From 005c204219cb8fec6e5d6683e83911631331e1b4 Mon Sep 17 00:00:00 2001 From: codex Date: Wed, 7 Oct 2026 15:09:43 +0200 Subject: [PATCH] Record founder approval 73fff3d3 of the callback amendments --- .../CCR-2026-0004-railiance-backup-offsite-lane.yaml | 6 ++++++ .../CCR-2026-0019-secrets-engine-approval-client-read.yaml | 6 ++++++ credential-change-requests/CCR-2026-0034.yaml | 6 ++++++ 3 files changed, 18 insertions(+) diff --git a/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml b/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml index 17c6e77..cdc0a01 100644 --- a/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml +++ b/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml @@ -20,6 +20,12 @@ review: decision: approved comment: "Approved in chat \u2014 establish backup lane credentials in OpenBao\ \ for workstation forgejo-backup and railiance-backup tooling (Option A Nextcloud)." + - at: '2026-10-07' + reviewer: platform-operator (founder Bernd Worsch) + decision: approved + comment: Founder decision 73fff3d3-49fd-4535-9040-b2754a3e2024 approves removing the retired bao.coulomb.social + OIDC callback from allowed_redirect_uris and one delegated re-apply. Nothing else + changes. target: domain: financials tenant: railiance diff --git a/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml b/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml index 51ab81f..42e5e8d 100644 --- a/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml +++ b/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml @@ -55,6 +55,12 @@ review: not a fabricated separate owner vote or approval-engine human decision. Live delivery verification remains pending and the credential front door remains non-resolvable. + - at: '2026-10-07' + reviewer: platform-operator, secrets-engine-owner (founder Bernd Worsch) + decision: approved + comment: Founder decision 73fff3d3-49fd-4535-9040-b2754a3e2024 approves removing the retired bao.coulomb.social + OIDC callback from allowed_redirect_uris and one delegated re-apply. Nothing else + changes. target: domain: financials tenant: platform diff --git a/credential-change-requests/CCR-2026-0034.yaml b/credential-change-requests/CCR-2026-0034.yaml index 30c2d8f..548dc72 100644 --- a/credential-change-requests/CCR-2026-0034.yaml +++ b/credential-change-requests/CCR-2026-0034.yaml @@ -50,6 +50,12 @@ review: approves CCR-2026-0034 as net-kingdom-owner. Covers A2 for this operator OIDC reader (groups=net-kingdom-admins and /assurance/level=aal2 confirmed). Applying the role and policy needs its own go. + - at: '2026-10-07' + reviewer: platform-owner, key-cape-owner, net-kingdom-owner (founder Bernd Worsch) + decision: approved + comment: Founder decision 73fff3d3-49fd-4535-9040-b2754a3e2024 approves removing the retired bao.coulomb.social + OIDC callback from allowed_redirect_uris and one delegated re-apply. Nothing else + changes. target: domain: infotech tenant: platform