coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CCR-2026-0007: activate binky IMAP lane after founder provision
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Mark front door ready/resolvable; record capabilities-safe verify evidence.
This commit is contained in:
tegwick 2026-07-17 00:33:20 +02:00
parent 7d7260ffa3
commit 183647c33a
2 changed files with 26 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/workload-kv-access-lanes.md
View file

@ -385,7 +385,7 @@ CCR applier allowlist accepts `mount: tenants` and paths under `tenants/`
| Read policy | `workload-kv-read-binky-company-email-imap` |
| Policy file | `openbao/policies/workload-kv-read-binky-company-email-imap.hcl` |
| OIDC role | `binky-company-email-imap-workload-kv-read` |
| Front-door readiness | draft / applied-pending-provision (values: founder Red) |
| Front-door readiness | active, resolvable=true (provisioned 2026-07-17) |
| Risk | high |
```bash