7713a45923
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1046b-5629-7f52-badd-f718eadb6042
27 lines
1.6 KiB
JSON
27 lines
1.6 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"lane_id": "informed-decision-sitting-requester-eso",
|
|
"ccr_id": "CCR-2026-0032",
|
|
"status": "not-executed",
|
|
"draft_only": true,
|
|
"verified": false,
|
|
"request_sha256": "83181c92b80d708246147d6ee06dafdab880ce88f4203dfc7499970aa52e312f",
|
|
"required_owner_checks": [
|
|
"Exact revision/digest and required owner reviews",
|
|
"Identity/auth claims confirmed separately; no inferred workload identity",
|
|
"Metadata/capability readback through reviewed output-suppressing owner tool",
|
|
"No Secret bodies, values or raw subprocess errors in evidence",
|
|
"Native scoped positive/negative, cleanup/revocation and rollback receipts after approval",
|
|
"ESO TokenRequest authority for informed-decision/informed-decision-eso",
|
|
"Effective role policy and TTL/max/explicit max 900s with default policy absent",
|
|
"Wrong SA/namespace/audience and sibling data GET/parent metadata LIST refused",
|
|
"SecretSynced, safe annotation helper and exact read-only file projection",
|
|
"Native RS256 requester exchange: exact subject/audience/tenant/role; approval:create only; excess scopes refused",
|
|
"Rotating callback rereads projection; issuer predecessor refusal under separate approved rotation",
|
|
"Reader expiry/revocation, attended-session cleanup and retained target Secret disposition",
|
|
"Owner immutable runtime/config and named verification/abort owner"
|
|
],
|
|
"helper": "scripts/informed_decision_requester_metadata.py",
|
|
"proposed_driver_and_metadata_abort_owner": "Bernd Worsch; confirm attendance at execution window",
|
|
"runtime_verification_owner": null
|
|
}
|