..
agent-high-risk-boundary.hcl
CCR-2026-0008 active: tenants/binky/qonto-api lane live
2026-07-21 21:42:10 +02:00
credential-broker-warden-sign-issuer.hcl
feat: add credential broker token helper
2026-06-27 00:06:03 +02:00
credential-change-nonprod-applier.hcl
Close delegated prod applier pilot
2026-07-01 23:34:13 +02:00
credential-change-prod-applier.hcl
Close delegated prod applier pilot
2026-07-01 23:34:13 +02:00
external-secrets-activity-core.hcl
Document activity-core ESO read of forgejo-admin
2026-07-21 23:19:10 +02:00
external-secrets-forgejo.hcl
Add OpenBao External Secrets lane for Forgejo mailer on railiance01
2026-07-07 14:30:02 +02:00
external-secrets-issue-core.hcl
Add ESO OpenBao GitOps add-ons
2026-06-25 20:08:36 +02:00
platform-admin.hcl
openbao: grant platform-admin access to tenants/ mount
2026-07-17 00:31:09 +02:00
platform-readonly.hcl
Platform secret setup
2026-05-23 13:59:58 +02:00
warden-sign.hcl
feat(openbao): add SSH engine automation for ops-warden signing
2026-06-18 01:06:43 +02:00
workload-kv-read-agent-harness-forgejo.hcl
feat(openbao): agent-harness forgejo deploy-key read policy
2026-07-17 23:57:54 +02:00
workload-kv-read-binky-company-email-imap.hcl
CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist
2026-07-17 00:09:28 +02:00
workload-kv-read-binky-qonto-api.hcl
CCR-2026-0008 active: tenants/binky/qonto-api lane live
2026-07-21 21:42:10 +02:00
workload-kv-read-forgejo-admin.hcl
Document activity-core ESO read of forgejo-admin
2026-07-21 23:19:10 +02:00
workload-kv-read-forgejo-mailer.hcl
Add OpenBao External Secrets lane for Forgejo mailer on railiance01
2026-07-07 14:30:02 +02:00
workload-kv-read-issue-core-runtime.hcl
Add credential lane readiness proposals
2026-06-27 23:30:29 +02:00
workload-kv-read-llm-connect-provider-secrets.hcl
Add credential lane readiness proposals
2026-06-27 23:30:29 +02:00
workload-kv-read-railiance-backup-offsite-lane.hcl
Establish railiance backup credentials in OpenBao (CCR-2026-0004).
2026-07-07 17:16:30 +02:00
workload-kv-read-reuse-surface-runtime.hcl
Draft CCR-2026-0005 for reuse-surface runtime secrets lane
2026-07-07 22:21:31 +02:00
workload-kv-read-template.hcl
Platform secret setup
2026-05-23 13:59:58 +02:00
workload-kv-read-whynot-design-npm-publish.hcl
Correct whynot credential tenant path
2026-06-28 01:00:12 +02:00