railiance-platform/docs/evidence/mas-backup-reader-boundary-2026-11-03.json
codex 98e2cad1cc Admit MAS backup node delivery for CCR-2026-0062 after the live reader boundary proof.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 4541@bnt-lap001
Assistant-Session: 2099b3aa-d7d9-49a9-ab4e-fa8b7d0e39e8
2026-11-03 05:52:28 +01:00

56 lines
1.5 KiB
JSON

{
"application": "mas",
"checked_at": "2026-11-03T04:51:03.273085+00:00",
"cluster_uid": "a553c742-0115-43d4-99a4-a5ca56fe0786",
"expected_kv_version": 1,
"jwt_binding": true,
"kv_path": "platform/data/workloads/mas/backup-primary",
"negative": {
"admin_policy_list": 403,
"foreign_role_login": 403,
"kv_write": 403,
"metadata_read": 403,
"parent_list": 403,
"passed": true,
"second_sibling_data_read": 403,
"sibling_data_read": 403,
"tokens_revoked": true,
"wrong_audience_login": 403
},
"passed": true,
"policy": "workload-kv-read-mas-backup-primary",
"positive": {
"encoding_ok": true,
"field_names": [
"AWS_ACCESS_KEY_ID",
"AWS_SECRET_ACCESS_KEY"
],
"fields_distinct": true,
"kv_deleted": false,
"kv_destroyed": false,
"kv_version": 1,
"lease_duration": 300,
"login_policies": [
"workload-kv-read-mas-backup-primary"
],
"login_status": 200,
"passed": true,
"read_status": 200,
"token": {
"explicit_max_ttl": 300,
"identity_policies": [],
"num_uses": 3,
"period": 0,
"policies": [
"workload-kv-read-mas-backup-primary"
],
"ttl": 300
},
"token_revoked": true
},
"role": "mas-backup-primary-workload-kv-read",
"runner": "attended: founder ran scripts/backup_reader_boundary_probe.py (d41c5ac) as root on railiance01",
"schema": "platform.backup-reader-boundary.v1",
"service_account": "mas/backup-primary-delivery",
"values_recorded": false
}