railiance-platform/openbao
codex c9b68ea4e4
All checks were successful
CCR intake gate / gate (push) Successful in 10s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
CCR-2026-0059 (proposed): bounded executor reads the syn-journey identity
workload-kv-read for platform/workloads/net-kingdom/synthetic-journey/syn-journey:
read on the data path only, own role bound to sso/nk-bind-executor (audience
openbao, 15m), separate from the CCR-2026-0058 write role. Widens
CCR-2026-0057 runtime_access (stated). Standing reader proposed; founder
decides. RPF-WP-0069-T04 updated. Not approved, not applied.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-10-31 18:47:31 +01:00
..
auth RPF-WP-0065-T04: rebuild founder runbook for the silent warden lane 2026-10-27 22:46:31 +01:00
email-connect-platform-smtp Prepare supervised email-connect SMTP foundation and projection 2026-10-31 12:00:57 +01:00
eso-auth-recovery RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect 2026-09-21 19:18:59 +02:00
fluid-telegram RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 2026-10-09 12:10:21 +02:00
policies CCR-2026-0059 (proposed): bounded executor reads the syn-journey identity 2026-10-31 18:47:31 +01:00
root-grant docs(custody): close producer delivery with verified provider recovery 2026-10-03 21:59:29 +02:00
ssh OpenBao agt-role: allow permit-pty extension for agt-custodian (CUST-WP-0073-T02, WARDEN-WP-0045) 2026-10-20 20:34:47 +02:00
state-hub-preflight fix(security): prevent ESO copying source annotations (CUST-WP-0073) 2026-09-28 15:56:50 +02:00
backup-primary-serviceaccounts.yaml Commit the prepared backup reader for both archive pairs. 2026-10-08 22:12:34 +02:00