WARDEN-WP-0026 T02: safe access transports (no secret values on stdout)
- proxy.py: proxy_fetch_to_file (mode-0600 file), build_wrapped_fetch +
proxy_fetch_wrapped (single-use OpenBao response-wrapping token), _capture_value
helper, is_bao_kv_fetch.
- warden access: --out FILE, --wrap [--wrap-ttl], --unsafe-stdout. Raw --fetch to a
non-TTY stdout is refused (exit 6) — captured/piped output is the disclosure risk;
sanctioned transports are --out / --exec / --wrap.
- canon: anti-pattern (secret value onto captured stdout) + transport table in
.claude/rules/credential-routing.md; OperatorAccessAssist.md examples + G2 updated.
- tests: file/wrap/build + stdout-guard in tests/test_proxy.py. 293 pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
tegwick
359ca1bd0e