c924ff2279
- CCR-2026-0040/0043 re-applied 2026-10-10T09:15Z. Probe: generated v1, a second run refused (already_present), tokens revoked, no value read, probe entry deleted. Receipts in docs/evidence. - CCR-2026-0038: login proof passed (secrets-engine a963a77); the consumer contract is published at docs/contracts/secrets-engine-openbao-jwt-login.yaml. RPF-WP-0035-T02 still waits on the negative claim checks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 469992@bnt-lap001 Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
8 lines
487 B
YAML
8 lines
487 B
YAML
# Consumer contract for secrets-engine service-JWT login to OpenBao (CCR-2026-0038).
|
|
# Published by railiance-platform 2026-10-10 after the login proof passed
|
|
# (secrets-engine docs/evidence/2026-10-10-keycape-openbao-probe.json, a963a77).
|
|
# Non-secret. Point SECRETS_ENGINE_OPENBAO_JWT_LOGIN at a copy of this file.
|
|
# Identical to the founder's probe input; that local copy may be kept as is.
|
|
mount: keycape-services
|
|
role: secrets-engine-openbao
|
|
bound_issuer: https://kc.coulomb.social
|