coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/scripts
History
codex 041f6bdc51
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details
Preserve writable OIDC fields on the loopback callback update. 
The second attended attempt spawned the owner command, then failed closed.
Stop posting the entire role read-back and requiring exact dict equality.
Write a metadata receipt so the next failure has a class, not silence.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
2026-09-15 02:23:22 +02:00
..
native_factory_probe Exercise fsGroup startup through the corrected producer helper 2026-09-11 12:41:50 +02:00
operator-browser Restore contained attended browser launch on WSL without xdg-utils 2026-09-06 00:44:08 +02:00
activate_forgejo_primary_backup.py Define scoped Forgejo native backup on the Scaleway primary 2026-09-06 00:48:25 +02:00
agent_high_risk_boundary.py Finish coding-agent high-risk boundary coverage 2026-08-22 10:03:54 +02:00
apply-ccr0019-binding.py Bind secrets-engine approval reader to confirmed operator group 2026-09-14 01:30:23 +02:00
approval-client-delivery-check.py Verify scoped approval client delivery through attended reader session 2026-09-14 01:46:45 +02:00
approval-client-reader-preflight.py Verify scoped approval client delivery through attended reader session 2026-09-14 01:46:45 +02:00
audit-core-database-lease-recovery.py Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
audit-core-recovery-preflight.py Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
audit-core-whitehat-e2-credentials-02.py Harden remote kubectl argument quoting 2026-08-22 21:25:20 +02:00
audit-core-whitehat-e2-credentials.py Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
backup_retention_plan.py Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
capture-apps-pg-evidence.py Finish RAILIANCE-WP-0016 apps-pg resource evidence 2026-08-14 02:05:25 +02:00
capture-reef-deployables.py Close RAILIANCE-WP-0015-T02 platform rapp schema convergence 2026-08-14 00:39:06 +02:00
capture_forgejo_archive.py Bind essentials recovery to explicit manifest and verified offsite provenance 2026-09-06 09:25:26 +02:00
capture_service_observation.py Advance blocked assurance and operator callback work 2026-09-06 14:16:49 +02:00
cleanup_nextcloud_recovery_fixture.py Bound rejected backup fixture cleanup to successful replacement recovery 2026-09-06 01:05:27 +02:00
consumption_mode.py Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
create-t03-approval-requests.py Provision scoped T03 requester custody and native requests 2026-09-14 02:47:32 +02:00
credential-change.py Cancel withdrawn approval operator reader without inventing auth 2026-09-10 08:10:33 +02:00
credential-grants-validate.py Close RAILIANCE-WP-0015-T06 rapp credential-lane binding 2026-08-14 00:47:28 +02:00
credential.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00
custody-projection.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
custody_contract.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
decrypt_primary_forgejo_archive.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
deploy_verified_backup_bundle.py Deliver validated backup capture to worker via immutable runtime bundle 2026-09-05 22:32:30 +02:00
execute_nextcloud_retention.py Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
factory_audit_custody.py Record live receiver gate and isolate readiness from attestation jobs 2026-09-11 07:26:16 +02:00
factory_audit_delivery.py feat: deliver approved factory audit sender custody 2026-09-11 09:38:27 +02:00
forgejo-admin-pat-provision.sh Apply CCR-2026-0006 Forgejo admin PAT lane metadata 2026-07-12 16:07:32 +02:00
forgejo_essentials_profile.py Bind essentials recovery to explicit manifest and verified offsite provenance 2026-09-06 09:25:26 +02:00
forgejo_package_prune.py Refuse prune apply when requested image inventories are unavailable 2026-09-05 02:00:50 +02:00
keycape-approval-custody-preflight.py docs(custody): record attended KeyCape first-provision authority proof 2026-09-08 22:40:04 +02:00
keycape_approval_custody.py feat: verify live KeyCape custody and preserve versions on resume 2026-09-09 02:18:12 +02:00
keycape_factor_acceptance.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_activate.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_bootstrap.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_delivery_probe.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_eso_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_provider.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_recovery.py Implement audited lost-factor recovery and track remaining P04 acceptance 2026-09-13 17:28:45 +02:00
keycape_factor_renew.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
keycape_factor_renewal_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
migrate_nextcloud_backup_account.py Accept file-drop method-not-allowed denial response 2026-09-05 20:47:49 +02:00
native_factory_acceptance.py Exercise fsGroup startup through the corrected producer helper 2026-09-11 12:41:50 +02:00
openbao-apply-credential-change-appliers.py Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
openbao-apply-external-secrets-issue-core.sh Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
openbao-apply-initial-config.sh Add ESO OpenBao GitOps add-ons 2026-06-25 20:08:36 +02:00
openbao-apply-operator-loopback-callback.sh Advance blocked assurance and operator callback work 2026-09-06 14:16:49 +02:00
openbao-apply-policy-nexus-source-ccr.sh Add contained Policy Nexus CCR apply wrapper 2026-08-31 23:12:16 +02:00
openbao-apply-ssh-engine.sh fix(openbao): complete SSH apply script for OpenBao 2.5.x issuers 2026-06-18 01:18:56 +02:00
openbao-apply-token-grants.py Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
openbao-apply-workload-kv-lanes.sh Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00
openbao-attended-exec.py Require an absolute owner command after attended OpenBao login. 2026-09-15 02:16:42 +02:00
openbao-bootstrap-policy-nexus-source.sh Add attended Policy Nexus source bootstrap 2026-08-31 23:24:05 +02:00
openbao-public-listener-transition.sh feat(RAILIANCE-WP-0027): prepare operator-only OpenBao access 2026-08-23 12:50:23 +02:00
openbao-tune-auth-listing.sh Fix OpenBao login falling back to token auth 2026-06-19 21:04:31 +02:00
openbao-ui-overlay-apply.sh feat(RAILIANCE-WP-0027): prepare operator-only OpenBao access 2026-08-23 12:50:23 +02:00
openbao-validate-emergency-drill-evidence.sh Reject placeholder OpenBao drill evidence 2026-06-02 02:02:09 +02:00
openbao-validate-restore-evidence.sh Reject placeholder OpenBao drill evidence 2026-06-02 02:02:09 +02:00
openbao-verify-authenticated.sh feat(openbao): enable bao.coulomb.social ingress and Traefik middlewares 2026-06-18 01:23:02 +02:00
openbao-verify-login-overlay.sh feat(RAILIANCE-WP-0027): prepare operator-only OpenBao access 2026-08-23 12:50:23 +02:00
openbao-verify-ssh-engine.sh feat(openbao): add SSH engine automation for ops-warden signing 2026-06-18 01:06:43 +02:00
openbao-verify-token-grants.py Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
openbao-verify.sh Configure OpenBao file audit declaratively 2026-06-01 22:12:23 +02:00
openbao_open_questions_session.py Run the custody session through a Make target, and give the runner a shebang 2026-09-10 08:15:41 +02:00
openbao_operator_loopback_callback.py Preserve writable OIDC fields on the loopback callback update. 2026-09-15 02:23:22 +02:00
prepare-glas-anthropic.py feat: verify Anthropic custody through metadata only 2026-09-05 21:15:14 +02:00
provision-policy-nexus-forgejo-source.py Activate Policy Nexus source credential lane 2026-09-01 01:35:48 +02:00
provision-t03-requester.py Provision scoped T03 requester custody and native requests 2026-09-14 02:47:32 +02:00
recovery_evidence.py Validate OpenBao snapshot evidence and record assurance closure gates 2026-09-06 15:24:58 +02:00
refresh_live_images.py Add failure-safe cluster image capture hook 2026-09-05 10:04:38 +02:00
remote_exec.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
repair_eso_kubernetes_auth.py Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
restore_forgejo_offsite_locally.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
restore_telemetry_essentials.py Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
scaleway_forgejo_archive.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
service_assurance.py Implement S3 service assurance and admission checks 2026-09-05 11:43:55 +02:00
state_hub_preflight_lane.py Allow bounded ESO token self-validation and cleanup 2026-09-05 16:47:26 +02:00
state_hub_signing_acceptance.py Require signature rejection in predecessor acceptance 2026-09-05 17:58:01 +02:00
t03-attended-delivery.py Prepare contained native execution of the three approved T03 actions 2026-09-14 03:21:49 +02:00
t03-native-execution.py Retain attended preflight failure diagnostics before a safe retry 2026-09-14 03:46:29 +02:00
telemetry_grafana_access.py Establish attended telemetry Grafana custody and record private activation 2026-09-06 22:36:09 +02:00
telemetry_grafana_custody.py Establish attended telemetry Grafana custody and record private activation 2026-09-06 22:36:09 +02:00
telemetry_primary_archive.py Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
verify_coding_agent_approle.py Finish coding-agent high-risk boundary coverage 2026-08-22 10:03:54 +02:00
verify_nextcloud_offsite_restore.py Record archive recovery lifecycle and validate receipt provenance 2026-09-06 14:53:15 +02:00
verify_scaleway_primary_restore.py Extend isolated Scaleway recovery checks to Forgejo database metadata 2026-09-06 00:51:55 +02:00
wp0024-owner-review.py Report WP-0024 approvals by task 2026-08-22 14:57:52 +02:00
wp0024-t02-driver-candidate.py Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00
wp0025-broker-readiness.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00