coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: admit and exercise KeyCape verifier custody activation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-luna
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
codex 2026-09-09 01:32:45 +02:00
parent 52b24eab9a
commit b7861de20e
8 changed files with 662 additions and 184 deletions
Download patch file Download diff file Expand all files Collapse all files

6
openbao/policies/agent-high-risk-boundary.hcl
View file

@ -123,3 +123,9 @@ path "platform/data/workloads/telemetry/grafana-admin" {
path "platform/metadata/workloads/telemetry/grafana-admin" {
capabilities = ["deny"]
}
# Approved verifier custody: CCR-2026-0017 / CCR-2026-0018.
path "platform/data/workloads/secrets-engine/approval-client" { capabilities = ["deny"] }
path "platform/data/workloads/approval-engine/operator-client" { capabilities = ["deny"] }
path "platform/metadata/workloads/secrets-engine/approval-client" { capabilities = ["deny"] }
path "platform/metadata/workloads/approval-engine/operator-client" { capabilities = ["deny"] }