coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/docs/credential-lane-designs
History
codex bed91ceaf2
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 
- New CCR request type workload-kv-operator-matrix (scripts/operator_matrix_lane.py):
  exact per-entry create/read/update, OIDC role on the existing netkingdom mount,
  and exact agent denies appended to the live agent-high-risk-boundary (live
  content preserved, partial presence refused). credential-change.py now
  dispatches lane request types through one module table.
- CCR-2026-0039 (proposed): hall-of-helix four-entry matrix at tenant coulomb
  per the founder ruling of 2026-10-09; policy, role and overlay sources.
- scripts/fluid_telegram_custody_move.py: silent CAS-0 move of the four
  undocumented infotech entries, deleting sources only after all verify.
- scripts/kv_duplicate_retire.py: silent retirement of
  activity-core/default/llm-connect-provider-secrets once no live non-admin
  policy grants it.
- Founder session commands recorded in the T03 note.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 469992@bnt-lap001
Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
2026-10-09 12:10:21 +02:00
..
activity-core-repo-manager-forgejo-read.md Draft the activity-core repo-manager Forgejo read lane (proposed) 2026-10-04 16:30:36 +02:00
application-backup-delivery-2026-10-08.md Commit the prepared backup reader for both archive pairs. 2026-10-08 22:12:34 +02:00
application-backup-pair-custody-2026-10-08.md Admit and install the backup pair writer. 2026-10-08 22:41:20 +02:00
core-hub-forgejo-source-read.md CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft 2026-10-03 08:27:56 +02:00
coulomb-paired-backup-primary.md Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
factory-audit-senders-review.md Record native sender acceptance and retained audit readback gate 2026-09-11 14:23:07 +02:00
factory-native-acceptance.md Record native sender acceptance and retained audit readback gate 2026-09-11 14:23:07 +02:00
fluid-telegram-operator-kv.md RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 2026-10-09 12:10:21 +02:00
informed-decision-requester-workload-input.yaml Prepare informed-decision workload reader and contained metadata child 2026-10-04 08:59:02 +02:00
informed-decision-requester-workload.md Accept native requester delivery proofs and preserve final cutover gate 2026-10-04 23:50:18 +02:00
keycape-approval-client-side-readers.md Cancel withdrawn approval operator reader without inventing auth 2026-09-10 08:10:33 +02:00
keycape-approval-clients-review.md feat: verify live KeyCape custody and preserve versions on resume 2026-09-09 02:18:12 +02:00
keycape-approval-clients.md feat: verify live KeyCape custody and preserve versions on resume 2026-09-09 02:18:12 +02:00
keycape-secrets-engine-openbao-issuer-input.yaml Finalize proposed CCR-2026-0033 and its attended custody child (source only). 2026-10-06 13:46:12 +02:00
railiance-clock-host-delivery.md Record verified production Clock custody and authority acceptance 2026-09-15 23:13:13 +02:00
README.md CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft 2026-10-03 08:27:56 +02:00
secrets-engine-service-jwt.md RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao 2026-10-09 00:31:47 +02:00
state-hub-preflight-activation.md Complete live State Hub signing activation and rotation acceptance 2026-09-05 18:12:37 +02:00
state-hub-preflight-signing.md Complete live State Hub signing activation and rotation acceptance 2026-09-05 18:12:37 +02:00
t03-renewed-execution.md Point the OpenRouter cycle at memo version 3. 2026-09-27 15:33:09 +02:00
telemetry-grafana.md Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
tenant-engine-audit-core-sender-seed.md tenant-engine audit-core sender seed: founder approval recorded (MASON-WP-0007-T05) 2026-10-03 08:35:24 +02:00

README.md

Pending credential lane designs

Reviewed against local owner source on 2026-09-05. These are proposed designs, not approvals or executable CCRs. No live credentials or OpenBao objects were created. Files here are deliberately outside the production CCR/policy scan, except the KeyCape approval-client admission below, which carries executable CCRs (CCR-2026-0017/0018) that remain proposed and unapplied.

Design Design workplan / current implementation task Consumer dependency Main unresolved input
Secrets-engine service JWT RPF-WP-0032 (finished) / RPF-WP-0035-T02 SECRETS-WP-0008-T06; SECRETS-WP-0007-T04 Actual issuer/JWKS, live registration and scoped execution authority
Fluid-telegram operator KV RPF-WP-0033 (finished) / RPF-WP-0035-T03 MASON-WP-0005; FT-WP-0002 Tenant acceptance, actual OIDC group, write-capable CCR support
State Hub preflight signing RPF-WP-0034 (finished) / RPF-WP-0035-T04 FLEX-WP-0020-T05; STATE-WP-0085-T09 delivered Deployment binding, owner-approved custody and rotation window
KeyCape approval-engine clients RPF-WP-0035-T05 KEY-WP-0013-T02; GLAS-WP-0015 Owner approval of CCR-2026-0017/0018, attended founder window, KeyCape reading build
Approval client-side readers RPF-WP-0035-T06 SECRETS-WP-0009-T03; APPROVAL-WP-0002 Reader 1: exact operator group claim; Reader 2: the presenting actor is unnamed by any owner source
Core Hub Forgejo source read (CCR-2026-0031, proposed) CUST-WP-0075 / RAPPCOREHUB-WP-0003-T04 rapp-core-hub publisher private sources Approval + K8s binding confirmation; repo-manager identity-canon correction for 123/0

The completed design workplans are archived. RPF-WP-0035 is the canonical queue for owner review, implementation, and live acceptance still required. State Hub retirement requires revalidating the signing demand before provisioning. Proposed object names can be reviewed now; none represents a surveyed or active object. Before any secret or access request, use warden route find / warden route show as required by AGENTS.md. Keep values, bearer tokens and signing/preflight tokens out of Git, State Hub, argv and captured logs. Only the final verified contract becomes routable. No owner coordination messages were sent by this design work.

The source references use sibling checkout paths for review. Implementation approval must pin the actual revisions and rerun a metadata-only live survey.

Reviewed source revisions

Owner repository Revision
key-cape 30fa8570aaff6e03c35617b265201b2ebf2c0094
secrets-engine ebdff586fe60d165bc717f3fa1de8e037fd5502a
ops-mason f920bcad1af688197c15417257b392aec42db9e7
fluid-telegram f7af151f37a7d652fe389daf43efc9be0d3e2bc0
state-hub 2c60e5bcf76c31a2d2336f104ac9d5f01fc22e90