coulomb/ops-warden
5
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

fix: contain attended login diagnostics and OpenBao recovery
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
This commit is contained in:
tegwick 2026-10-15 04:25:05 +02:00
parent 1baeb0821c
commit d2cd3fa940
5 changed files with 185 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

20
workplans/WARDEN-WP-0036-attended-login-openbao-output.md
View file

@ -8,7 +8,7 @@ status: finished
owner: codex
topic_slug: attended-login-openbao-output
created: "2026-09-01"
updated: "2026-10-14"
updated: "2026-10-15"
state_hub_workstream_id: "d844c96e-152d-53fa-bff6-e072125ef66c"
---
@ -111,3 +111,21 @@ Tightened the same day after an independent re-review (containment gap): stdout
the stderr OIDC prompt must start at the first byte (no leading whitespace;
trailing newlines remain fine). The fail-closed and hand-off tests now run through
the CLI and assert sentinel absence from both `access-audit.log` and `audit.jsonl`.
### 2026-10-15 CUST81 dependency correction (existing T01/T02)
Prepared source correction after the two CUST81 attended platform-admin attempts
failed before child handoff. The strict login-output allowlist remains unchanged.
Synthesized format flags now precede auth data; the recovery-only matcher handles
OpenBao `s.` tokens; failure messages expose only fixed categories, client exit
code and helper/output-shape booleans. No credential bytes or URLs are surfaced.
Do not attribute the observed 121-second failure to the argv order: Bao 2.5.5
scans global format throughout argv. Actual callback/auth failure remains unknown.
Browser profile initialization was verified from metadata only; server revocation
remains unconfirmed and the failed attempts are retained. No login, admin token
read, policy application or provisioning was performed by this correction.
Source verification is distinct from live verification. The already-approved
CUST81 execution scope and its open attended gate remain with CUST-WP-0081-T02.
Owner evidence: `docs/evidence/2026-10-15-cust81-attended-dependency-repair-r1.json`.