coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054)

Browse source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 328925@bnt-lap001
Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
This commit is contained in:
codex 2026-10-24 23:49:27 +02:00
parent bab4f2ca6a
commit 2126457a16
7 changed files with 194 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/test_openbao_platform_admin_callback_prune.py
View file

@ -32,7 +32,7 @@ def test_prunes_only_the_two_retired_callbacks_and_keeps_settings():
assert not set(m.RETIRED) & set(uris)
assert m.KEEP in uris and 'http://localhost:8250/oidc/callback' in uris
assert state['role']['token_policies'] == ['platform-admin', 'operator-custody']
assert state['role']['bound_claims'] == {'groups': ['net-kingdom-admins']}
assert state['role']['bound_claims'] == DECLARED['bound_claims']
def test_idempotent_when_already_pruned():