From 3e6f2807cf05049a9901cf85a24ba6edbe46d61e Mon Sep 17 00:00:00 2001 From: codex Date: Tue, 20 Oct 2026 23:59:04 +0200 Subject: [PATCH] SCOPE: record RPF-WP-0062 supervised agent observer access and OpenBao agt role fixes Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 605711@bnt-lap001 Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61 --- SCOPE.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/SCOPE.md b/SCOPE.md index 4e4e47e..40e1f25 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -106,6 +106,13 @@ description: S3 custody, policy and approved runtime credential delivery; packag keywords: [openbao, secrets, vault-compatible, secret-management, dynamic-credentials, audit, kubernetes-auth] ``` +```capability +type: security +title: Supervised agent observer access +description: custodian-agents namespace and ServiceAccount with ClusterRole custodian-supervised-observer (curated read; no secrets, configmaps, logs, exec or writes) for founder-issued short-lived agent tokens, plus the OpenBao agt SSH role limited to permit-pty. Writes are routed through gated-executor approvals. +keywords: [rbac, serviceaccount, supervised-agents, read-only, openbao, ssh-role] +``` + ## Getting oriented Read [AGENTS.md](AGENTS.md), [INTENT.md](INTENT.md), then @@ -156,6 +163,19 @@ WP-0029 retains secondary credential invalidation/recovery; its completion must not be presented as full primary-backup assurance. +## Supervised agent access — 2026-10-20 + +RPF-WP-0062 adds the `custodian-agents` namespace, the `custodian-agent` +ServiceAccount and ClusterRole `custodian-supervised-observer`: curated read +only, with no secrets, configmaps, logs, exec or writes. It is synced and +pinned at `567d2c6`; the founder issues 24-hour tokens for it under +CUST-WP-0073. The OpenBao `agt` SSH role now allows only the `permit-pty` +extension (`e415da9`). `scripts/openbao-apply-ssh-engine.sh` previously never +wrote roles, because it passed `bao` twice and exited 127; it is fixed at `4b2b72a`. +Privileged actions for these agents go through gated-executor and not through +this role. + + ## Repository maintenance reuse The tracked `.generated-work-records.json` adopts the Custodian staged-source