Prepare supervised email-connect SMTP foundation and projection
Some checks failed
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
CCR intake gate / gate (push) Has been cancelled

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a18e2d-f513-7742-b8e7-12af0b744ff3
This commit is contained in:
codex 2026-10-31 12:00:57 +01:00
parent f7c01d4000
commit e77f3989b4
8 changed files with 914 additions and 3 deletions

View file

@ -39,7 +39,7 @@ Evidence: docs/evidence/email-connect-smtp-admission-preparation-2026-10-31.json
```task
id: RPF-WP-0068-T02
status: todo
status: done
priority: high
state_hub_task_id: "de0ec1f9-cc11-593f-88c5-5a3972969f01"
```
@ -54,6 +54,16 @@ readback after admission without printing values or reading Kubernetes Secrets.
Use coulomb-social/docs/release/platform-mail-sender-2026-10-31/candidate.json.
Do not deploy the application sender here or reuse an existing consumer's grant.
Preparation completed 2026-10-31: email_connect_smtp_foundation.py binds the
server-defaulted three-object bundle and pinned primary/namespace/application
identities. It performs native TokenReview before canonical binding confirmation,
guarded owner admission, positive/negative workload login with token revocation,
exclusive projection creation and Ready/ownership checks. PartialObjectMetadata
queries avoid Secret values; fresh native query confirms target absent. All41
SMTP tests pass (12 foundation cases). No live creation/admission executed.
Native execution results belong to T03/T04, not this preparation completion.
Exact packet: docs/email-connect-smtp-foundation-review-2026-10-31.md.
## T03 — Obtain exact admission and execute through the attended owner lane
```task