coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bind audit E2 retry projection to new engagement
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
This commit is contained in:
codex 2026-08-22 20:56:58 +02:00
parent 891d90e6c9
commit f135c0af35
4 changed files with 96 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

21
openbao/policies/external-secrets-whitehat-audit-e2-02.hcl Normal file
View file

@ -0,0 +1,21 @@
# Ephemeral read policy for WH-ENG-20260822-AUDIT-E2-02.
#
# The External Secrets Operator may read exactly two per-engagement values.
# It cannot read the audit-core sender registry, the expired -01 engagement,
# or any other engagement path.
path "platform/data/engagements/WH-ENG-20260822-AUDIT-E2-02/audit-core/token-a" {
capabilities = ["read"]
}
path "platform/metadata/engagements/WH-ENG-20260822-AUDIT-E2-02/audit-core/token-a" {
capabilities = ["read"]
}
path "platform/data/engagements/WH-ENG-20260822-AUDIT-E2-02/audit-core/token-b" {
capabilities = ["read"]
}
path "platform/metadata/engagements/WH-ENG-20260822-AUDIT-E2-02/audit-core/token-b" {
capabilities = ["read"]
}