bfe65a5b05
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
137 lines
4.5 KiB
HCL
137 lines
4.5 KiB
HCL
# Agent coding read-boundary for high-risk secret lanes (WARDEN-WP-0026 T04 / WP-0028).
|
|
#
|
|
# Coding agents MUST NOT hold raw data-read on high-risk recovery/upload/admin
|
|
# or tenant mailbox secrets. Metadata + capabilities only.
|
|
|
|
# --- platform high-risk ---
|
|
path "platform/data/workloads/railiance/backup/offsite-lane" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/railiance/backup/offsite-lane" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/forgejo/forgejo-admin" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/forgejo/forgejo-admin" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/activity-core/llm-connect/llm-connect-provider-secrets" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/activity-core/llm-connect/llm-connect-provider-secrets" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/issue-core/issue-core/issue-core-runtime" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/issue-core/issue-core/issue-core-runtime" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/reuse/reuse-surface/runtime-secrets" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/reuse/reuse-surface/runtime-secrets" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/core-hub/runtime" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/core-hub/runtime" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/coulomb/whynot-design/npm-publish" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/coulomb/whynot-design/npm-publish" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/rapp-qonto/keycape-client" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/rapp-qonto/keycape-client" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/agent-harness/forgejo-deploy-key" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/agent-harness/forgejo-deploy-key" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/audit-core/senders" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/audit-core/senders" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/email-connect/transactional" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/email-connect/transactional" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/data/workloads/railiance/scaleway/bootstrap" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/railiance/scaleway/bootstrap" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
# --- tenant high-risk (WARDEN-WP-0028) ---
|
|
path "tenants/data/binky/company-email/imap" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "tenants/metadata/binky/company-email/imap" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "tenants/data/binky/qonto-api" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "tenants/metadata/binky/qonto-api" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
path "sys/capabilities-self" {
|
|
capabilities = ["update"]
|
|
}
|
|
path "auth/token/lookup-self" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "auth/token/revoke-self" {
|
|
capabilities = ["update"]
|
|
}
|
|
path "platform/data/workloads/policy-nexus/forgejo-source-read" {
|
|
capabilities = ["deny"]
|
|
}
|
|
|
|
path "platform/metadata/workloads/policy-nexus/forgejo-source-read" {
|
|
capabilities = ["deny"]
|
|
}
|
|
|
|
# RPF-WP-0035-T04: preflight signing key is API-only.
|
|
path "platform/data/workloads/state-hub/repository-rename-preflight" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/state-hub/repository-rename-preflight" {
|
|
capabilities = ["deny"]
|
|
}
|
|
|
|
# Grafana administrator custody: attended operator and ESO only.
|
|
path "platform/data/workloads/telemetry/grafana-admin" {
|
|
capabilities = ["deny"]
|
|
}
|
|
path "platform/metadata/workloads/telemetry/grafana-admin" {
|
|
capabilities = ["deny"]
|
|
}
|
|
|
|
# Approved verifier custody: CCR-2026-0017 / CCR-2026-0018.
|
|
path "platform/data/workloads/secrets-engine/approval-client" { capabilities = ["deny"] }
|
|
path "platform/data/workloads/approval-engine/operator-client" { capabilities = ["deny"] }
|
|
path "platform/metadata/workloads/secrets-engine/approval-client" { capabilities = ["deny"] }
|
|
path "platform/metadata/workloads/approval-engine/operator-client" { capabilities = ["deny"] }
|
|
|
|
# Proposed factory audit sender custody: CCR-2026-0021 / CCR-2026-0022.
|
|
path "platform/data/workloads/approval-engine/audit-sender" { capabilities = ["deny"] }
|
|
path "platform/metadata/workloads/approval-engine/audit-sender" { capabilities = ["deny"] }
|
|
path "platform/data/workloads/informed-decision/audit-sender" { capabilities = ["deny"] }
|
|
path "platform/metadata/workloads/informed-decision/audit-sender" { capabilities = ["deny"] }
|