Add contained Policy Nexus CCR apply wrapper
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
codex 2026-08-31 23:12:16 +02:00
parent 2a44d2eced
commit f342f9605e

View file

@ -0,0 +1,13 @@
#!/usr/bin/env bash
# Silent, exact owner command for the governed openbao-platform-admin-login lane.
# The surrounding Warden session captures both streams and rejects any child output.
set -euo pipefail
REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
cd "${REPO_DIR}"
python3 scripts/credential-change.py applier-apply CCR-2026-0014 \
--actor "attended operator via governed platform-admin lane" \
--confirm "DELEGATED APPLY CCR-2026-0014" \
--record-state-hub \
>/dev/null 2>&1