coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record post-rotation public JWKS observation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093
This commit is contained in:
codex 2026-08-23 14:40:13 +02:00
parent 7ce3bc8380
commit dcaead43fd
2 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/keycape-exposure-rotation-approval.example.json
View file

@ -23,6 +23,13 @@
"predecessor_jwt": "reject-after-cutover", "predecessor_jwt": "reject-after-cutover",
"forward_only": true "forward_only": true
}, },
"post_rotation_observation": {
"jwks_kid": "key-1",
"jwks_sha256": "3d46c07b649432eb41112b9e5f5a929460027766127d1eb419ebac8eb9858c06",
"observed_at": "2026-08-23",
"source_revision_binding": "REQUIRED",
"downstream_refresh_confirmation": "REQUIRED"
},
"revisions": { "revisions": {
"key_cape": "REQUIRED", "key_cape": "REQUIRED",
"net_kingdom": "REQUIRED", "net_kingdom": "REQUIRED",

5
docs/keycape-live-secret-exposure-recovery.md
View file

@ -75,6 +75,11 @@ revocation. Use expiry-based predecessor denial unless a separate global
signing-secret invalidation is explicitly approved. These acknowledgements do signing-secret invalidation is explicitly approved. These acknowledgements do
not constitute a live GO; the approval template remains pending. not constitute a live GO; the approval template remains pending.
A fresh public JWKS read on 2026-08-23 found kid `key-1` and SHA-256
`3d46c07b649432eb41112b9e5f5a929460027766127d1eb419ebac8eb9858c06`.
Treat this as an observation only until KeyCape binds it to the source
revision and confirms downstream cache refresh.
## Ownership ## Ownership
| Boundary | Owner | Required contribution | | Boundary | Owner | Required contribution |