coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/openbao/policies
History
codex 9b658e3f19
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Admit and install the backup pair writer. 
The OpenBao policy matches the reviewed file. Both publisher KV paths are still empty because the bootstrap key cannot create IAM applications.

Assistant: grok
Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54
2026-10-08 22:41:20 +02:00
..
inputs fix: preserve unrelated live boundary rules during signing lane apply 2026-09-05 16:43:47 +02:00
agent-high-risk-boundary.hcl agent-high-risk-boundary: deny agent reads of the core-hub Forgejo source token (CCR-2026-0031) 2026-10-03 12:57:47 +02:00
backup-pair-writer.hcl Admit and install the backup pair writer. 2026-10-08 22:41:20 +02:00
credential-broker-warden-sign-issuer.hcl feat: add credential broker token helper 2026-06-27 00:06:03 +02:00
credential-change-nonprod-applier.hcl Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
credential-change-prod-applier.hcl Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
external-secrets-activity-core.hcl feat(backup): multi-host CNPG Option A CLI for activity-core 2026-07-22 19:50:59 +02:00
external-secrets-audit-core.hcl Add audit-core ESO policy and ClusterSecretStore for railiance01 2026-08-13 00:58:58 +02:00
external-secrets-core-hub-database.hcl feat: add hub-core database lease projections 2026-08-21 17:30:44 +02:00
external-secrets-email-connect.hcl Add email-connect transactional SMTP and ingest custody lane. 2026-08-12 13:32:11 +02:00
external-secrets-forgejo.hcl Add OpenBao External Secrets lane for Forgejo mailer on railiance01 2026-07-07 14:30:02 +02:00
external-secrets-issue-core.hcl Add ESO OpenBao GitOps add-ons 2026-06-25 20:08:36 +02:00
external-secrets-target-revenue.hcl Add OpenBao/ESO lane for target-revenue on railiance01 2026-08-05 17:56:39 +02:00
external-secrets-whitehat-audit-e2-02.hcl Bind audit E2 retry projection to new engagement 2026-08-22 20:56:58 +02:00
external-secrets-whitehat-audit-e2.hcl Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
keycape-factor-renewer.hcl Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
operator-custody.hcl Declare live platform-admin role and policies; add attended admin check 2026-09-23 19:27:25 +02:00
platform-admin.hcl Declare live platform-admin role and policies; add attended admin check 2026-09-23 19:27:25 +02:00
platform-readonly.hcl Platform secret setup 2026-05-23 13:59:58 +02:00
secrets-engine-login-self.hcl Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00
warden-sign.hcl feat(openbao): add SSH engine automation for ops-warden signing 2026-06-18 01:06:43 +02:00
workload-kv-read-activity-core-eso.hcl CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) 2026-09-23 20:00:40 +02:00
workload-kv-read-agent-harness-forgejo.hcl feat(openbao): agent-harness forgejo deploy-key read policy 2026-07-17 23:57:54 +02:00
workload-kv-read-approval-engine-audit.hcl Prepare scoped factory audit custody and enforce receiver compatibility 2026-09-11 02:01:57 +02:00
workload-kv-read-approval-engine-operator-client.hcl Prepare the two approval client-side reader admissions 2026-09-09 14:41:01 +02:00
workload-kv-read-backup-object-storage.hcl retarget: CCR-2026-0012 is the general backup object-store lane 2026-08-14 19:19:56 +02:00
workload-kv-read-binky-company-email-imap.hcl CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist 2026-07-17 00:09:28 +02:00
workload-kv-read-binky-qonto-api.hcl CCR-2026-0008 active: tenants/binky/qonto-api lane live 2026-07-21 21:42:10 +02:00
workload-kv-read-core-hub-forgejo-source.hcl CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft 2026-10-03 08:27:56 +02:00
workload-kv-read-core-hub-runtime.hcl feat: prepare core hub platform onboarding 2026-08-20 11:18:30 +02:00
workload-kv-read-coulomb-social-backup-primary.hcl Commit the prepared backup reader for both archive pairs. 2026-10-08 22:12:34 +02:00
workload-kv-read-email-connect-backup-primary.hcl Commit the prepared backup reader for both archive pairs. 2026-10-08 22:12:34 +02:00
workload-kv-read-email-connect-transactional-eso.hcl RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect 2026-09-21 19:18:59 +02:00
workload-kv-read-email-connect-transactional.hcl Add email-connect transactional SMTP and ingest custody lane. 2026-08-12 13:32:11 +02:00
workload-kv-read-forgejo-admin.hcl Document activity-core ESO read of forgejo-admin 2026-07-21 23:19:10 +02:00
workload-kv-read-forgejo-mailer-eso.hcl Prepare bounded Kubernetes authentication recovery for three ESO lanes 2026-09-05 18:38:19 +02:00
workload-kv-read-forgejo-mailer.hcl Add OpenBao External Secrets lane for Forgejo mailer on railiance01 2026-07-07 14:30:02 +02:00
workload-kv-read-informed-decision-audit.hcl Prepare scoped factory audit custody and enforce receiver compatibility 2026-09-11 02:01:57 +02:00
workload-kv-read-informed-decision-sitting-requester-client.hcl Allocate sitting-requester CCR pair and record operator gates. 2026-09-15 02:08:39 +02:00
workload-kv-read-informed-decision-sitting-requester-eso.hcl Record native ESO result and prepare scoped self-token amendment 2026-10-04 23:21:55 +02:00
workload-kv-read-issue-core-runtime.hcl Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
workload-kv-read-keycape-approval-engine-operator.hcl Admit KeyCape approval-engine client custody paths and delivery 2026-09-08 14:53:32 +02:00
workload-kv-read-keycape-factor-read.hcl Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
workload-kv-read-keycape-informed-decision-sitting-requester.hcl Allocate sitting-requester CCR pair and record operator gates. 2026-09-15 02:08:39 +02:00
workload-kv-read-keycape-secrets-engine-approval.hcl Admit KeyCape approval-engine client custody paths and delivery 2026-09-08 14:53:32 +02:00
workload-kv-read-keycape-secrets-engine-openbao-eso.hcl Propose token self-lifecycle for the CCR-2026-0033 ESO reader 2026-10-07 02:08:40 +02:00
workload-kv-read-keycape-secrets-engine-openbao-operator.hcl Revise KeyCape secrets-engine-openbao custody: OpenBao-only, operator reader CCR-2026-0034 (source only) 2026-10-06 14:26:42 +02:00
workload-kv-read-keycape-secrets-engine-requester.hcl Provision scoped T03 requester custody and native requests 2026-09-14 02:47:32 +02:00
workload-kv-read-llm-connect-provider-secrets.hcl Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
workload-kv-read-policy-nexus-forgejo-source.hcl Approve Policy Nexus source credential lane 2026-08-31 23:03:48 +02:00
workload-kv-read-qonto-assistant.hcl Stabilize credential-change test suite (RAILIANCE-WP-0014) 2026-08-11 10:28:10 +02:00
workload-kv-read-railiance-backup-offsite-lane.hcl Establish railiance backup credentials in OpenBao (CCR-2026-0004). 2026-07-07 17:16:30 +02:00
workload-kv-read-reuse-surface-runtime-eso.hcl Prepare bounded Kubernetes authentication recovery for three ESO lanes 2026-09-05 18:38:19 +02:00
workload-kv-read-reuse-surface-runtime.hcl Draft CCR-2026-0005 for reuse-surface runtime secrets lane 2026-07-07 22:21:31 +02:00
workload-kv-read-secrets-engine-approval-client.hcl Prepare the two approval client-side reader admissions 2026-09-09 14:41:01 +02:00
workload-kv-read-secrets-engine-requester-client.hcl Provision scoped T03 requester custody and native requests 2026-09-14 02:47:32 +02:00
workload-kv-read-state-hub-rename-preflight.hcl Allow bounded ESO token self-validation and cleanup 2026-09-05 16:47:26 +02:00
workload-kv-read-target-revenue-runtime-eso.hcl Prepare bounded Kubernetes authentication recovery for three ESO lanes 2026-09-05 18:38:19 +02:00
workload-kv-read-target-revenue-runtime.hcl Add OpenBao/ESO lane for target-revenue on railiance01 2026-08-05 17:56:39 +02:00
workload-kv-read-template.hcl Platform secret setup 2026-05-23 13:59:58 +02:00
workload-kv-read-tenant-engine-audit-core-sender-eso.hcl RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test 2026-10-03 00:16:49 +02:00
workload-kv-read-whynot-design-npm-publish.hcl Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00