coulomb/ops-warden
5
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
ops-warden/src/warden
History
tegwick 7d4381e887
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 
check_fetch_policy now posts only to policy.fetch_flex_auth_url (access-engine
pin flex-auth-ops-warden-fetch, workstation 127.0.0.1:19091). Signing keeps
policy.flex_auth_url. Unset or unreachable fetch evaluator fails closed with a
message naming it; no fallback to the signing pin or to allow. warden access
advisory output names the fetch evaluator. Recorded under WARDEN-WP-0039-T03.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 3775@bnt-lap001
Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3
2026-10-03 09:18:54 +02:00
..
routing fix: route OpenBao recovery ceremonies safely 2026-08-22 20:54:45 +02:00
scripts Initial Commit 2026-03-28 00:45:43 +00:00
__init__.py Initial Commit 2026-03-28 00:45:43 +00:00
access.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
audit.py Attach optional Railiance recording-time evidence 2026-09-15 22:18:06 +02:00
ca.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
caller_identity.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
cli.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
clock_attribution.py Attach optional Railiance recording-time evidence 2026-09-15 22:18:06 +02:00
config.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
desk.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
doubles.py feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles 2026-06-27 19:30:30 +02:00
inventory.py Initial Commit 2026-03-28 00:45:43 +00:00
mask.py WARDEN-WP-0026 T03: masking display filter (defense-in-depth) 2026-07-16 14:54:55 +02:00
memory.py Add Makefile targets to install and verify phase-memory with warden. 2026-07-03 00:54:21 +02:00
models.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
plan.py feat: refuse to answer a write with a read (WARDEN-WP-0038) 2026-09-10 08:02:10 +02:00
policy.py WARDEN: separate fetch evaluator URL for secret-read checks (CUST-WP-0075) 2026-10-03 09:18:54 +02:00
posture.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
proxy.py Fix attended login result auditing and reconcile blocked workplans 2026-09-28 09:44:49 +02:00
scorecard.py WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
taint.py WARDEN-WP-0026 finish Strand A (T04/T05/T07) 2026-07-16 23:26:26 +02:00
vault.py Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
vault_hints.py Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout 2026-07-01 23:32:38 +02:00
worker.py fix: contain attended OpenBao login output 2026-08-23 01:31:05 +02:00