railiance-platform/openbao/policies
tegwick 347226eb36
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
CCR-2026-0004: capabilities-safe verify + agent high-risk boundary
Record WP-0026 T07 promotion evidence (no secret values), mark the
offsite backup lane front door resolvable/ready, and add OpenBao policy
agent-high-risk-boundary for coding-agent metadata-only access.
2026-07-16 23:26:28 +02:00
..
agent-high-risk-boundary.hcl CCR-2026-0004: capabilities-safe verify + agent high-risk boundary 2026-07-16 23:26:28 +02:00
credential-broker-warden-sign-issuer.hcl feat: add credential broker token helper 2026-06-27 00:06:03 +02:00
credential-change-nonprod-applier.hcl Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
credential-change-prod-applier.hcl Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
external-secrets-activity-core.hcl Support activity-core ISSUE_CORE_API_KEY ExternalSecret on railiance01 2026-07-08 00:04:59 +02:00
external-secrets-forgejo.hcl Add OpenBao External Secrets lane for Forgejo mailer on railiance01 2026-07-07 14:30:02 +02:00
external-secrets-issue-core.hcl Add ESO OpenBao GitOps add-ons 2026-06-25 20:08:36 +02:00
platform-admin.hcl Platform secret setup 2026-05-23 13:59:58 +02:00
platform-readonly.hcl Platform secret setup 2026-05-23 13:59:58 +02:00
warden-sign.hcl feat(openbao): add SSH engine automation for ops-warden signing 2026-06-18 01:06:43 +02:00
workload-kv-read-forgejo-admin.hcl Add CCR-2026-0006 Forgejo admin PAT OpenBao lane 2026-07-12 16:01:53 +02:00
workload-kv-read-forgejo-mailer.hcl Add OpenBao External Secrets lane for Forgejo mailer on railiance01 2026-07-07 14:30:02 +02:00
workload-kv-read-issue-core-runtime.hcl Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
workload-kv-read-llm-connect-provider-secrets.hcl Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
workload-kv-read-railiance-backup-offsite-lane.hcl Establish railiance backup credentials in OpenBao (CCR-2026-0004). 2026-07-07 17:16:30 +02:00
workload-kv-read-reuse-surface-runtime.hcl Draft CCR-2026-0005 for reuse-surface runtime secrets lane 2026-07-07 22:21:31 +02:00
workload-kv-read-template.hcl Platform secret setup 2026-05-23 13:59:58 +02:00
workload-kv-read-whynot-design-npm-publish.hcl Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00