coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: accept native factory audit sender delivery
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Has been cancelled
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-11 10:31:15 +02:00
parent 47223007ba
commit 1ec5b587db
5 changed files with 179 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

29
workplans/RPF-WP-0035-credential-lane-implementation.md
View file

@ -397,11 +397,11 @@ into this client-identity grant.
```task
id: RPF-WP-0035-T08
status: wait
status: progress
priority: high
assignee: railiance-platform
needs_human: true
intervention_note: "Custody succeeded; fresh attended login for delivery failed before handoff. Need browser/MFA feedback and delivery login; do not reseed or reapprove CCR21/22."
needs_human: false
intervention_note: null
state_hub_task_id: "0ef52c26-2669-5cd1-8149-b1f6fcdda6cb"
```
@ -525,3 +525,26 @@ for this delivery identity act. Neither CCR review nor first provision reopens.
Use the reviewed delivery command with a new receipt after login feedback.
Actual producer ingestion/duplicate/refusal and bearer revocation acceptance
remain open under AUDIT-WP-0009-T09/T11.
### Native delivery accepted — 2026-09-11 08:27 UTC
The user returned and requested another login attempt. It succeeded and the
reviewed delivery command completed in 28 seconds. Both native ESO readers
passed exact-path access and explicit sibling/registry/metadata/listing denials,
wrong-SA/namespace refusal and the coding-agent deny check. Each 900-second
reader session was revoked and lookup refusal verified. Both intended
ExternalSecrets are Ready; exact producer value and ESO ownership match. The
disallowed namespace produced an explicit store restriction and no Secret;
the uniquely owned namespace is now absent.
Registry version 8 matches the delivered receiver JSON. Audit Core reloaded
and remains 1/1 Ready on c82e0442de0f; /readyz reports operational/durable with
tamper_evidence=false, as bounded by AUDIT-WP-0009-T12. Warden exited 0 and
confirmed self-revocation for this successful session. Earlier failed login
receipts remain historical and are not retroactively attested.
The login wait is cleared. T08 remains progress and CCR21/22 remain applied
for native producer ingestion/duplicate/scope/read-refusal and bearer
revocation acceptance under AUDIT T09/T11. No credentials were reseeded or
rotated. No producer was deployed and no factory attempt or paid call ran.
[Native delivery receipt](../docs/evidence/2026-09-11-factory-audit-delivery-live.json).