coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
Operations credential management
11 commits 2 branches 2 tags 3.2 MiB
Find a file
tegwick 9857ed1424 feat(warden): implement WARDEN-WP-0002 correctness and operational completeness 
T1 — TTL max enforcement:
  - models.py: MAX_TTL_HOURS policy constant
  - ca.py: _enforce_ttl() raises CAError when spec.ttl_hours > type max
  - Called at top of LocalCA.sign() and VaultCA.sign()
  - scorecard.py: check_ttl_policy() — flags certs with issued TTL > type max
  - run_scorecard() now returns 5 checks

T2 — Stale cert cleanup:
  - ca.py: _evict_cert() removes existing cert before writing new one (no accumulation)
  - cli.py: warden cleanup [actor] [--dry-run] command
  - check_no_stale_certs detail suggests 'warden cleanup' when stale certs found

T3 — Outgoing signatures log:
  - ca.py: _append_signature_log() writes JSONL to state_dir/signatures.log
  - Called after every successful sign() in LocalCA and VaultCA
  - cli.py: warden log [actor] [--last N] [--json] command
  - parse_cert_metadata now also returns valid_from (needed for TTL policy check)

61 tests passing, ruff clean.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-15 15:53:10 +02:00
src/warden feat(warden): implement WARDEN-WP-0002 correctness and operational completeness 2026-05-15 15:53:10 +02:00
tests feat(warden): implement WARDEN-WP-0002 correctness and operational completeness 2026-05-15 15:53:10 +02:00
wiki Initial Commit 2026-03-28 00:45:43 +00:00
workplans feat(warden): implement WARDEN-WP-0002 correctness and operational completeness 2026-05-15 15:53:10 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-05-15 15:32:41 +02:00
.gitignore Initial commit 2026-03-28 00:35:11 +00:00
.SCOPE.md.swp feat(warden): implement WARDEN-WP-0002 correctness and operational completeness 2026-05-15 15:53:10 +02:00
CLAUDE.md Initial Commit 2026-03-28 00:45:43 +00:00
LICENSE Initial commit 2026-03-28 00:35:11 +00:00
pyproject.toml Initial Commit 2026-03-28 00:45:43 +00:00
README.md Initial commit 2026-03-28 00:35:11 +00:00
SCOPE.md Initial Commit 2026-03-28 00:45:43 +00:00
uv.lock feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing 2026-05-15 13:27:49 +02:00

README.md

repo-seed

A git repository template to bootstrap coulomb projects from.