codex 15184aaa01 CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) ... ACTIVITY-WP-0039-T02. Add read on the two exact worker-token paths to workload-kv-read-activity-core-eso, one CCR per worker identity. Adds scripts/openbao-policy-sync.sh, a silent attended policy writer that refuses undeclared live drift and verifies on readback. Not applied; CCRs await platform-operator and activity-core-owner approval. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4		2026-09-23 20:00:40 +02:00
..
auth	Declare live platform-admin role and policies; add attended admin check	2026-09-23 19:27:25 +02:00
eso-auth-recovery	RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect	2026-09-21 19:18:59 +02:00
policies	CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)	2026-09-23 20:00:40 +02:00
ssh	fix(openbao): complete SSH apply script for OpenBao 2.5.x issuers	2026-06-18 01:18:56 +02:00
state-hub-preflight	fix: preserve unrelated live boundary rules during signing lane apply	2026-09-05 16:43:47 +02:00