coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Approve sitting-requester CCRs and add the attended provisioner.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
CCR-2026-0026/0027 are approved for the create-only informed-decision
client. Live KeyCape registration and CAS=0 custody stay in the
contained helper; no sitting POST.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
This commit is contained in:
codex 2026-09-15 20:08:02 +02:00
parent 6dfb751e60
commit 4b34c239bc
7 changed files with 162 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

7
credential-change-requests/CCR-2026-0026-informed-decision-sitting-requester-verifier.yaml
View file

@ -3,7 +3,7 @@ kind: credential-change-request
schema_version: 1
request_type: workload-kv-read
title: Informed Decision sitting-requester KeyCape verifier custody
status: proposed
status: approved
created: '2026-09-15'
updated: '2026-09-15'
requester:
@ -23,6 +23,11 @@ review:
comment: Operator selected allocation of the sitting-requester CCR pair. Source
only. No OpenBao apply, no secret seed, no KeyCape registration, and no sitting
POST from this allocation.
- at: '2026-09-15'
reviewer: User (platform-operator; key-cape-owner)
decision: approved
comment: User instructed register sitting-requester. Apply remains the attended
helper with CAS=0 custody, exact create-only client, and no sitting POST.
target:
domain: financials
tenant: platform

7
credential-change-requests/CCR-2026-0027-informed-decision-sitting-requester-reader.yaml
View file

@ -3,7 +3,7 @@ kind: credential-change-request
schema_version: 1
request_type: workload-kv-read
title: Informed Decision sitting-requester attended operator reader
status: proposed
status: approved
created: '2026-09-15'
updated: '2026-09-15'
requester:
@ -22,6 +22,11 @@ review:
decision: allocated
comment: Operator selected allocation of the sitting-requester CCR pair. Source
only. No OpenBao apply, no secret seed, and no sitting POST from this allocation.
- at: '2026-09-15'
reviewer: User (platform-operator; key-cape-owner)
decision: approved
comment: User instructed register sitting-requester. Apply remains the attended
helper with CAS=0 custody, exact create-only client, and no sitting POST.
target:
domain: financials
tenant: platform