coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1178 commits 2 branches 0 tags 8.8 MiB
Commit graph

3 commits

Author SHA1 Message Date
codex
9a2495dc15 nk-bind-executor go-live step 6: server-side apply only; the last-applied annotation propagates and is refused by admission
All checks were successful
CCR intake gate / gate (push) Successful in 4m14s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 523928@bnt-lap001
Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350
 2026-11-04 23:25:58 +01:00
codex
47f5d37e7c nk-bind-executor go-live: the case of record is net-kingdom security-cases/nk-bind-executor-approval.yaml
All checks were successful
CCR intake gate / gate (push) Successful in 11s
Details
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
The type's example stays an example; accepted cases live in security-cases/ (as nk-synthetic-journey).
The broker takes the case by path and hash, so only the runbook path changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 523928@bnt-lap001
Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350
 2026-11-04 02:04:26 +01:00
codex
f3b0c4f4b2 RPF-WP-0069-T05/T09/T10: bounded executor credential go-live runbook (NK-WP-0056-T06)
Some checks failed
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details
CCR intake gate / gate (push) Has been cancelled
Details 
- CCR-2026-0063: NetKingdom's answer recorded (ESO as drafted); delivery aligned to the
  Secret the rapp Job mounts (sso/bounded-executor-tokens, key audit-core); reader role in
  the CCR-2026-0033/0041/0060 shape (audience openbao, explicit max TTL, self-lifecycle);
  custody_procedure names audit-core's seeder (one seeder only).
- CCR-2026-0060: delivery block (store rendered from the issuer template); fence step named.
- manifests/nk-bind-executor-eso.yaml: two sso-restricted stores and ExternalSecrets.
- scripts/nk_bind_executor_custody.py plan|fence|verify with synthetic-fixture tests.
- Source coding-agent boundary carries the KeyCape nk-bind-executor-approval path.
- docs/credential-lane-designs/nk-bind-executor-go-live.md: exact founder sequence.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 523928@bnt-lap001
Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350
 2026-11-04 01:59:30 +01:00