CCR-2026-0043 applied cleanly, but generate could not mint the grant token (OpenBao refuses child tokens from a limited-use token; the role had token_num_uses 8) and revoke-self was denied (missing from the issuer policy). The role now uses 0, which the validator requires, and the issuer policy grants revoke-self. Nothing was written by the probe. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 469992@bnt-lap001 Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9 |
||
|---|---|---|
| .. | ||
| coding-agent-approle.json | ||
| coding-agent-jwt-role.json | ||
| credential-broker-keycape-client-secret-generate-oidc-role.json | ||
| external-secrets-keycape-secrets-engine-openbao.draft.json | ||
| fluid-telegram-hall-of-helix-oidc-role.json | ||
| informed-decision-sitting-requester-eso.draft.json | ||
| keycape-oidc-config.json | ||
| keycape-services-config.json | ||
| netkingdom-oidc-config.json | ||
| netkingdom-platform-admin-role.json | ||
| secrets-engine-jwt-role.json | ||