coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ops-mason/src/ops_mason
History
tegwick 91c4e7b527 MASON-WP-0015-T04: structure-only AppRole build, post-build policy check 
build_approle_kv_lane no longer reads role-id or mints secret-id;
deliver_approle_credentials is the separate founder/applier step. New
policies are read back and compared before the role is written. The
Kubernetes build uses token_policies/token_ttl (legacy policies is denied
by ops-mason-construct).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 278674@bnt-lap001
Assistant-Session: 64827407-e196-4ce3-b70c-76e7b537493f
2026-10-18 12:52:57 +02:00
..
__init__.py Review/optimize checklist, executive-summary format, build executor (T02-T04) 2026-07-27 00:56:34 +02:00
attended_login.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00
audit.py Review/optimize checklist, executive-summary format, build executor (T02-T04) 2026-07-27 00:56:34 +02:00
case_build.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
case_plan.py plan --case: a case's own built objects are not collisions on re-render 2026-10-10 13:17:22 +02:00
case_structure.py Prepare typed structural evidence without credential success circularity 2026-10-11 02:42:57 +02:00
cli.py fix(cases): expose explicit versioned type roots in Mason CLI 2026-10-16 07:51:41 +02:00
executor.py MASON-WP-0015-T04: structure-only AppRole build, post-build policy check 2026-10-18 12:52:57 +02:00
kubernetes_plane.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
plan.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
readiness.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
reuse_surface_hub_writer.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00