Provision scoped T03 requester custody and native requests
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
codex
parent
525664efa3
commit
703d552ee7
10 changed files with 650 additions and 0 deletions
145
docs/evidence/2026-09-14-t03-native-approval-requests.json
Normal file
145
docs/evidence/2026-09-14-t03-native-approval-requests.json
Normal file
|
|
@ -0,0 +1,145 @@
|
|||
{
|
||||
"observed_at": "2026-09-14T00:33:04.552946+00:00",
|
||||
"status": "created",
|
||||
"phase": "three_unapproved_requests_created",
|
||||
"requests": [
|
||||
{
|
||||
"memo_id": "SECRETS-WP-0010-T03-apply",
|
||||
"action": "apply",
|
||||
"approval": {
|
||||
"binding": {
|
||||
"action": "apply",
|
||||
"actor": "secrets-engine",
|
||||
"digest": "sha256:03cc5b37437f14e86b686ce4054f976556334eff3fa260b03e8014ed3d9217e5",
|
||||
"human_control": true,
|
||||
"pdp_digest": "sha256:933427642c58c54f65dd4781b8e4c8e2f358eb96497ae35870fff4bd593d2b84",
|
||||
"pdp_path": true,
|
||||
"principal": "secrets-engine",
|
||||
"purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
|
||||
"target": {
|
||||
"attributes": {
|
||||
"auth_targets": [
|
||||
"se-prod-openrouter-llm-connect"
|
||||
],
|
||||
"fields": [],
|
||||
"policy_targets": [
|
||||
"se-prod-openrouter-llm-connect"
|
||||
],
|
||||
"stage": "prod"
|
||||
},
|
||||
"id": "catalog:openrouter-llm-connect",
|
||||
"system": "secrets-engine",
|
||||
"type": "secret-catalog-lane"
|
||||
}
|
||||
},
|
||||
"created_at": "2026-09-14T00:33:07+00:00",
|
||||
"entries": [],
|
||||
"id": "09592588-ab15-53e7-89b8-c4e9f29aaacf",
|
||||
"required_count": 1,
|
||||
"status": "requested",
|
||||
"superseded_by": null,
|
||||
"updated_at": "2026-09-14T00:33:07+00:00",
|
||||
"validity": {
|
||||
"expires_at": "2026-09-15T00:33:06.559689+00:00",
|
||||
"not_before": "2026-09-14T00:33:06.559689+00:00"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"memo_id": "SECRETS-WP-0010-T03-verify",
|
||||
"action": "verify",
|
||||
"approval": {
|
||||
"binding": {
|
||||
"action": "verify",
|
||||
"actor": "secrets-engine",
|
||||
"digest": "sha256:72d9267d038c17107c880ffc9009793ce9c70defbddfe2219628854b811a04b2",
|
||||
"human_control": true,
|
||||
"pdp_digest": "sha256:9e36cdbf3890cc5a7e550fd57191f9c0f2a6b2180909aac302aa3b999e7e6b25",
|
||||
"pdp_path": true,
|
||||
"principal": "secrets-engine",
|
||||
"purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
|
||||
"target": {
|
||||
"attributes": {
|
||||
"auth_targets": [
|
||||
"se-prod-openrouter-llm-connect"
|
||||
],
|
||||
"fields": [
|
||||
"OPENROUTER_API_KEY"
|
||||
],
|
||||
"policy_targets": [
|
||||
"se-prod-openrouter-llm-connect"
|
||||
],
|
||||
"stage": "prod"
|
||||
},
|
||||
"id": "catalog:openrouter-llm-connect",
|
||||
"system": "secrets-engine",
|
||||
"type": "secret-catalog-lane"
|
||||
}
|
||||
},
|
||||
"created_at": "2026-09-14T00:33:07+00:00",
|
||||
"entries": [],
|
||||
"id": "9416fa31-fa9e-5603-8289-f35bc9625409",
|
||||
"required_count": 1,
|
||||
"status": "requested",
|
||||
"superseded_by": null,
|
||||
"updated_at": "2026-09-14T00:33:07+00:00",
|
||||
"validity": {
|
||||
"expires_at": "2026-09-15T00:33:06.722887+00:00",
|
||||
"not_before": "2026-09-14T00:33:06.722887+00:00"
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"memo_id": "SECRETS-WP-0010-T03-exec",
|
||||
"action": "exec",
|
||||
"approval": {
|
||||
"binding": {
|
||||
"action": "exec",
|
||||
"actor": "secrets-engine",
|
||||
"digest": "sha256:f2cf0fb53b740900756ccde5587c3578fcff44beef2f1edab17b9a198a4033d8",
|
||||
"human_control": true,
|
||||
"pdp_digest": "sha256:9f17812750fc8962b0fc58fc09df136850c9935a864fafa998a1c030dfb75bd9",
|
||||
"pdp_path": true,
|
||||
"principal": "secrets-engine",
|
||||
"purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
|
||||
"target": {
|
||||
"attributes": {
|
||||
"auth_targets": [
|
||||
"se-prod-openrouter-llm-connect"
|
||||
],
|
||||
"fields": [
|
||||
"OPENROUTER_API_KEY"
|
||||
],
|
||||
"policy_targets": [
|
||||
"se-prod-openrouter-llm-connect"
|
||||
],
|
||||
"stage": "prod"
|
||||
},
|
||||
"id": "catalog:openrouter-llm-connect",
|
||||
"system": "secrets-engine",
|
||||
"type": "secret-catalog-lane"
|
||||
}
|
||||
},
|
||||
"created_at": "2026-09-14T00:33:07+00:00",
|
||||
"entries": [],
|
||||
"id": "da678b61-35be-598e-8d95-a7aefa2fdc73",
|
||||
"required_count": 1,
|
||||
"status": "requested",
|
||||
"superseded_by": null,
|
||||
"updated_at": "2026-09-14T00:33:07+00:00",
|
||||
"validity": {
|
||||
"expires_at": "2026-09-15T00:33:06.955168+00:00",
|
||||
"not_before": "2026-09-14T00:33:06.955168+00:00"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"credential_values_emitted": false,
|
||||
"signature_verified": true,
|
||||
"excess_scopes_refused": true,
|
||||
"wrong_secret_refused": true,
|
||||
"reader_scope_verified": true,
|
||||
"human_entries_created": false,
|
||||
"approvals_consumed": false,
|
||||
"warden_session": "exited_0_after_self_revocation_and_helper_cleanup"
|
||||
}
|
||||
24
docs/evidence/2026-09-14-t03-requester-provision.json
Normal file
24
docs/evidence/2026-09-14-t03-requester-provision.json
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
{
|
||||
"observed_at": "2026-09-14T00:23:24.931083+00:00",
|
||||
"status": "applied",
|
||||
"phase": "keycape_ready",
|
||||
"ccrs": [
|
||||
"CCR-2026-0024",
|
||||
"CCR-2026-0025"
|
||||
],
|
||||
"credential_values_emitted": false,
|
||||
"approval_mutations": false,
|
||||
"kv_version": 1,
|
||||
"request_id": "2f85087b-68af-028a-a9a7-3c0d89c06c03",
|
||||
"keycape": {
|
||||
"deployment_uid": "99ddd83c-cb3f-4847-bcf8-35f1aa87627f",
|
||||
"generation": 51,
|
||||
"pod_uid": "c4b4b63c-fd5b-45eb-bfa5-59197afe1412",
|
||||
"single_ready_replica": true
|
||||
},
|
||||
"image_unchanged": "forgejo.coulomb.social/coulomb/key-cape@sha256:db2c5a13a47839049349e881c8d19bc39f720ee69d8518f9f2eba2b1f98af9d5",
|
||||
"unrelated_config_preserved": true,
|
||||
"verifier_secret_exported": false,
|
||||
"requester_credential_presented": false,
|
||||
"warden_session": "exited_0_after_self_revocation_and_helper_cleanup"
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue