ops-warden/scripts
tegwick c23918d6ec
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
Apply GH-DEC-2026-020: checker prints version and scope, A12 r2 by content.
The layer conformance checker now prints VALIDATED_AGAINST and SCOPE on every
run, including the PASS line (kings-guard pattern), and enforces A12 r2 over
every key and value of INTENT.md frontmatter and layer.yaml: a versioned
standard: path and a companion_version are caught, schema_version and comments
are not reached, pep-stance.yaml is outside the run. Tests guard both returns.
The playbook carries the adopter change set and confirms the section 5
citation is canonical. WARDEN-WP-0034's open 4220413a note is closed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
2026-09-21 09:38:17 +02:00
..
build_flex_auth_registry.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
check_agent_read_boundary.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
check_flex_auth_manifest_coverage.py feat: assert flex-auth ceiling keys are declared, not assumed 2026-09-09 14:40:05 +02:00
check_layer_conformance.py Apply GH-DEC-2026-020: checker prints version and scope, A12 r2 by content. 2026-09-21 09:38:17 +02:00
check_policy_caller_identity.py docs: record live zone config migration 2026-08-22 15:50:42 +02:00
check_principals_drift.py feat: close WP-0009/WP-0013 production integration stewardship strand 2026-06-24 12:44:32 +02:00
check_secret_posture_conformance.py feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles 2026-06-27 19:30:30 +02:00
check_tunnel_cert_readiness.py feat(WARDEN-WP-0016): ops-bridge cert_command readiness gate + handoff 2026-06-27 19:50:28 +02:00
emit_high_risk_paths.py feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
install-worker-timer.sh feat(WARDEN-WP-0021): T1+T2 — scheduled worker tick enabled (systemd --user timer) 2026-06-30 15:19:23 +02:00
policy_gate_production_smoke.sh feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
report_coverage.py docs: mark the unknown cell, measure the coverage we asked to publish 2026-09-10 08:02:10 +02:00
report_workload_join.py chore: refresh generated security inputs 2026-08-22 15:37:33 +02:00
worker-tick.sh feat(WARDEN-WP-0021): T3-T5 — visibility, approve loop, runbook (scheduled worker complete) 2026-06-30 15:24:10 +02:00