verify-reuse-surface-hub-writer.py logs in with skip_browser=true and shows the address (or opens a fresh temporary browser profile), so the default Authelia session is never reused. The receipt records uid, openbao_error and assurance per net-kingdom/docs/sign-in-diagnosis.md, with tokens, codes and emails redacted. Capabilities come from sys/capabilities-self on the lane token; no operator or root token is read. Needs railiance-platform CCR-2026-0045 applied to run live. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52 |
||
|---|---|---|
| .. | ||
| evidence | ||
| reviews | ||
| construction-plan-format.md | ||
| credential-owner-proposals-2026-10-09.md | ||
| directory-group-binding.md | ||
| executive-summary-format.md | ||
| forgejo-consumer-eso-builder-review.md | ||
| forgejo-consumer-generated-ccr-refinement.json | ||
| forgejo-structural-materialization-source-v1.md | ||
| keycape-client-custody-attended-verification.md | ||
| kubernetes-plane.md | ||
| reuse-surface-hub-writer-attended.md | ||
| review-optimize-checklist.md | ||