railiance-platform/docs/evidence/2026-09-14-t03-native-approval-requests.json
codex 703d552ee7
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Provision scoped T03 requester custody and native requests
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
2026-09-14 02:47:32 +02:00

145 lines
4.9 KiB
JSON

{
"observed_at": "2026-09-14T00:33:04.552946+00:00",
"status": "created",
"phase": "three_unapproved_requests_created",
"requests": [
{
"memo_id": "SECRETS-WP-0010-T03-apply",
"action": "apply",
"approval": {
"binding": {
"action": "apply",
"actor": "secrets-engine",
"digest": "sha256:03cc5b37437f14e86b686ce4054f976556334eff3fa260b03e8014ed3d9217e5",
"human_control": true,
"pdp_digest": "sha256:933427642c58c54f65dd4781b8e4c8e2f358eb96497ae35870fff4bd593d2b84",
"pdp_path": true,
"principal": "secrets-engine",
"purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
"target": {
"attributes": {
"auth_targets": [
"se-prod-openrouter-llm-connect"
],
"fields": [],
"policy_targets": [
"se-prod-openrouter-llm-connect"
],
"stage": "prod"
},
"id": "catalog:openrouter-llm-connect",
"system": "secrets-engine",
"type": "secret-catalog-lane"
}
},
"created_at": "2026-09-14T00:33:07+00:00",
"entries": [],
"id": "09592588-ab15-53e7-89b8-c4e9f29aaacf",
"required_count": 1,
"status": "requested",
"superseded_by": null,
"updated_at": "2026-09-14T00:33:07+00:00",
"validity": {
"expires_at": "2026-09-15T00:33:06.559689+00:00",
"not_before": "2026-09-14T00:33:06.559689+00:00"
}
}
},
{
"memo_id": "SECRETS-WP-0010-T03-verify",
"action": "verify",
"approval": {
"binding": {
"action": "verify",
"actor": "secrets-engine",
"digest": "sha256:72d9267d038c17107c880ffc9009793ce9c70defbddfe2219628854b811a04b2",
"human_control": true,
"pdp_digest": "sha256:9e36cdbf3890cc5a7e550fd57191f9c0f2a6b2180909aac302aa3b999e7e6b25",
"pdp_path": true,
"principal": "secrets-engine",
"purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
"target": {
"attributes": {
"auth_targets": [
"se-prod-openrouter-llm-connect"
],
"fields": [
"OPENROUTER_API_KEY"
],
"policy_targets": [
"se-prod-openrouter-llm-connect"
],
"stage": "prod"
},
"id": "catalog:openrouter-llm-connect",
"system": "secrets-engine",
"type": "secret-catalog-lane"
}
},
"created_at": "2026-09-14T00:33:07+00:00",
"entries": [],
"id": "9416fa31-fa9e-5603-8289-f35bc9625409",
"required_count": 1,
"status": "requested",
"superseded_by": null,
"updated_at": "2026-09-14T00:33:07+00:00",
"validity": {
"expires_at": "2026-09-15T00:33:06.722887+00:00",
"not_before": "2026-09-14T00:33:06.722887+00:00"
}
}
},
{
"memo_id": "SECRETS-WP-0010-T03-exec",
"action": "exec",
"approval": {
"binding": {
"action": "exec",
"actor": "secrets-engine",
"digest": "sha256:f2cf0fb53b740900756ccde5587c3578fcff44beef2f1edab17b9a198a4033d8",
"human_control": true,
"pdp_digest": "sha256:9f17812750fc8962b0fc58fc09df136850c9935a864fafa998a1c030dfb75bd9",
"pdp_path": true,
"principal": "secrets-engine",
"purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
"target": {
"attributes": {
"auth_targets": [
"se-prod-openrouter-llm-connect"
],
"fields": [
"OPENROUTER_API_KEY"
],
"policy_targets": [
"se-prod-openrouter-llm-connect"
],
"stage": "prod"
},
"id": "catalog:openrouter-llm-connect",
"system": "secrets-engine",
"type": "secret-catalog-lane"
}
},
"created_at": "2026-09-14T00:33:07+00:00",
"entries": [],
"id": "da678b61-35be-598e-8d95-a7aefa2fdc73",
"required_count": 1,
"status": "requested",
"superseded_by": null,
"updated_at": "2026-09-14T00:33:07+00:00",
"validity": {
"expires_at": "2026-09-15T00:33:06.955168+00:00",
"not_before": "2026-09-14T00:33:06.955168+00:00"
}
}
}
],
"credential_values_emitted": false,
"signature_verified": true,
"excess_scopes_refused": true,
"wrong_secret_refused": true,
"reader_scope_verified": true,
"human_entries_created": false,
"approvals_consumed": false,
"warden_session": "exited_0_after_self_revocation_and_helper_cleanup"
}