Bundle validates; ESO policy identical to applied CCR-2026-0041. Four fluid-telegram entries drafted from the approved plan; email-connect asked for its new path. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
28 lines
1.6 KiB
JSON
28 lines
1.6 KiB
JSON
{
|
|
"applier": "railiance-platform credential-change.py applier-apply (founder), after it files the CCR drafts",
|
|
"files": {
|
|
"catalog-proposal.yaml": "193bae12338d67cd8a5548ccc00e884b44054182ce55969c7cdf5445a5e5c495",
|
|
"credential-change-requests/CCR-DRAFT-FORGEJO-NETKINGDOM-OIDC-ESO.yaml": "41cdd89c90df7f28730a3350ab7828e89df8bd02770594bc7ccfe47fe9db8b90",
|
|
"credential-change-requests/CCR-DRAFT-FORGEJO-NETKINGDOM-OIDC-FORGEJO.yaml": "f7e2303463ac5ac28bdb590be6f3f5445e37f8c61e23ba252af86f44b284fac0",
|
|
"openbao/policies/workload-kv-read-keycape-forgejo-eso.hcl": "861c3a84d11b7ed596dbc707592b2ab437cd161aeb063e71dfcb92fdb8ebee0d",
|
|
"openbao/policies/workload-kv-read-keycape-forgejo-forgejo.hcl": "7e5cb1ce0ee4546cdb564b1c9550e4fd83af47f9d5e8b9e3ee96bdaab79e2402",
|
|
"rollback.yaml": "db5a892f953d833b7e76fe1b20d1f5d21b733786d6117017fce801e2e05fd8ca"
|
|
},
|
|
"kv_path": "platform/workloads/keycape/forgejo",
|
|
"not_ops_mason": [
|
|
"mint-secret (credential broker lane keycape-client-secret-generate)",
|
|
"catalog activation (ops-warden)",
|
|
"client registration (net-kingdom, attended)"
|
|
],
|
|
"security_case": {
|
|
"acceptance_record": "key-cape docs/forgejo-oidc-client-request.yaml (status accepted-2026-10-08, KEY-WP-0038-T01); type acknowledged via informed-decision memo nk-wp-0048-t05-oidc-browser-relying-party-r4, hub decision e418263e",
|
|
"accepted_at": "2026-10-08",
|
|
"accepted_by": [
|
|
"owner",
|
|
"founder"
|
|
],
|
|
"case": "forgejo-netkingdom-oidc",
|
|
"render_digest": "sha256:af1f4f81ef313f5e086e6e3de17197d9112dd40f00b4c20b52b5ca73c7a6d18a",
|
|
"type": "oidc-browser-relying-party@1.1"
|
|
}
|
|
}
|