coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ops-mason/tests
History
tegwick e7a368af0f MASON-IN-0005: restore ops-mason as the OpenBao builder (ops-mason-construct) 
Founder decision 2026-10-18, "build, but never log in": a plan-scoped grant
that writes workload-kv-read-* policies, external-secrets-* and AppRole role
definitions, and create-only placeholder KV under platform/{workloads,suppliers},
and denies role-id, secret-id, token creation and all value reads, so the
MASON-IN-0004 chain stays broken. Adds bao-session.sh build, policy tests,
INTENT/AGENTS alignment and MASON-WP-0015. Not installed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 278674@bnt-lap001
Assistant-Session: 64827407-e196-4ce3-b70c-76e7b537493f
2026-10-18 11:48:27 +02:00
..
test_attended_login.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00
test_bao_session.py MASON-WP-0009-T04 done: live capability verification of the KeyCape secrets-engine-openbao lane 2026-10-07 13:47:14 +02:00
test_case_build.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_case_plan.py Prepare typed structural evidence without credential success circularity 2026-10-11 02:42:57 +02:00
test_case_structure.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_case_version_source.py fix(cases): expose explicit versioned type roots in Mason CLI 2026-10-16 07:51:41 +02:00
test_construct_policy.py MASON-IN-0005: restore ops-mason as the OpenBao builder (ops-mason-construct) 2026-10-18 11:48:27 +02:00
test_custody_describe.py MASON-WP-0004-T02: 27/29 descriptions applied; clip to OpenBao's byte limit 2026-10-09 12:09:52 +02:00
test_custody_inventory.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
test_executor.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
test_keycape_client_custody_verifier.py Prepare independently reviewed native custody capability verification 2026-10-11 14:16:58 +02:00
test_kubernetes_plane.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
test_oidc_matrix.py MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane 2026-10-08 23:41:34 +02:00
test_plan.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
test_plan_survey.py Replace ops-mason-build with read-only ops-mason-survey grant (MASON-IN-0004) 2026-10-07 10:44:24 +02:00
test_reuse_surface_hub_writer.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00