tegwick
3e49ed4c0c
Builds from an accepted case and its reviewed, undrifted plan into CCR drafts for railiance-platform's applier, policy HCL, catalog proposal, exact rollback and manifest; the local audit log records case, type and acceptance. Drafts pass the platform's own CCR validator. 6 tests; suite 175 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
33 lines
1,005 B
YAML
33 lines
1,005 B
YAML
proposal_for: ops-warden
|
|
security_case:
|
|
case: forgejo-netkingdom-oidc
|
|
type: oidc-browser-relying-party@1.0
|
|
render_digest: sha256:fb8b114d465341a46bb492259cb9c6b77bc0731670edace2e13a1f58758c6e23
|
|
acceptance_record: key-cape docs/forgejo-oidc-client-request.yaml (status accepted-2026-10-08, KEY-WP-0038-T01);
|
|
type acknowledged via informed-decision memo nk-wp-0048-t05-oidc-browser-relying-party-r4, hub decision e418263e
|
|
accepted_at: '2026-10-08'
|
|
accepted_by:
|
|
- owner
|
|
- founder
|
|
entry: 'id: forgejo-keycape-client
|
|
|
|
owner_repo: key-cape
|
|
|
|
warden_executes: false
|
|
|
|
risk: high
|
|
|
|
status: active once verification passes
|
|
|
|
workload_ref: applicable, name forgejo, declaration_ref of the consumer''s published declaration or the explicit
|
|
unknown form, never inferred
|
|
|
|
path_template: platform/workloads/keycape/forgejo
|
|
|
|
field: CLIENT_SECRET
|
|
|
|
delegation: native, intended_owner key-cape
|
|
|
|
rotation: mint-secret then verification; automatable false until a run has been proven
|
|
|
|
'
|