Close issuer pin prerequisite and prepare named custody review decisions
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-09 00:40:23 +02:00
parent e06d7fc390
commit 52b24eab9a
6 changed files with 166 additions and 5 deletions

View file

@ -5,7 +5,7 @@ request_type: workload-kv-read
title: KeyCape verifier custody for the secrets-engine-approval confidential client
status: proposed
created: '2026-09-08'
updated: '2026-09-08'
updated: '2026-09-09'
requester:
agent: claude
reason: >-
@ -165,6 +165,8 @@ lifecycle:
Disable the registration at KeyCape first (that is what stops token issuance),
then rotate the KV version and confirm no other namespace consumed the store.
state_hub:
decision_id: b533a271-b704-4c5c-98a2-9a5951aadfb6
decision_api_url: http://127.0.0.1:8000/decisions/b533a271-b704-4c5c-98a2-9a5951aadfb6
workplan_id: RPF-WP-0035
task_id: RPF-WP-0035-T05
related_message: 278a3ebe-b529-49f6-bd1a-e3ebcf318260

View file

@ -5,7 +5,7 @@ request_type: workload-kv-read
title: KeyCape verifier custody for the approval-engine-operator confidential client
status: proposed
created: '2026-09-08'
updated: '2026-09-08'
updated: '2026-09-09'
requester:
agent: claude
reason: >-
@ -142,6 +142,8 @@ lifecycle:
Disable the registration at KeyCape, rotate the KV version, and refer emitted
approval actions to approval-engine for audit review.
state_hub:
decision_id: efa90517-0cae-4eb6-a68d-5b0489c84d65
decision_api_url: http://127.0.0.1:8000/decisions/efa90517-0cae-4eb6-a68d-5b0489c84d65
workplan_id: RPF-WP-0035
task_id: RPF-WP-0035-T05
related_message: 278a3ebe-b529-49f6-bd1a-e3ebcf318260