31a5de81d0
Complete RAILIANCE-WP-0011-T03 catalog migration for CCR-2026-0005
...
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Activate CCR front door, document reuse-surface lane in workload-kv-access-lanes,
and mark consumer handoff task done.
2026-07-07 22:38:45 +02:00
d64fa814b1
Activate reuse-surface runtime secrets OpenBao lane (CCR-2026-0005)
...
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Approve CCR-2026-0005, apply delegated OpenBao metadata, seed the KV path,
verify ExternalSecret delivery on Railiance01, and complete RAILIANCE-WP-0011-T02.
2026-07-07 22:34:34 +02:00
3719c4dec0
Draft CCR-2026-0005 for reuse-surface runtime secrets lane
...
CI Smoke / host-smoke (push) Successful in 7s
CI Smoke / container-smoke (push) Successful in 2s
RAILIANCE-WP-0011-T01: propose OpenBao path
platform/workloads/reuse/reuse-surface/runtime-secrets with
REUSE_SURFACE_TOKEN and REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET, matching
read policy, and metadata review for Railiance01 interim ESO delivery.
2026-07-07 22:21:31 +02:00
0055e8f3f7
Establish railiance backup credentials in OpenBao (CCR-2026-0004).
...
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Add workload KV lane for Nextcloud WebDAV token, URL, and age recovery
escrow at platform/workloads/railiance/backup/offsite-lane. Apply read
policy and OIDC role railiance-backup-workload-kv-read; wire forgejo-backup
to load credentials from OpenBao when env is unset.
2026-07-07 17:16:30 +02:00
4936b8970b
RAILIANCE-WP-0009/0010 finished: front doors active; WP-0005 T10 done
...
- CCR-2026-0002/0003: frontdoor_activation evidence recorded, status active,
readiness ready/resolvable (ops-warden catalog promotion commit 364eb7d)
- WP-0009/0010 T06 done; both workplans finished
- WP-0005 T10 closed on acceptance (fast path, break-glass, routing truth
consistent); phase-2 readonly-diagnostics grant deferred as follow-up
- WP-0005 T07 stays wait: flex-auth lacks a credential-grant authorization
surface (capability request sent, State Hub message 893ff109)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 20:54:29 +02:00
ddd916d71c
CCR-2026-0002/0003 approved + applied via constrained applier; WP-0008 finished, WP-0009/0010 advanced
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 12:12:49 +02:00
ab08a21337
Align OpenRouter lane selector
2026-07-01 23:51:25 +02:00
38936d8fd6
Close delegated prod applier pilot
2026-07-01 23:34:13 +02:00
a95236d2e5
Add credential-change delegated applier flow
2026-07-01 20:07:26 +02:00
8f617fcbf4
Activate whynot npm credential lane
2026-06-29 00:13:09 +02:00
1e769c75a0
Record whynot positive fetch verification
2026-06-28 17:26:10 +02:00
2c1e76efca
Record whynot identity group evidence
2026-06-28 16:05:17 +02:00
3527bc1cae
Request groups scope for whynot OIDC role
2026-06-28 13:23:14 +02:00
adf865611c
Mark whynot lane applied pending verification
2026-06-28 12:53:39 +02:00
271aa94642
Record whynot OpenBao lane apply evidence
2026-06-28 12:41:39 +02:00
06f2f4e315
Approve corrected whynot CCR
2026-06-28 01:27:04 +02:00
6effdb80ca
Link corrected whynot CCR decision
2026-06-28 01:05:43 +02:00
eb24e04b71
Correct whynot credential tenant path
2026-06-28 01:00:12 +02:00
a27a114491
Approve whynot credential CCR
2026-06-28 00:13:37 +02:00
3706ff703e
Link CCR approval to State Hub decision
2026-06-28 00:00:02 +02:00
52687d8b3e
Confirm whynot credential binding
2026-06-27 23:45:31 +02:00
aee0dcefad
Add credential lane readiness proposals
2026-06-27 23:30:29 +02:00
815b124ab1
Implement credential change request review flow
2026-06-27 22:57:21 +02:00
