coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(registrar): assign State Hub identifiers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
repo-manager 2026-08-25 17:47:00 +02:00
parent 89ad78601a
commit 221668a487
5 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md
View file

@ -13,6 +13,7 @@ related:
- KEY-WP-0011
origin: routed
origin_ref: "State Hub messages e88abb61-e393-4a82-817c-5ac378a2ee3d, acf98be3-ff6b-4270-bd21-0193bebd806b, aeb216b5-9f1b-404b-a483-fb08a00a49b1, and 71b1008a-7fd7-4500-85c6-e8893a6d80d4"
state_hub_workstream_id: "038bc3c0-4492-5b91-95eb-ae515ca205df"
---
# RAILIANCE-WP-0029 — KeyCape live Secret exposure recovery
@ -29,6 +30,7 @@ payload and never treat repository access as live mutation authority.
id: RAILIANCE-WP-0029-T01
status: done
priority: high
state_hub_task_id: "62976143-33f1-5544-b7bb-174aed47e09b"
```
Accepted the KeyCape/NetKingdom incident reports, stopped payload inspection,
@ -42,6 +44,7 @@ the public JWKS digest/kid. The legacy value-printing rotation helper is banned.
id: RAILIANCE-WP-0029-T02
status: done
priority: high
state_hub_task_id: "87bedc80-0060-518c-a5f4-3112d3d8d867"
```
`docs/keycape-live-secret-exposure-recovery.md` defines owners, required
@ -55,6 +58,7 @@ predecessor revocation, and sanitized evidence.
id: RAILIANCE-WP-0029-T03
status: progress
priority: high
state_hub_task_id: "e019c166-3abb-5edf-81a7-d65f0ea91c93"
```
KeyCape supplied source revision `93704fd2424503007c20b458b62a7f7d994bb288`,
@ -94,6 +98,7 @@ lane remains unresolved and no credential fetch or retry is authorized.
id: RAILIANCE-WP-0029-T04
status: wait
priority: high
state_hub_task_id: "dbf31617-ff0b-5995-b273-cc0a854221a8"
```
Requires a fresh exact human GO, an at-most-30-minute window, named driver and
@ -106,6 +111,7 @@ and all T03 acknowledgements. No value may enter captured output.
id: RAILIANCE-WP-0029-T05
status: wait
priority: high
state_hub_task_id: "c4c23dfb-8762-5017-8d50-5d9c35086736"
```
Verify replacement operation and predecessor rejection for the signing key,
@ -119,6 +125,7 @@ status, timestamps, and cleanup receipts.
id: RAILIANCE-WP-0029-T06
status: progress
priority: high
state_hub_task_id: "69326850-cd3a-556e-a9cc-9d463802545b"
```
The platform/OpenBao owner must publish a non-secret receipt for both routing