From 541cd9043f22cfc572ed17f321a59899d75736a7 Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 8 Sep 2026 17:03:58 +0200 Subject: [PATCH] docs(warden): record installed refusal proof and live binding residual Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc --- workplans/WARDEN-WP-0039-explicit-policy-refusal.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/workplans/WARDEN-WP-0039-explicit-policy-refusal.md b/workplans/WARDEN-WP-0039-explicit-policy-refusal.md index fbedd69..8d8aafe 100644 --- a/workplans/WARDEN-WP-0039-explicit-policy-refusal.md +++ b/workplans/WARDEN-WP-0039-explicit-policy-refusal.md @@ -4,7 +4,7 @@ type: workplan title: "Preserve explicit policy caller refusals before credential and CA effects" domain: infotech repo: ops-warden -status: active +status: blocked owner: codex topic_slug: custodian created: "2026-09-08" @@ -36,7 +36,7 @@ both permissive and closed outage profiles and refusal before child execution. ```task id: WARDEN-WP-0039-T02 -status: progress +status: done priority: high assignee: the-custodian ``` @@ -68,3 +68,5 @@ negative evidence. No credential read, secret generation, or policy grant is authorized by this workplan alone. HFACT-WP-0001-T03 consumes this return. Validation: 429 tests passed (4 integration tests deselected by the repository default); Ruff passed for changed Python files. Full tests used the declared phase-memory source and an isolated temporary memory store. The focused policy/proxy suite passed 69 tests. The existing authenticated SSH policy probe still returns HTTP 200/ALLOW, decision:f3f7c88f9585582a; the credential-owner request returns 403. No CA issue or credential read was performed by these probes. + +Installed verification: source guard present after refreshed owner installation (`19bb75c`). `warden access forgejo-admin-api-token --exec --field API_TOKEN -- true` exits 4 with explicit HTTP 403 before credential transport or child execution. The previous fail-open warning is absent. The probe requested no output value; no credential was fetched. T01/T02 are complete; T03 owns the remaining exact policy-binding admission.