c924ff2279
- CCR-2026-0040/0043 re-applied 2026-10-10T09:15Z. Probe: generated v1, a second run refused (already_present), tokens revoked, no value read, probe entry deleted. Receipts in docs/evidence. - CCR-2026-0038: login proof passed (secrets-engine a963a77); the consumer contract is published at docs/contracts/secrets-engine-openbao-jwt-login.yaml. RPF-WP-0035-T02 still waits on the negative claim checks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 469992@bnt-lap001 Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
94 lines
4 KiB
JSON
94 lines
4 KiB
JSON
{
|
|
"actor": "founder",
|
|
"ccrs": [
|
|
"CCR-2026-0040",
|
|
"CCR-2026-0043"
|
|
],
|
|
"date": "2026-10-10",
|
|
"note": "Receipts copied verbatim (no values). First attempt failed at grant token creation (limited-use caller token) and wrote nothing; fixed in 6f77484, both CCRs re-applied. Caller token after fix: policies [credential-broker-keycape-client-secret-generate-issuer], num_uses 0. Probe entry metadata-deleted afterwards by platform-admin.",
|
|
"receipts": {
|
|
"dry_run": {
|
|
"case_ref": "probe-secret-generate-20261010@sha256:9cb9b2da16f4a8e5a6dfccad23d1849110485d452e098ff8cbd7a4066447e956",
|
|
"case_verified": true,
|
|
"client_id": "probe-secret-generate-20261010",
|
|
"credential_values_emitted": false,
|
|
"exit_code": 0,
|
|
"grant": "keycape/client-secret-generate",
|
|
"grant_token_revoked": true,
|
|
"mode": "dry-run",
|
|
"outcome": "dry_run_would_generate",
|
|
"path": "platform/workloads/keycape/probe-secret-generate-20261010",
|
|
"schema": "platform.keycape-client-secret-generate.v1",
|
|
"value_reads": 0
|
|
},
|
|
"first_attempt_1": {
|
|
"case_ref": "probe-secret-generate-20261010@sha256:9cb9b2da16f4a8e5a6dfccad23d1849110485d452e098ff8cbd7a4066447e956",
|
|
"case_verified": true,
|
|
"client_id": "probe-secret-generate-20261010",
|
|
"credential_values_emitted": false,
|
|
"exit_code": 4,
|
|
"grant": "keycape/client-secret-generate",
|
|
"mode": "generate",
|
|
"outcome": "grant_token_create_failed",
|
|
"path": "platform/workloads/keycape/probe-secret-generate-20261010",
|
|
"schema": "platform.keycape-client-secret-generate.v1",
|
|
"value_reads": 0
|
|
},
|
|
"first_attempt_2": {
|
|
"case_ref": "probe-secret-generate-20261010@sha256:9cb9b2da16f4a8e5a6dfccad23d1849110485d452e098ff8cbd7a4066447e956",
|
|
"case_verified": true,
|
|
"client_id": "probe-secret-generate-20261010",
|
|
"credential_values_emitted": false,
|
|
"exit_code": 4,
|
|
"grant": "keycape/client-secret-generate",
|
|
"mode": "generate",
|
|
"outcome": "grant_token_create_failed",
|
|
"path": "platform/workloads/keycape/probe-secret-generate-20261010",
|
|
"schema": "platform.keycape-client-secret-generate.v1",
|
|
"value_reads": 0
|
|
},
|
|
"first_attempt_dry_run": {
|
|
"case_ref": "probe-secret-generate-20261010@sha256:9cb9b2da16f4a8e5a6dfccad23d1849110485d452e098ff8cbd7a4066447e956",
|
|
"case_verified": true,
|
|
"client_id": "probe-secret-generate-20261010",
|
|
"credential_values_emitted": false,
|
|
"exit_code": 4,
|
|
"grant": "keycape/client-secret-generate",
|
|
"mode": "dry-run",
|
|
"outcome": "grant_token_create_failed",
|
|
"path": "platform/workloads/keycape/probe-secret-generate-20261010",
|
|
"schema": "platform.keycape-client-secret-generate.v1",
|
|
"value_reads": 0
|
|
},
|
|
"generate": {
|
|
"case_ref": "probe-secret-generate-20261010@sha256:9cb9b2da16f4a8e5a6dfccad23d1849110485d452e098ff8cbd7a4066447e956",
|
|
"case_verified": true,
|
|
"client_id": "probe-secret-generate-20261010",
|
|
"credential_values_emitted": false,
|
|
"exit_code": 0,
|
|
"grant": "keycape/client-secret-generate",
|
|
"grant_token_revoked": true,
|
|
"kv_version": 1,
|
|
"mode": "generate",
|
|
"outcome": "generated",
|
|
"path": "platform/workloads/keycape/probe-secret-generate-20261010",
|
|
"schema": "platform.keycape-client-secret-generate.v1",
|
|
"value_reads": 0
|
|
},
|
|
"second_generate_refused": {
|
|
"case_ref": "probe-secret-generate-20261010@sha256:9cb9b2da16f4a8e5a6dfccad23d1849110485d452e098ff8cbd7a4066447e956",
|
|
"case_verified": true,
|
|
"client_id": "probe-secret-generate-20261010",
|
|
"credential_values_emitted": false,
|
|
"exit_code": 3,
|
|
"grant": "keycape/client-secret-generate",
|
|
"grant_token_revoked": true,
|
|
"mode": "generate",
|
|
"outcome": "already_present",
|
|
"path": "platform/workloads/keycape/probe-secret-generate-20261010",
|
|
"schema": "platform.keycape-client-secret-generate.v1",
|
|
"value_reads": 0
|
|
}
|
|
},
|
|
"schema": "platform.evidence.rpf-wp-0054-t05-probe.v1"
|
|
}
|