coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Open the OpenBao login in pinned Playwright Chromium.
All checks were successful
CCR intake gate / gate (push) Successful in 14s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
The Windows default browser presented a signed-in Firefox session. The
launcher now starts coulomb-social's headed Playwright Chromium with a new
empty profile.

Assistant: grok
Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd
This commit is contained in:
codex 2026-11-02 02:59:51 +01:00
parent 8cb5b13c77
commit 962aa9e262
5 changed files with 73 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/backup-credential-recovery.md
View file

@ -141,8 +141,11 @@ python3 scripts/openbao-attended-exec.py -- /absolute/path/to/reviewed-silent-co
The wrapper keeps Warden's `openbao-platform-admin-login --exec` envelope and
puts the repository launcher ahead of the default `xdg-open`. The launcher
allows only the Keycloak HTTPS host and exact local OIDC callback. It opens
that page in a new empty Edge or Chrome profile, not the signed-in Windows
session, and it does not record the address.
that page in a new empty profile of the headed Chromium pinned by
coulomb-social's Playwright install. It does not open Firefox or another
Windows default browser, and it does not record the address. The remote
headless rapp-playwright service is a different facility and cannot complete
this localhost callback.
No token helper or captured Warden output may be inspected. A receipt written
by the owner command proves handoff; session cleanup is assessed separately
from the final Warden exit status.

5
docs/credential-lane-designs/mas-evidence-backup-grant-2026-11-02.md
View file

@ -34,8 +34,9 @@ and is not created here.
1. Founder review is recorded: platform-owner and mas-owner, source
`founder-approval-2026-11-02`. The live account matches the binding.
2. Apply the policy and role with the attended platform-admin login:
`BAO_ADDR=http://127.0.0.1:18200 VAULT_ADDR=http://127.0.0.1:18200 warden access openbao-platform-admin-login --exec -- /home/worsch/railiance-platform/scripts/install-mas-backup-primary-reader.sh`
Sign in as platform-root. The helper is silent and writes only a receipt.
`python3 scripts/openbao-attended-exec.py -- /home/worsch/railiance-platform/scripts/install-mas-backup-primary-reader.sh`
The window is a new empty Playwright Chromium profile. Sign in as
platform-root. The helper is silent and writes only a receipt.
3. In the Scaleway console, create a new IAM application named
`mas-evidence-backup-primary`. Do not add a key to email-connect or to a
broad application. Then say that the application exists. This workstation