From efefb8bbc763ee3f3c67800a51a56aec3ddcd475 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 10 Oct 2026 15:45:43 +0200 Subject: [PATCH] MASON-WP-0009-T05: updated ops-mason-survey installed, hash matches repo file Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0 --- ...-WP-0009-keycape-secrets-engine-openbao-client-custody.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/workplans/MASON-WP-0009-keycape-secrets-engine-openbao-client-custody.md b/workplans/MASON-WP-0009-keycape-secrets-engine-openbao-client-custody.md index e84f1c6..1f76818 100644 --- a/workplans/MASON-WP-0009-keycape-secrets-engine-openbao-client-custody.md +++ b/workplans/MASON-WP-0009-keycape-secrets-engine-openbao-client-custody.md @@ -167,3 +167,8 @@ policies equal their files; mount `keycape-services/` is type jwt. Reading the role was refused: `ops-mason-survey` did not cover `auth/keycape-services/role/*`. Added to `policies/ops-mason-survey.hcl`; the founder reinstalls it (AGENTS.md command), then the role check runs. + +2026-10-10 15:45Z: founder reinstalled `ops-mason-survey`; the installed policy's +sha256 equals the repo file's (`c845bc79…`, receipt +`~/.local/state/railiance/receipts/ops-mason-survey.sha256`). Role check runs +under the next grant.