railiance-platform/openbao/policies
codex 2a44d2eced
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Approve Policy Nexus source credential lane
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
2026-08-31 23:03:48 +02:00
..
inputs Finish coding-agent high-risk boundary coverage 2026-08-22 10:03:54 +02:00
agent-high-risk-boundary.hcl Approve Policy Nexus source credential lane 2026-08-31 23:03:48 +02:00
credential-broker-warden-sign-issuer.hcl feat: add credential broker token helper 2026-06-27 00:06:03 +02:00
credential-change-nonprod-applier.hcl Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
credential-change-prod-applier.hcl Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
external-secrets-activity-core.hcl feat(backup): multi-host CNPG Option A CLI for activity-core 2026-07-22 19:50:59 +02:00
external-secrets-audit-core.hcl Add audit-core ESO policy and ClusterSecretStore for railiance01 2026-08-13 00:58:58 +02:00
external-secrets-core-hub-database.hcl feat: add hub-core database lease projections 2026-08-21 17:30:44 +02:00
external-secrets-email-connect.hcl Add email-connect transactional SMTP and ingest custody lane. 2026-08-12 13:32:11 +02:00
external-secrets-forgejo.hcl Add OpenBao External Secrets lane for Forgejo mailer on railiance01 2026-07-07 14:30:02 +02:00
external-secrets-issue-core.hcl Add ESO OpenBao GitOps add-ons 2026-06-25 20:08:36 +02:00
external-secrets-target-revenue.hcl Add OpenBao/ESO lane for target-revenue on railiance01 2026-08-05 17:56:39 +02:00
external-secrets-whitehat-audit-e2-02.hcl Bind audit E2 retry projection to new engagement 2026-08-22 20:56:58 +02:00
external-secrets-whitehat-audit-e2.hcl Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
platform-admin.hcl openbao: grant platform-admin access to tenants/ mount 2026-07-17 00:31:09 +02:00
platform-readonly.hcl Platform secret setup 2026-05-23 13:59:58 +02:00
warden-sign.hcl feat(openbao): add SSH engine automation for ops-warden signing 2026-06-18 01:06:43 +02:00
workload-kv-read-agent-harness-forgejo.hcl feat(openbao): agent-harness forgejo deploy-key read policy 2026-07-17 23:57:54 +02:00
workload-kv-read-backup-object-storage.hcl retarget: CCR-2026-0012 is the general backup object-store lane 2026-08-14 19:19:56 +02:00
workload-kv-read-binky-company-email-imap.hcl CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist 2026-07-17 00:09:28 +02:00
workload-kv-read-binky-qonto-api.hcl CCR-2026-0008 active: tenants/binky/qonto-api lane live 2026-07-21 21:42:10 +02:00
workload-kv-read-core-hub-runtime.hcl feat: prepare core hub platform onboarding 2026-08-20 11:18:30 +02:00
workload-kv-read-email-connect-transactional.hcl Add email-connect transactional SMTP and ingest custody lane. 2026-08-12 13:32:11 +02:00
workload-kv-read-forgejo-admin.hcl Document activity-core ESO read of forgejo-admin 2026-07-21 23:19:10 +02:00
workload-kv-read-forgejo-mailer.hcl Add OpenBao External Secrets lane for Forgejo mailer on railiance01 2026-07-07 14:30:02 +02:00
workload-kv-read-issue-core-runtime.hcl Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
workload-kv-read-llm-connect-provider-secrets.hcl Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
workload-kv-read-policy-nexus-forgejo-source.hcl Approve Policy Nexus source credential lane 2026-08-31 23:03:48 +02:00
workload-kv-read-qonto-assistant.hcl Stabilize credential-change test suite (RAILIANCE-WP-0014) 2026-08-11 10:28:10 +02:00
workload-kv-read-railiance-backup-offsite-lane.hcl Establish railiance backup credentials in OpenBao (CCR-2026-0004). 2026-07-07 17:16:30 +02:00
workload-kv-read-reuse-surface-runtime.hcl Draft CCR-2026-0005 for reuse-surface runtime secrets lane 2026-07-07 22:21:31 +02:00
workload-kv-read-target-revenue-runtime.hcl Add OpenBao/ESO lane for target-revenue on railiance01 2026-08-05 17:56:39 +02:00
workload-kv-read-template.hcl Platform secret setup 2026-05-23 13:59:58 +02:00
workload-kv-read-whynot-design-npm-publish.hcl Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00