Implement attended Railiance Clock host key delivery
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
codex 2026-09-15 23:00:20 +02:00
parent 3b11773469
commit e70ef2f32a
7 changed files with 284 additions and 49 deletions

View file

@ -38,6 +38,7 @@ allowed_statuses:
allowed_request_types:
- workload-kv-read
- attended-host-key-delivery
secret_markers_rejected:
- AGE-SECRET-KEY-1
@ -157,3 +158,7 @@ guardrails:
disallowed_path_fragments:
- "*"
- ".."
# Attended host delivery is currently restricted to CCR-2026-0028.
# Exact contract validation: scripts/railiance_clock_custody.py.
# Delegated workload appliers must refuse this request type.