tegwick
dee677f226
The ops-mason-survey grant confirmed the existing private-reader lane and the MAS delivery metadata. CCR-2026-0046 and founder decision 9833715e are recorded apart from the disclosure consent. The plan stays reviewed, and the draft catalog route is not activated. Assistant: grok Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a
24 lines
974 B
YAML
24 lines
974 B
YAML
# Draft pointer for ops-warden. Not installed. Not activated.
|
|
# MASON-WP-0013-T04. warden_executes is false. Do not copy this file into
|
|
# the ops-warden catalog until ops-warden reviews it.
|
|
id: reuse-surface-forgejo-source-read
|
|
title: Reuse-surface exact seven private repository reader
|
|
status: draft
|
|
owner_repo: railiance-platform
|
|
subsystem: OpenBao KV via existing reuse-surface ESO identity
|
|
warden_executes: false
|
|
risk: high
|
|
need_keywords:
|
|
- reuse-surface
|
|
- forgejo
|
|
- forgejo-source-read
|
|
- private-reader
|
|
path_template: platform/workloads/reuse/reuse-surface/forgejo-source-read
|
|
policy_ref: workload-kv-read-reuse-surface-runtime-eso
|
|
auth_method: Kubernetes auth role reuse-surface-runtime-eso, ServiceAccount reuse/reuse-surface-eso, audience openbao
|
|
canon_ref: CCR-2026-0046
|
|
reviewed: "2026-10-22"
|
|
activation: not-activated
|
|
notes: >
|
|
Proposal only. The field name is FORGEJO_SOURCE_TOKEN. This file stores
|
|
no value. Runtime rotation remains RPF-WP-0058-T05.
|