ops-mason/tests
tegwick fd2c5a5904 Name a dedicated reuse-surface hub-writer caller.
CCR-2026-0005 does not name a principal, and the platform-admin entity must not receive the workload policy. Add the draft role, verifier, and plan, drop the retired operators/nextcloud description, and record that tegwick's MFA factor is enrolled.

Assistant: grok
Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6
2026-10-14 18:19:14 +02:00
..
test_bao_session.py MASON-WP-0009-T04 done: live capability verification of the KeyCape secrets-engine-openbao lane 2026-10-07 13:47:14 +02:00
test_case_build.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_case_plan.py Prepare typed structural evidence without credential success circularity 2026-10-11 02:42:57 +02:00
test_case_structure.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_custody_describe.py MASON-WP-0004-T02: 27/29 descriptions applied; clip to OpenBao's byte limit 2026-10-09 12:09:52 +02:00
test_custody_inventory.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
test_executor.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
test_keycape_client_custody_verifier.py Prepare independently reviewed native custody capability verification 2026-10-11 14:16:58 +02:00
test_kubernetes_plane.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
test_oidc_matrix.py MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane 2026-10-08 23:41:34 +02:00
test_plan.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
test_plan_survey.py Replace ops-mason-build with read-only ops-mason-survey grant (MASON-IN-0004) 2026-10-07 10:44:24 +02:00
test_reuse_surface_hub_writer.py Name a dedicated reuse-surface hub-writer caller. 2026-10-14 18:19:14 +02:00