coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: preserve unrelated live boundary rules during signing lane apply
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102
This commit is contained in:
codex 2026-09-05 16:43:47 +02:00
parent 80793afe4f
commit 238d261536
4 changed files with 24 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
openbao/policies/inputs/state-hub-preflight-boundary-baseline.sha256
View file

@ -1 +1 @@
8cbbe133516466bd70ee412fb2214fbe3d1fe5d455f513186eb149743a30636d
cec0e5f0f3a6bd2a8ed077805c0c2534bd03bdfa7cb45ac1f4ac90eee354ac0d

7
openbao/state-hub-preflight/agent-deny-overlay.hcl Normal file
View file

@ -0,0 +1,7 @@
# RPF-WP-0035-T04: preflight signing key is API-only.
path "platform/data/workloads/state-hub/repository-rename-preflight" {
capabilities = ["deny"]
}
path "platform/metadata/workloads/state-hub/repository-rename-preflight" {
capabilities = ["deny"]
}