From 6bf31b61cf5634d2cfdb309b1922cfe1fecb1e0f Mon Sep 17 00:00:00 2001 From: codex Date: Sat, 3 Oct 2026 12:57:47 +0200 Subject: [PATCH] agent-high-risk-boundary: deny agent reads of the core-hub Forgejo source token (CCR-2026-0031) Matches the policy-nexus entries; ops-warden now lists the path as high-risk (catalog 2f8387c, generated paths f1e25c3). make agent-high-risk-boundary-check: ok. Live apply needs an attended platform-admin session. Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3 --- openbao/policies/agent-high-risk-boundary.hcl | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/openbao/policies/agent-high-risk-boundary.hcl b/openbao/policies/agent-high-risk-boundary.hcl index 0940498..eb3eb85 100644 --- a/openbao/policies/agent-high-risk-boundary.hcl +++ b/openbao/policies/agent-high-risk-boundary.hcl @@ -108,6 +108,14 @@ path "platform/metadata/workloads/policy-nexus/forgejo-source-read" { capabilities = ["deny"] } +# CCR-2026-0031: core-hub private-source read token is ESO-only. +path "platform/data/workloads/core-hub/forgejo-source-read" { + capabilities = ["deny"] +} +path "platform/metadata/workloads/core-hub/forgejo-source-read" { + capabilities = ["deny"] +} + # RPF-WP-0035-T04: preflight signing key is API-only. path "platform/data/workloads/state-hub/repository-rename-preflight" { capabilities = ["deny"]