Verify scoped approval client delivery through attended reader session
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
parent
bbff2bfb93
commit
525664efa3
6 changed files with 301 additions and 0 deletions
34
docs/evidence/2026-09-14-ccr0019-reader-preflight.json
Normal file
34
docs/evidence/2026-09-14-ccr0019-reader-preflight.json
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
{
|
||||
"observed_at": "2026-09-13T23:44:04.757314+00:00",
|
||||
"ccr_id": "CCR-2026-0019",
|
||||
"secret_values_read": false,
|
||||
"status": "passed",
|
||||
"checks": {
|
||||
"platform/data/workloads/secrets-engine/approval-client": [
|
||||
"read"
|
||||
],
|
||||
"platform/metadata/workloads/secrets-engine/approval-client": [
|
||||
"read"
|
||||
],
|
||||
"platform/data/workloads/approval-engine/operator-client": [
|
||||
"deny"
|
||||
],
|
||||
"platform/metadata/workloads/secrets-engine": [
|
||||
"deny"
|
||||
],
|
||||
"platform/metadata/workloads": [
|
||||
"deny"
|
||||
],
|
||||
"platform/data/workloads/activity-core/llm-connect/llm-connect-provider-secrets": [
|
||||
"deny"
|
||||
],
|
||||
"sys/policies/acl/workload-kv-read-secrets-engine-approval-client": [
|
||||
"deny"
|
||||
],
|
||||
"auth/netkingdom/role/secrets-engine-approval-client-workload-kv-read": [
|
||||
"deny"
|
||||
]
|
||||
},
|
||||
"identity_policy_scope_verified": true,
|
||||
"warden_session": "exited_0_after_self_revocation_and_helper_cleanup"
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue