Implement attended Railiance Clock host key delivery
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
parent
3b11773469
commit
e70ef2f32a
7 changed files with 284 additions and 49 deletions
|
|
@ -38,6 +38,7 @@ allowed_statuses:
|
|||
|
||||
allowed_request_types:
|
||||
- workload-kv-read
|
||||
- attended-host-key-delivery
|
||||
|
||||
secret_markers_rejected:
|
||||
- AGE-SECRET-KEY-1
|
||||
|
|
@ -157,3 +158,7 @@ guardrails:
|
|||
disallowed_path_fragments:
|
||||
- "*"
|
||||
- ".."
|
||||
|
||||
# Attended host delivery is currently restricted to CCR-2026-0028.
|
||||
# Exact contract validation: scripts/railiance_clock_custody.py.
|
||||
# Delegated workload appliers must refuse this request type.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue