codex 6bf31b61cf agent-high-risk-boundary: deny agent reads of the core-hub Forgejo source token (CCR-2026-0031) ... Matches the policy-nexus entries; ops-warden now lists the path as high-risk (catalog 2f8387c, generated paths f1e25c3). make agent-high-risk-boundary-check: ok. Live apply needs an attended platform-admin session. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3		2026-10-03 12:57:47 +02:00
..
auth	Prepare tenant-zero OpenBao roles and review platform essentials	2026-09-27 16:43:32 +02:00
eso-auth-recovery	RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect	2026-09-21 19:18:59 +02:00
policies	agent-high-risk-boundary: deny agent reads of the core-hub Forgejo source token (CCR-2026-0031)	2026-10-03 12:57:47 +02:00
ssh	fix(openbao): complete SSH apply script for OpenBao 2.5.x issuers	2026-06-18 01:18:56 +02:00
state-hub-preflight	fix(security): prevent ESO copying source annotations (CUST-WP-0073)	2026-09-28 15:56:50 +02:00