8 commits

Author	SHA1	Message	Date
codex	2a44d2eced	Approve Policy Nexus source credential lane ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-08-31 23:03:48 +02:00
codex	429cc912ed	Finish coding-agent high-risk boundary coverage ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 10:03:54 +02:00
codex	382f04412a	Close CCR drift and high-risk policy gaps	2026-08-21 01:29:28 +02:00
codex	ac69f90300	feat: prepare core hub platform onboarding	2026-08-20 11:18:30 +02:00
tegwick	1cbaac7a73	CCR-2026-0008 active: tenants/binky/qonto-api lane live ... Align path and fields (API_KEY, API_USER) with provisioned secret; policy and OIDC role applied; agent-high-risk-boundary deny on data path. Front door ready.	2026-07-21 21:42:10 +02:00
tegwick	9f452f25be	CCR-2026-0008: Binky Qonto API tenant lane (approved, pending apply) ... Policy + OIDC role for tenants/binky/qonto/api; agent-high-risk-boundary deny on data path. Implements DEC-2026-004 / BINKY-WP-0005 custody; secret values remain founder Red-lane.	2026-07-21 21:26:25 +02:00
tegwick	86209fa90c	CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist ... Enable tenant commercial secrets: applier accepts mount tenants/, apply policy and OIDC role for company-email IMAP (metadata only; values are founder Red provision). Extend agent-high-risk-boundary for the path.	2026-07-17 00:09:28 +02:00
tegwick	347226eb36	CCR-2026-0004: capabilities-safe verify + agent high-risk boundary ... Record WP-0026 T07 promotion evidence (no secret values), mark the offsite backup lane front door resolvable/ready, and add OpenBao policy agent-high-risk-boundary for coding-agent metadata-only access.	2026-07-16 23:26:28 +02:00