ops-warden/workplans/WARDEN-WP-0035-policy-nexus-forgejo-source-read-route.md
tegwick 4fee839b11 feat: route Policy Nexus source credential
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
2026-09-01 00:46:28 +02:00

898 B

id type title domain repo status owner topic_slug created updated
WARDEN-WP-0035 workplan Register the Policy Nexus Forgejo source-read route infotech ops-warden active codex policy-nexus-forgejo-source-read 2026-09-01 2026-09-01

Register the exact high-risk lane

id: WARDEN-WP-0035-T01
status: done
priority: high

Add the exact OpenBao path, field, OIDC role, owner pointer, and rotation boundary from railiance-platform CCR-2026-0014. The entry must be concrete and resolvable while remaining subject to Warden's high-risk agent read boundary.

Verify routing and governed use

id: WARDEN-WP-0035-T02
status: progress
priority: high

Pass catalog, route-selection, proxy, and policy tests; reinstall the CLI; prove the installed route resolves and can hand the value only to a sanctioned child transport without printing or persisting it.