coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

CCR-2026-0058/0059: binding confirmed (sso/nk-bind-executor uid bd15569c)

Browse source 
ServiceAccount created by rapp-bounded-executor make deploy (founder,
2026-10-31); verify-live: role matches the net-kingdom ceiling.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
This commit is contained in:
codex 2026-10-31 19:38:47 +01:00
parent 678998f5b9
commit b4bafb0df8
2 changed files with 12 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
credential-change-requests/CCR-2026-0058-net-kingdom-bind-executor-svc-authelia-write.yaml
View file

@ -41,6 +41,11 @@ review:
decision: approved
comment: Re-approved by the founder in session 2026-10-31 with the corrected policy
(required_parameters removed; NK-WP-0056-T12 synthetic pilot evidence).
- at: '2026-10-31T18:38:22+00:00'
reviewer: platform-owner
decision: binding_confirmed
comment: 'Binding confirmed: ServiceAccount nk-bind-executor in namespace sso
only (uid bd15569c-8a85-4625-b001-d9f799cb857b), audience openbao, from rapp-bounded-executor.'
target:
domain: infotech
tenant: platform
@ -87,7 +92,7 @@ openbao:
- nk-bind-executor
service_account_namespaces:
- sso
bound_claims_confirmed: false
bound_claims_confirmed: true
access_frontdoor:
type: platform-owner
catalog_id: net-kingdom-bind-executor-svc-authelia-write

7
credential-change-requests/CCR-2026-0059-net-kingdom-bind-executor-syn-journey-read.yaml
View file

@ -28,6 +28,11 @@ review:
reviewer: net-kingdom-owner
decision: approved
comment: Approved by the founder 2026-10-31 for NK-WP-0056-T10/T06.
- at: '2026-10-31T18:38:23+00:00'
reviewer: platform-owner
decision: binding_confirmed
comment: 'Binding confirmed: ServiceAccount nk-bind-executor in namespace sso
only (uid bd15569c-8a85-4625-b001-d9f799cb857b), audience openbao, from rapp-bounded-executor.'
supersedes_boundary:
ccr: CCR-2026-0057
field: openbao.runtime_access
@ -77,7 +82,7 @@ openbao:
- nk-bind-executor
service_account_namespaces:
- sso
bound_claims_confirmed: false
bound_claims_confirmed: true
access_frontdoor:
type: platform-owner
catalog_id: net-kingdom-bind-executor-syn-journey-read