coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bind audit E2 retry projection to new engagement
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
This commit is contained in:
codex 2026-08-22 20:56:58 +02:00
parent 891d90e6c9
commit f135c0af35
4 changed files with 96 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

12
scripts/audit-core-whitehat-e2-credentials-02.py
View file

@ -41,14 +41,14 @@ IDENTITIES = {
"tenant": "tenant:trial:whitehat-b-20260822-02",
},
}
POLICY = "external-secrets-whitehat-audit-e2"
ROLE = "external-secrets-whitehat-audit-e2"
STORE = "openbao-whitehat-audit-e2"
POLICY = "external-secrets-whitehat-audit-e2-02"
ROLE = "external-secrets-whitehat-audit-e2-02"
STORE = "openbao-whitehat-audit-e2-02"
SECRET = "whitehat-e2-audit-credentials"
CONFIRM = f"{ENGAGEMENT}:attended"
ROOT = Path(__file__).resolve().parents[1]
POLICY_FILE = ROOT / "openbao" / "policies" / "external-secrets-whitehat-audit-e2.hcl"
MANIFEST_FILE = ROOT / "manifests" / "whitehat-audit-e2-projection.yaml"
POLICY_FILE = ROOT / "openbao" / "policies" / "external-secrets-whitehat-audit-e2-02.hcl"
MANIFEST_FILE = ROOT / "manifests" / "whitehat-audit-e2-projection-02.yaml"
class ProcedureError(RuntimeError):
@ -185,6 +185,8 @@ def projection_manifest() -> str:
rendered = MANIFEST_FILE.read_text(encoding="utf-8")
if "data:" not in rendered or "token-a" not in rendered or "token-b" not in rendered:
raise ProcedureError("projection manifest is incomplete")
if ENGAGEMENT not in rendered or "WH-ENG-20260822-AUDIT-E2-01" in rendered:
raise ProcedureError("projection manifest is not bound exclusively to this engagement")
return rendered