Verify scoped approval client delivery through attended reader session
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
codex 2026-09-14 01:46:45 +02:00
parent bbff2bfb93
commit 525664efa3
6 changed files with 301 additions and 0 deletions

View file

@ -0,0 +1,34 @@
{
"observed_at": "2026-09-13T23:44:04.757314+00:00",
"ccr_id": "CCR-2026-0019",
"secret_values_read": false,
"status": "passed",
"checks": {
"platform/data/workloads/secrets-engine/approval-client": [
"read"
],
"platform/metadata/workloads/secrets-engine/approval-client": [
"read"
],
"platform/data/workloads/approval-engine/operator-client": [
"deny"
],
"platform/metadata/workloads/secrets-engine": [
"deny"
],
"platform/metadata/workloads": [
"deny"
],
"platform/data/workloads/activity-core/llm-connect/llm-connect-provider-secrets": [
"deny"
],
"sys/policies/acl/workload-kv-read-secrets-engine-approval-client": [
"deny"
],
"auth/netkingdom/role/secrets-engine-approval-client-workload-kv-read": [
"deny"
]
},
"identity_policy_scope_verified": true,
"warden_session": "exited_0_after_self_revocation_and_helper_cleanup"
}