railiance-platform

Author	SHA1	Message	Date
tegwick	347226eb36	CCR-2026-0004: capabilities-safe verify + agent high-risk boundary All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Record WP-0026 T07 promotion evidence (no secret values), mark the offsite backup lane front door resolvable/ready, and add OpenBao policy agent-high-risk-boundary for coding-agent metadata-only access.	2026-07-16 23:26:28 +02:00
tegwick	0055e8f3f7	Establish railiance backup credentials in OpenBao (CCR-2026-0004). Some checks are pending CI Smoke / host-smoke (push) Waiting to run Details CI Smoke / container-smoke (push) Waiting to run Details Add workload KV lane for Nextcloud WebDAV token, URL, and age recovery escrow at platform/workloads/railiance/backup/offsite-lane. Apply read policy and OIDC role railiance-backup-workload-kv-read; wire forgejo-backup to load credentials from OpenBao when env is unset.	2026-07-07 17:16:30 +02:00