coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Reject placeholder OpenBao drill evidence

Browse source
This commit is contained in:
tegwick 2026-06-02 02:02:09 +02:00
parent 606a5f3e1e
commit 18c1b86498
4 changed files with 37 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/RAIL-PL-WP-0002-openbao-platform-secrets-service.md
View file

@ -309,6 +309,13 @@ duration, and `no_secret_material_recorded`. The validator does not run the
disruptive drill; it only checks the evidence captured after the attended
operation.
**2026-06-02:** Hardened both evidence validators so unchanged templates or
obvious placeholder values cannot accidentally satisfy NetKingdom T02. Restore
evidence now rejects placeholder digests and template wording, while emergency
drill evidence rejects template wording. Operators must copy the examples into
local evidence files and replace placeholders with real non-secret drill
evidence before validation can pass.
### T07 - Cross-Repo Transition Tasks
```task