coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record verified independent factory audit readback
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-11 16:35:14 +02:00
parent 005c68eb4c
commit b75729b799
4 changed files with 249 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
credential-change-requests/CCR-2026-0021-approval-engine-audit.yaml
View file

@ -137,6 +137,22 @@ verification:
- Status remains applied pending native producer accepted/duplicate, source/tenant/read-refusal
and bearer-revocation evidence. Reader-session revocation does not revoke audit
bearer credentials.
- at: '2026-09-11T13:11:08+00:00'
actor: codex via attended user platform-admin
kind: factory_audit_native_producer_and_independent_readback
result: passed
details:
- Native adapters accepted synthetic events (202), retried after process restart
as duplicates (200), reconciled count one and refused wrong source/tenant,
sibling reconciliation, seven read routes and invalid bearers.
- Independent read-only operator found both retained exact source/tenant events;
the 36-event chain is intact. Readback wrapper exit 0 confirms this session
self-revocation and private-helper cleanup; earlier failed-session uncertainty
is not retroactively closed.
- 'Receipt: docs/evidence/2026-09-11-factory-native-readback.json.'
- Status remains applied pending formerly-valid audit-bearer revocation proof.
Invalid-bearer refusal and OpenBao session revocation are distinct checks.
lifecycle:
deactivate: Stop the exact producer; remove only its admitted token from the registry
using CAS and reload/verify receiver refusal. Then detach its reader policy and

16
credential-change-requests/CCR-2026-0022-informed-decision-audit.yaml
View file

@ -138,6 +138,22 @@ verification:
- Status remains applied pending native producer accepted/duplicate, source/tenant/read-refusal
and bearer-revocation evidence. Reader-session revocation does not revoke audit
bearer credentials.
- at: '2026-09-11T13:11:08+00:00'
actor: codex via attended user platform-admin
kind: factory_audit_native_producer_and_independent_readback
result: passed
details:
- Native adapters accepted synthetic events (202), retried after process restart
as duplicates (200), reconciled count one and refused wrong source/tenant,
sibling reconciliation, seven read routes and invalid bearers.
- Independent read-only operator found both retained exact source/tenant events;
the 36-event chain is intact. Readback wrapper exit 0 confirms this session
self-revocation and private-helper cleanup; earlier failed-session uncertainty
is not retroactively closed.
- 'Receipt: docs/evidence/2026-09-11-factory-native-readback.json.'
- Status remains applied pending formerly-valid audit-bearer revocation proof.
Invalid-bearer refusal and OpenBao session revocation are distinct checks.
lifecycle:
deactivate: Stop the exact producer; remove only its admitted token from the registry
using CAS and reload/verify receiver refusal. Then detach its reader policy and