coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record native sender acceptance and retained audit readback gate
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-11 14:23:07 +02:00
parent 9654f9e8cf
commit 005c68eb4c
6 changed files with 1153 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/credential-lane-designs/factory-audit-senders-review.md
View file

@ -62,8 +62,9 @@ custody; registry JSON matched before Audit Core reloaded. The temporary
namespace is absent and Warden exited 0 with session revocation confirmed.
The receiver is operational/durable and 1/1 Ready on c82e0442de0f.
Both CCRs remain **applied**, pending actual producer accepted/duplicate and
receiver scope/read-refusal plus audit bearer-revocation acceptance. The
Both CCRs remain **applied**. Native producer accepted/duplicate-after-restart
and receiver scope/read-refusal checks passed at 10:42 UTC. Independent archive
readback and audit bearer-revocation acceptance remain pending. The
completed reader-session revocation does not expire those audit bearers.
See the [seed](../evidence/2026-09-11-factory-audit-sender-seed.json) and
[native delivery](../evidence/2026-09-11-factory-audit-delivery-live.json) receipts.

22
docs/credential-lane-designs/factory-native-acceptance.md
View file

@ -88,3 +88,25 @@ volume inheritance. Informed Decision initializes its store through its actual
container helper; unsafe existing private directories remain refused. Failed
Jobs retain only allowlisted assertion codes and HTTP status numbers before
UID-scoped cleanup; arbitrary container output is discarded.
## Retained successful native run
The 2026-09-11 10:42 UTC sender run passed and all temporary resources are gone.
The exact packet and successful sender receipt are retained under `docs/evidence/`
so independent readback can resume without a producer rerun:
```sh
python3 scripts/openbao-attended-exec.py -- \
python3 /home/worsch/railiance-platform/scripts/native_factory_acceptance.py readback \
--packet /home/worsch/railiance-platform/docs/evidence/2026-09-11-factory-native-producer-packet.json \
--packet-sha256 5e8a20e29fb309924005a061939c94d8a40815126c44654b6daeb8adf18424c7 \
--producer-receipt /home/worsch/railiance-platform/docs/evidence/2026-09-11-factory-native-producer-jobs.json \
--kubeconfig /home/worsch/.kube/config-hosteurope \
--server https://127.0.0.1:16444 \
--receipt /tmp/factory-native-independent-readback.json \
--confirm 'VERIFY CCR-2026-0021 CCR-2026-0022 PRODUCERS'
```
Use a fresh receipt path if the named path already exists. Both prior attended
verification attempts failed before command handoff, with remote session
revocation unconfirmed. They did not read the operator registry or run readback.