df24a77482
Correct the KV path into platform/workloads/, record secrets-engine consumer coordinates (D1-D4 pending), rotation ownership, live order and rollback, and add a decision-gated custody child with fake-only tests. Nothing executed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 132360@bnt-lap001 Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b
16 lines
682 B
JSON
16 lines
682 B
JSON
{
|
|
"schema_version": 1,
|
|
"lane_id": "keycape-secrets-engine-openbao-eso",
|
|
"ccr_id": "CCR-2026-0033",
|
|
"status": "not-executed",
|
|
"draft_only": true,
|
|
"verified": false,
|
|
"request_sha256": "ade2e10b0f65341051b955900c68931bdd56fd3a81bf452ae81229cc2390ad63",
|
|
"required_owner_checks": [
|
|
"Exact revision/digest and required owner reviews",
|
|
"Identity/auth claims confirmed separately; no inferred workload identity",
|
|
"Metadata/capability readback through reviewed output-suppressing owner tool",
|
|
"No Secret bodies, values or raw subprocess errors in evidence",
|
|
"Native scoped positive/negative, cleanup/revocation and rollback receipts after approval"
|
|
]
|
|
}
|