coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

MASON-WP-0010: mark the missing-role cause as unconfirmed

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 327203@bnt-lap001
Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
This commit is contained in:
tegwick 2026-10-10 15:51:58 +02:00
parent d1703b360c
commit 247c829569
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
workplans/MASON-WP-0010-security-case-materialization.md
View file

@ -217,10 +217,10 @@ check on the next grant.
2026-10-10: checked. `auth/kubernetes/role/external-secrets-keycape-forgejo`
exists as applied (external-secrets/external-secrets, audience openbao, 15m,
policy `workload-kv-read-keycape-forgejo-eso`, no default policy). It was missing
from the plan's "already present" list because the live survey reads role
lists only for the mount named in the role body, which this run did not
resolve; the collision review is unaffected (it never flagged it).
policy `workload-kv-read-keycape-forgejo-eso`, no default policy). Why the plan's
"already present" list omitted it is not yet confirmed (the survey should list
`auth/kubernetes/role`); reproduce under the next grant. The collision review
is unaffected: it never flagged the role.
2026-10-10: type 1.1 (net-kingdom `e2174ce`, message `af66538c`) adds the
consumer-enforces-groups verification and tightens redirect URIs; the case is