From ca2b5e33857d194aeb60b579c9cce093a09b602a Mon Sep 17 00:00:00 2001 From: codex Date: Sat, 31 Oct 2026 11:19:36 +0100 Subject: [PATCH] CCR-2026-0055: verified (setup, verify and attended write-through passed; net-kingdom ad7d1cd) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 896183@bnt-lap001 Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2 --- ...CCR-2026-0055-net-kingdom-privacyidea-bind.yaml | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml b/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml index dd6882a..3755a61 100644 --- a/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml +++ b/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml @@ -3,7 +3,7 @@ kind: credential-change-request schema_version: 1 request_type: attended-service-credential-delivery title: NetKingdom privacyIDEA resolver directory bind (svc-privacyidea) custody -status: approved +status: verified created: '2026-10-31' updated: '2026-10-31' requester: @@ -96,4 +96,14 @@ verification: custody copy and the write-through with pi-admin and an MFA login through the resolver. - Positive and negative results recorded in value-free receipts. - evidence: [] + evidence: + - at: '2026-10-31T10:19:36+00:00' + actor: founder (attended), claude-code guiding + kind: verifier_custody_and_write_through + result: passed + details: + - '2026-10-31: bind-lane.py setup (custody signs in to LLDAP as svc-privacyidea, + coding agents fenced, KV v1 CAS=0, no workload role) and verify passed; realm_bootstrap.py + --rotate-bind --from-openbao wrote BINDPW from OpenBao and admin passed token-backed + MFA through the resolver. Evidence: net-kingdom docs/evidence/2026-10-31-nk56-svc-privacyidea-bind/ + (ad7d1cd).'