Pin privacyIDEA resolver reconciliation gate
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093
This commit is contained in:
codex 2026-08-23 15:06:50 +02:00
parent 18d61cd6a0
commit b879e85d6d

View file

@ -70,6 +70,13 @@ template is published at
`docs/keycape-exposure-rotation-approval.example.json`; no additional Secret
apply is authorized by this receipt.
NetKingdom has now pinned the remaining attended resolver procedure at
`eec7007` (procedure checkout `f2e578c`, owner receipt
`45b236c8-052f-43d3-a472-44f8e9694da2`). It performs one resolver-only POST,
protected interactive inputs, boolean postchecks, replacement-success and
predecessor-denial evidence, and forward-only abort. T03 is ready for the
attended run; T04/T05 remain open until that run produces a sanitized receipt.
## T04 — Execute the attended rotation
```task