coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record Policy Nexus OIDC bootstrap hold
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
codex 2026-08-31 23:26:09 +02:00
parent 1b85a3ef3d
commit 1d5f35539d
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
credential-change-requests/CCR-2026-0014-policy-nexus-forgejo-source-read.yaml
View file

@ -127,6 +127,16 @@ verification:
- Approved metadata dry-run passed; two governed platform-admin OIDC attempts
failed closed before command handoff; Warden revoked any possible session; no
OpenBao mutation or secret provisioning occurred.
- at: '2026-08-31T21:26:07+00:00'
actor: codex attended operator
kind: attended_oidc_handoff
result: blocked
details:
- Canonical bootstrap command from railiance-platform commit 1b85a3e failed closed
before child handoff; Warden revoked any possible session. OpenBao is initialized/unsealed
and its public health endpoint returns 200; the KeyCape openbao-admin authorize
path returns 302. No Forgejo identity, PAT, OpenBao secret value, Actions secret,
or workflow run was created.
lifecycle:
deactivate: Remove the repository Actions secret, revoke the Forgejo PAT, disable
the OpenBao access path, and leave scheduled publication failing closed.