coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

MASON-WP-0015-T06: apply as the scoped ops-mason-builder identity

Browse source 
The default path is user ops-mason-builder. Token mint, pod create, and
serviceaccount impersonation are no. Admin stays on the attended warden lane.
Negative-scope verify treats a denied get as the proof, and the CCR test
interpreter can import the platform generator.

Assistant: grok
Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a
This commit is contained in:
tegwick 2026-10-22 08:58:21 +02:00
parent ede8aee129
commit 57773aa8a2
8 changed files with 299 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

5
pyproject.toml
View file

@ -23,3 +23,8 @@ packages = ["src/ops_mason"]
[tool.pytest.ini_options]
testpaths = ["tests"]
pythonpath = ["src"]
[dependency-groups]
dev = [
"jsonschema>=4.26.0",
]