|
|
"execution.run.started",
|
|
"execution.attribution.receipt"
|
|
],
|
|
"met": true
|
|
},
|
|
{
|
|
"admission": "BEA-2026-9002",
|
|
"outcome": "reverted",
|
|
"reason": null,
|
|
"kv_version": [
|
|
2,
|
|
4
|
|
],
|
|
"kv_value_changed": false,
|
|
"previous_value_refused_by_lldap": false,
|
|
"current_kv_value_signs_in": true,
|
|
"steps": [
|
|
[
|
|
"generate",
|
|
"step",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"set-directory",
|
|
"step",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"deliver",
|
|
"step",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"restart",
|
|
"step",
|
|
"failed",
|
|
[],
|
|
"RolloutFailed"
|
|
],
|
|
[
|
|
"restore-kv",
|
|
"revert",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"restore-directory",
|
|
"revert",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"redeliver",
|
|
"revert",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
],
|
|
[
|
|
"restart-again",
|
|
"revert",
|
|
"done",
|
|
[
|
|
"pass"
|
|
],
|
|
null
|
|
]
|
|
],
|
|
"reverted": true,
|
|
"pdp": "not-evaluated",
|
|
"events": [
|
|
"execution.run.started",
|
|
"execution.attribution.receipt"
|
|
],
|
|
"met": true
|
|
}
|
|
],
|
|
"alerts": [],
|
|
"no_values_in_report": true,
|
|
"all_met": true,
|
|
"finished_at": "2026-10-31T15:22:57+00:00"
|
|
}
|