coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
S3 Platform Services — PostgreSQL HA, Valkey, object storage
1078 commits 2 branches 0 tags 20 MiB
Find a file
codex ba445d7aed
Some checks failed
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details
CCR intake gate / gate (push) Has been cancelled
Details
RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 
The founder acknowledged oidc-service-client 0.2 on 2026-11-01 (memo r2, hub
decision f8044f81, net-kingdom 9ce0d60), meeting the RPF-WP-0060-T01 rule
from review R1. keycape_client_secret_generate.py pins the 0.2 type bytes,
keys parameter pins by exact type reference, and derives confidentiality per
type: browser 1.1 keeps its client_type check, the service type is
confidential by construction (no client_type, unconditional custody path);
a service case carrying client_type is refused. Create-only is unchanged.
Eleven new tests; the existing browser tests are unchanged apart from the
re-keyed pin. CCR-2026-0060/0061 match the 0.2 materialization; references
updated, still proposed. T09 (wait) tracks their approval and apply.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-11-01 10:24:17 +01:00
.claude/rules Retire gitea-db Make targets (complete 4a91b85; RAPPS-WP-0019-T05) 2026-10-22 00:09:03 +02:00
.forgejo/workflows RPF-WP-0061-T03: install jsonschema in CCR intake gate 2026-10-18 12:39:38 +02:00
argocd Point bao-notice at the rapp-openbao copy of the page. 2026-10-23 17:42:39 +02:00
assurance RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished 2026-09-24 00:48:24 +02:00
config/playwright Prepare Playwright consumer credentials and identity activation handoff 2026-10-13 21:21:58 +02:00
credential-change-requests RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00
credential-grants RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00
data/consumption-mode Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
docs oidc-service-client 0.1 owner review; draft CCR-2026-0060/0061 (proposed) 2026-10-31 23:03:46 +01:00
examples/catalog-lane-scaffold Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
helm RPF-WP-0063-T01: prepare wave-2 requests (ESO, openbao UI gateway, forgejo-db) 2026-10-22 00:05:54 +02:00
history Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
intakes Activate Playwright pilot with scoped consumer group and native evidence 2026-10-13 20:55:31 +02:00
interfaces RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note 2026-10-15 00:24:15 +02:00
lib fix(backup): send required public DAV upload marker 2026-10-03 21:20:21 +02:00
manifests feat: declare proposed fixed KeyCape issuer ESO source contract 2026-10-17 20:36:52 +02:00
openbao RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00
registry RPF-WP-0061-T01/T02: standard lane profile and self-service CCR submit/review-standard 2026-10-18 12:29:47 +02:00
requirements Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
reviews RPF-WP-0015-T03: GO record cites round-7 approvals, custodian key check, E2 follow-up date 2026-10-14 20:07:13 +02:00
schemas Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
scripts RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00
tests RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00
tools Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
workplans RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00
.generated-work-records.json build: adopt staged records and retain reviewed orientation snapshot 2026-10-19 13:30:55 +02:00
.generated-work-records.mk build: adopt staged records and retain reviewed orientation snapshot 2026-10-19 13:30:55 +02:00
.gitignore build: keep generated orientation brief local and untracked 2026-10-19 13:44:04 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
.sops.yaml Finish architecture-cleanup RAILIANCE-WP-0016 T05 2026-08-15 14:43:44 +02:00
AGENTS.md Document credential lane designs and adopt fast projection sync 2026-09-05 10:41:56 +02:00
ArchitectureBlueprint.md Decide blueprint 5.6 (adopt ArgoCD) and plan phase B adoption on railiance01. 2026-09-21 18:44:51 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:39 +02:00
INTENT.md Apply GH-DEC-2026-017 to the layer declaration. 2026-09-21 07:35:24 +02:00
layer.yaml Apply GH-DEC-2026-017 to the layer declaration. 2026-09-21 07:35:24 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:54:20 +02:00
Makefile RPF-WP-0067: owner answers for NK-WP-0040-T02 and value-safe identity metadata exporter for NK-WP-0054-T04 2026-10-28 09:52:15 +01:00
SCOPE.md SCOPE: record RPF-WP-0062 supervised agent observer access and OpenBao agt role fixes 2026-10-20 23:59:04 +02:00
tenancy.yaml Fix apps-pg tenancy evidence declaration 2026-08-23 13:21:42 +02:00
WORK-RECORDS.md RPF-WP-0069-T08: broker admits oidc-service-client@0.2; CCR-2026-0060/0061 aligned to 0.2 2026-11-01 10:24:17 +01:00