Commit graph

10 commits

Author SHA1 Message Date
codex
f3b0c4f4b2 RPF-WP-0069-T05/T09/T10: bounded executor credential go-live runbook (NK-WP-0056-T06)
Some checks failed
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
CCR intake gate / gate (push) Has been cancelled
- CCR-2026-0063: NetKingdom's answer recorded (ESO as drafted); delivery aligned to the
  Secret the rapp Job mounts (sso/bounded-executor-tokens, key audit-core); reader role in
  the CCR-2026-0033/0041/0060 shape (audience openbao, explicit max TTL, self-lifecycle);
  custody_procedure names audit-core's seeder (one seeder only).
- CCR-2026-0060: delivery block (store rendered from the issuer template); fence step named.
- manifests/nk-bind-executor-eso.yaml: two sso-restricted stores and ExternalSecrets.
- scripts/nk_bind_executor_custody.py plan|fence|verify with synthetic-fixture tests.
- Source coding-agent boundary carries the KeyCape nk-bind-executor-approval path.
- docs/credential-lane-designs/nk-bind-executor-go-live.md: exact founder sequence.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 523928@bnt-lap001
Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350
2026-11-04 01:59:30 +01:00
codex
104ed90f42 feat: declare proposed fixed KeyCape issuer ESO source contract
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa
2026-10-17 20:36:52 +02:00
codex
7ec54d59e0 Record explicit owner approval for exact Qonto custody packet
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
2026-10-15 21:27:32 +02:00
codex
d5a86b74d1 Prepare exact Qonto audit custody and hourly receiver admission packet
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2
2026-10-15 21:26:11 +02:00
codex
80e053988f fix(security): prevent ESO copying source annotations (CUST-WP-0073)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s
KeyCape factor custody acceptance / acceptance (push) Successful in 10s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
2026-09-28 15:56:50 +02:00
codex
2e2c31d237 Establish scoped KeyCape factor custody and verified automatic renewal
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
KeyCape factor custody acceptance / acceptance (push) Successful in 7s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
2026-09-13 16:25:33 +02:00
codex
5cc325b744 Record operator approval of the two factory audit sender lanes
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
2026-09-11 06:47:35 +02:00
codex
bfe65a5b05 Prepare scoped factory audit custody and enforce receiver compatibility
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
2026-09-11 02:01:57 +02:00
codex
f135c0af35 Bind audit E2 retry projection to new engagement
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
2026-08-22 20:56:58 +02:00
codex
864cc20b96 Add attended Whitehat E2 credential projection
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
2026-08-22 12:59:38 +02:00