coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CCR-2026-0053: verified (setup, ESO delivery and verify passed; net-kingdom 7f37e25)
All checks were successful
CCR intake gate / gate (push) Successful in 10s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 896183@bnt-lap001
Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2
This commit is contained in:
codex 2026-10-31 10:11:39 +01:00
parent bcfbe29b24
commit 5dd1d6875b
1 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
credential-change-requests/CCR-2026-0053-net-kingdom-authelia-bind.yaml
View file

@ -3,7 +3,7 @@ kind: credential-change-request
schema_version: 1 schema_version: 1
request_type: workload-kv-read request_type: workload-kv-read
title: NetKingdom Authelia directory bind (svc-authelia) delivery title: NetKingdom Authelia directory bind (svc-authelia) delivery
status: approved status: verified
created: '2026-10-31' created: '2026-10-31'
updated: '2026-10-31' updated: '2026-10-31'
requester: requester:
@ -127,4 +127,15 @@ verification:
from the decrypted custody copy without display. from the decrypted custody copy without display.
- Policy, role and KV in place and equal to live before the ExternalSecret is applied. - Policy, role and KV in place and equal to live before the ExternalSecret is applied.
- Positive and negative results recorded in value-free receipts. - Positive and negative results recorded in value-free receipts.
evidence: [] evidence:
- at: '2026-10-31T09:11:39+00:00'
actor: founder (attended), claude-code guiding
kind: verifier_custody_and_rollout
result: passed
details:
- '2026-10-31: bind-lane.py setup (live authelia-config binds svc-authelia, custody
equal to live, coding agents fenced, KV v1 CAS=0, policy+role) and verify (exact
policy/TTL, wrong SA and audience denied, metadata/sibling/token-create denied,
KV equals delivered ldap_password, reader revoked) passed; ExternalSecret Ready
on first apply; Authelia restarted and admin signed in with OTP. Evidence: net-kingdom
docs/evidence/2026-10-31-nk56-svc-authelia-bind/ (7f37e25).'