coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

docs: record live zone config migration
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0291a-1e87-7151-9934-fcbfe3f65eb1
This commit is contained in:
tegwick 2026-08-22 15:50:42 +02:00
parent bebcdf929c
commit e24d2d5bd0
3 changed files with 11 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/evidence/security-zone-admission-2026-08-22.md
View file

@ -24,7 +24,10 @@ This record supports the `z1-operational` membership declared in
- Data handling: `ADR-0002` makes ops-warden a transparent conduit and
`ADR-0004`/`ADR-0007` prevent raw agent reads and fail safe on ungraded lanes.
- Policy path: `history/2026-08-19-flex-auth-caller-identity-evidence.md` proves
the authenticated caller path and anonymous rejection.
the authenticated caller path and anonymous rejection. At adoption, the
migrated real operator config reran the check successfully through the
existing tunnel: HTTP 200, effect `allow`, decision
`decision:f3f7c88f9585582a`.
## Why not z2