coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security: persist coding-agent denial of identity backup credentials
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
This commit is contained in:
codex 2026-10-16 07:48:27 +02:00
parent d79079bb21
commit 4021ca5e79
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
openbao/policies/agent-high-risk-boundary.hcl
View file

@ -153,3 +153,9 @@ path "platform/data/workloads/coulomb/fluid-telegram/hall-of-helix/bot-token" {
path "platform/metadata/workloads/coulomb/fluid-telegram/hall-of-helix/bot-token" { capabilities = ["deny"] }
path "platform/data/workloads/coulomb/fluid-telegram/hall-of-helix/redaction-salt" { capabilities = ["deny"] }
path "platform/metadata/workloads/coulomb/fluid-telegram/hall-of-helix/redaction-salt" { capabilities = ["deny"] }
# NK-WP-0049 / CCR-2026-0048 and0049: owner-only backup publisher/retention.
path "platform/data/workloads/net-kingdom/identity-backup/publisher" { capabilities = ["deny"] }
path "platform/metadata/workloads/net-kingdom/identity-backup/publisher" { capabilities = ["deny"] }
path "platform/data/workloads/net-kingdom/identity-backup/retention" { capabilities = ["deny"] }
path "platform/metadata/workloads/net-kingdom/identity-backup/retention" { capabilities = ["deny"] }