Record founder approval 73fff3d3 of the callback amendments

credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml

@@ -20,6 +20,12 @@ review:
     decision: approved
     comment: "Approved in chat \u2014 establish backup lane credentials in OpenBao\
       \ for workstation forgejo-backup and railiance-backup tooling (Option A Nextcloud)."
+  - at: '2026-10-07'
+    reviewer: platform-operator (founder Bernd Worsch)
+    decision: approved
+    comment: Founder decision 73fff3d3-49fd-4535-9040-b2754a3e2024 approves removing the retired bao.coulomb.social
+      OIDC callback from allowed_redirect_uris and one delegated re-apply. Nothing else
+      changes.
 target:
   domain: financials
   tenant: railiance

credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml

@@ -55,6 +55,12 @@ review:
       not a fabricated separate owner vote or approval-engine human decision. Live
       delivery verification remains pending and the credential front door remains
       non-resolvable.
+  - at: '2026-10-07'
+    reviewer: platform-operator, secrets-engine-owner (founder Bernd Worsch)
+    decision: approved
+    comment: Founder decision 73fff3d3-49fd-4535-9040-b2754a3e2024 approves removing the retired bao.coulomb.social
+      OIDC callback from allowed_redirect_uris and one delegated re-apply. Nothing else
+      changes.
 target:
   domain: financials
   tenant: platform

credential-change-requests/CCR-2026-0034.yaml

@@ -50,6 +50,12 @@ review:
       approves CCR-2026-0034 as net-kingdom-owner. Covers A2 for this operator OIDC
       reader (groups=net-kingdom-admins and /assurance/level=aal2 confirmed). Applying
       the role and policy needs its own go.
+  - at: '2026-10-07'
+    reviewer: platform-owner, key-cape-owner, net-kingdom-owner (founder Bernd Worsch)
+    decision: approved
+    comment: Founder decision 73fff3d3-49fd-4535-9040-b2754a3e2024 approves removing the retired bao.coulomb.social
+      OIDC callback from allowed_redirect_uris and one delegated re-apply. Nothing else
+      changes.
 target:
   domain: infotech
   tenant: platform