docs: accept native factory audit sender delivery
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Has been cancelled

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-11 10:31:15 +02:00
parent 47223007ba
commit 1ec5b587db
5 changed files with 179 additions and 11 deletions

View file

@ -0,0 +1,104 @@
{
"schema": "platform.factory-audit-delivery.v1",
"status": "delivered_and_scope_verified_pending_producer_acceptance",
"started_at": "2026-09-11T08:27:09.975750+00:00",
"credential_values_emitted": false,
"receiver_before": {
"image": "forgejo.coulomb.social/coulomb/audit-core@sha256:c82e0442de0fd181342916ae9cd5d6de41d859e1efda637bd93936c67873afa5",
"deployment_uid": "b85fe3d0-75c9-4e0d-8c34-c6f1df0881bb",
"deployment_resource_version": "59807531",
"pod_uid": "6642c414-a942-4b11-b048-267423e12da8",
"capabilities": {
"load_bearing": true,
"redact": true,
"write_only": true,
"source_exact": true,
"tenant_exact": true
},
"synthetic_probe_only": true,
"credential_reads": 0
},
"lanes": [
{
"ccr": "CCR-2026-0021",
"name": "approval-engine",
"kv": "platform/data/workloads/approval-engine/audit-sender",
"store": "openbao-approval-engine-audit",
"secret": "approval-engine-audit",
"secret_key": "audit-token",
"reader_exact_path": true,
"registry_and_sibling_denied": true,
"metadata_and_listing_denied": true,
"reader_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"external_secret_ready": true,
"projection_matches": true,
"secret_uid": "3e0f42a6-36b0-4094-8aac-9538fcdcb46f",
"secret_resource_version": "59808872",
"wrong_namespace_denied": true,
"store_namespace_denied": true
},
{
"ccr": "CCR-2026-0022",
"name": "informed-decision",
"kv": "platform/data/workloads/informed-decision/audit-sender",
"store": "openbao-informed-decision-audit",
"secret": "informed-decision-audit",
"secret_key": "token",
"reader_exact_path": true,
"registry_and_sibling_denied": true,
"metadata_and_listing_denied": true,
"reader_ttl": 900,
"reader_revocation_verified": true,
"wrong_service_account_denied": true,
"coding_agent_deny_wins": true,
"external_secret_ready": true,
"projection_matches": true,
"secret_uid": "8bb040ec-e1ad-4c46-9f51-488d5db66c0c",
"secret_resource_version": "59808881",
"wrong_namespace_denied": true,
"store_namespace_denied": true
}
],
"phase": "namespace_verification",
"check": "informed-decision:wrong_namespace",
"registry_version": 8,
"receiver_registry_matches": true,
"receiver_secret_resource_version": "59808896",
"receiver_after": {
"image": "forgejo.coulomb.social/coulomb/audit-core@sha256:c82e0442de0fd181342916ae9cd5d6de41d859e1efda637bd93936c67873afa5",
"deployment_uid": "b85fe3d0-75c9-4e0d-8c34-c6f1df0881bb",
"deployment_resource_version": "59808967",
"pod_uid": "4d0ee4e5-5427-43f1-94ca-88e5470c4831",
"capabilities": {
"load_bearing": true,
"redact": true,
"write_only": true,
"source_exact": true,
"tenant_exact": true
},
"synthetic_probe_only": true,
"credential_reads": 0
},
"receiver_reloaded": true,
"temporary_namespace": {
"name": "factory-audit-check-731ba3bdf5",
"uid": "794cbc75-291b-47e8-8df0-c62c27703cc8"
},
"namespace_cleanup_requested": true,
"completed_at": "2026-09-11T08:27:37.299698+00:00",
"namespace_cleanup_verified": true,
"attended_wrapper_exit": 0,
"attended_session_self_revocation": "confirmed_by_successful_wrapper",
"readiness": {
"status": "ok",
"custody_class": "operational",
"durable": true,
"tamper_evidence": false,
"recoverable_days": 30,
"recoverable_source": "resource-control/data/capability/platform-audit-storage.json#provisions[capability=data.backup]",
"recoverable_basis": "measured"
}
}