coulomb/ops-warden
5
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
ops-warden/src/warden
History
tegwick 207d29e8d1 feat(case): attended-change lane kind with session_lane; grade apps-consumer-handover high 
LANE-KIND accepts an attended step on a login lane, or on an attended-change
lane whose session_lane resolves to an active, reviewed login lane.
keycape-attended-case-change -> session_lane key-cape-oidc-login (OW-1.3-C1).
consumer-owner-deployment and apps-consumer-handover -> pending-owner-confirmation:
no catalog login lane authenticates a railiance-apps operator session.
apps-consumer-handover risk: high (KERNEL-2, change effect).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 903097@bnt-lap001
Assistant-Session: aa320c8f-c3fa-46e7-8541-0b58e1e45d23
2026-10-17 12:13:49 +02:00
..
routing feat(case): attended-change lane kind with session_lane; grade apps-consumer-handover high 2026-10-17 12:13:49 +02:00
scripts Initial Commit 2026-03-28 00:45:43 +00:00
__init__.py Initial Commit 2026-03-28 00:45:43 +00:00
access.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
audit.py Attach optional Railiance recording-time evidence 2026-09-15 22:18:06 +02:00
ca.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
caller_identity.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
case_inputs.py fix(cases): admit reviewed descriptor pin validator revision 2026-10-16 21:35:04 +02:00
case_plan.py Catalog fluid-telegram-operator (draft) and tenant-engine sender projection; case plan env spec and case-ref 2026-10-09 19:59:49 +02:00
case_receipt_state.py Prepare reviewed durable case execution kernel and accepted layer pins 2026-10-11 02:21:03 +02:00
case_run.py feat(case): KERNEL-2/3 lane resolution and mode-aware admission; CATALOG-1 draft lanes 2026-10-17 12:08:49 +02:00
case_type.py feat(case): attended-change lane kind with session_lane; grade apps-consumer-handover high 2026-10-17 12:13:49 +02:00
cli.py Show the OpenBao identity warden access evaluates 2026-10-14 18:21:02 +02:00
clock_attribution.py Attach optional Railiance recording-time evidence 2026-09-15 22:18:06 +02:00
config.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
desk.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
doubles.py feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles 2026-06-27 19:30:30 +02:00
inventory.py Initial Commit 2026-03-28 00:45:43 +00:00
mask.py WARDEN-WP-0026 T03: masking display filter (defense-in-depth) 2026-07-16 14:54:55 +02:00
memory.py Add Makefile targets to install and verify phase-memory with warden. 2026-07-03 00:54:21 +02:00
models.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
openbao_caller.py Show the OpenBao identity warden access evaluates 2026-10-14 18:21:02 +02:00
plan.py Verify offline scaffolds and preserve Forge qualifier receiving 2026-10-04 02:32:36 +02:00
policy.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
posture.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
proxy.py fix: contain attended login diagnostics and OpenBao recovery 2026-10-15 04:25:05 +02:00
scorecard.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
taint.py WARDEN-WP-0026 finish Strand A (T04/T05/T07) 2026-07-16 23:26:26 +02:00
vault.py Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
vault_hints.py Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
worker.py fix: contain attended OpenBao login output 2026-08-23 01:31:05 +02:00