coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bind secrets-engine approval reader to confirmed operator group
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
codex 2026-09-14 01:30:23 +02:00
parent 817c122d07
commit bbff2bfb93
4 changed files with 200 additions and 121 deletions
Download patch file Download diff file Expand all files Collapse all files

15
docs/evidence/2026-09-14-ccr0019-operator-binding.json Normal file
View file

@ -0,0 +1,15 @@
{
"observed_at": "2026-09-13T23:27:24.125007+00:00",
"ccr_id": "CCR-2026-0019",
"status": "metadata_applied_and_readback_verified",
"role": "secrets-engine-approval-client-workload-kv-read",
"group": "net-kingdom-admins",
"policy": "workload-kv-read-secrets-engine-approval-client",
"ttl_seconds": 900,
"role_request_id": "cc0fc872-3bff-5af0-5898-886e0ec6741e",
"attended_platform_admin": true,
"secret_values_read": false,
"frontdoor_activated": false,
"positive_negative_delivery_verified": false,
"session_revocation": "enclosing Warden command exited 0 after self-revocation and helper cleanup"
}