railiance-platform/docs/keycape-exposure-rotation-approval.example.json
codex 18d61cd6a0
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Record final KeyCape recovery receipt
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093
2026-08-23 14:51:50 +02:00

57 lines
1.7 KiB
JSON

{
"incident_id": "KEYCAPE-EXPOSURE-20260823-01",
"status": "pending",
"secret_ref": {
"namespace": "sso",
"name": "keycape-config",
"uid": "2e94519d-1550-41c7-9701-2efe47fe1fd3",
"resource_version": "51326531"
},
"runtime_anchor": {
"deployment": "keycape",
"generation": 25,
"observed_generation": 25,
"ready": 1,
"available": 1,
"image": "key-cape:mfa-client-20260809",
"issuer": "https://kc.coulomb.social",
"jwks_kid": "key-1",
"jwks_sha256": "8e3237da6030c6af91c5005d0112a149204bc549f67d2234939c5581fdb95a32"
},
"strategy": {
"signing": "pending-keycape-ack",
"predecessor_jwt": "reject-after-cutover",
"forward_only": true
},
"post_rotation_observation": {
"jwks_kid": "key-1",
"jwks_sha256": "c6faac5dfeef2453daf9cfc14671f62b535dd321befdf6014e3ee5c2cf1f1156",
"observed_at": "2026-08-23",
"source_revision_binding": "93704fd2424503007c20b458b62a7f7d994bb288",
"downstream_refresh_confirmation": "keycape-authelia-lldap-privacyidea-identity-provisioner-ready-1-1"
},
"revisions": {
"key_cape": "93704fd2424503007c20b458b62a7f7d994bb288",
"net_kingdom": "REQUIRED",
"railiance_platform": "453fed3"
},
"window": {
"starts_at": "2026-08-23T15:00:00+02:00",
"ends_at": "2026-08-23T15:30:00+02:00",
"max_minutes": 30
},
"operators": {
"driver": "user",
"abort": "root-admin"
},
"acknowledgements": {
"key_cape_message_id": "05b49688-76a8-4be9-a00d-95408c798697",
"net_kingdom_message_id": "71b1008a-7fd7-4500-85c6-e8893a6d80d4"
},
"authorization": {
"human_go": true,
"provider_writes": false,
"secret_apply": false,
"predecessor_revocation": false
}
}