Finalize proposed CCR-2026-0033 and its attended custody child (source only).
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Correct the KV path into platform/workloads/, record secrets-engine consumer
coordinates (D1-D4 pending), rotation ownership, live order and rollback, and
add a decision-gated custody child with fake-only tests. Nothing executed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 132360@bnt-lap001
Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b
This commit is contained in:
codex 2026-10-06 13:46:12 +02:00
parent 01e0576132
commit df24a77482
9 changed files with 538 additions and 10 deletions

View file

@ -1,3 +1,3 @@
path "platform/data/services/keycape/secrets-engine-openbao" {
path "platform/data/workloads/keycape/secrets-engine-openbao" {
capabilities = ["read"]
}