codex c921aa0aed RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate ... Silent generate-in-custody: verifies the SecurityCase file (digest, type, materialized, confidential, client_id) per ops-warden 23985370, mints the 5m create-only grant token from the caller's session, proves absence, writes once with CAS 0, verifies by metadata only and revokes the token. Agents, root and callers without the issuer policy are refused. Secret length awaits key-cape. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 469992@bnt-lap001 Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9		2026-10-09 20:12:44 +02:00
..
test_application_archive_retention_plan.py	Prepare immutable application archive transfer and retention admission	2026-10-07 23:23:33 +02:00
test_application_backup_credentials.py	Accept both backup readers and deliver the email-connect pair.	2026-10-09 00:05:35 +02:00
test_application_backup_pair_custody.py	Accept both backup readers and deliver the email-connect pair.	2026-10-09 00:05:35 +02:00
test_approval_client_reader.py	Verify scoped approval client delivery through attended reader session	2026-09-14 01:46:45 +02:00
test_apps_pg_capacity.py	Land RPF-WP-0039 third apps-pg consumer source.	2026-09-15 01:29:38 +02:00
test_archive_receipt_lifecycle.py	Close verified incident task and finish local workplan loose ends	2026-09-27 19:04:54 +02:00
test_archive_recovery_evidence.py	Close verified incident task and finish local workplan loose ends	2026-09-27 19:04:54 +02:00
test_audit_core_database_lease_recovery.py
test_audit_core_recovery_preflight.py
test_audit_core_whitehat_e2_credentials.py
test_audit_core_whitehat_e2_credentials_02.py
test_authelia_smtp_delivery.py	Prepare attended scoped platform mailbox admission for Authelia	2026-10-06 19:30:59 +02:00
test_backup_credential_contract_export.py	Accept both backup readers and deliver the email-connect pair.	2026-10-09 00:05:35 +02:00
test_backup_credentials.py	fix(backup): send required public DAV upload marker	2026-10-03 21:20:21 +02:00
test_backup_retention_plan.py	Verify full and essentials recovery and implement bounded retention tooling	2026-09-06 11:10:50 +02:00
test_backup_tiers.py	Bind essentials recovery to explicit manifest and verified offsite provenance	2026-09-06 09:25:26 +02:00
test_broker_grant_lane.py	RPF-WP-0054: record CCR-2026-0040 apply; fix State Hub evidence crash for prefix lanes	2026-10-09 19:20:21 +02:00
test_catalog_lane_scaffold.py	Implement offline catalog lane scaffold generation	2026-10-04 02:24:40 +02:00
test_consumption_mode.py
test_core_hub_forgejo_source_provision.py	CCR-2026-0031: choose the private probe repo with the admin token	2026-10-03 10:07:54 +02:00
test_credential_change.py	Allow platform/suppliers/<supplier>/<account> in credential-change applier	2026-10-09 11:47:09 +02:00
test_credential_change_appliers.py
test_credential_grants.py
test_credential_helper.py
test_custody_contract.py
test_custody_projection.py
test_digest_retention.py	Protect digest-pinned packages and refuse partial-inventory pruning	2026-09-27 16:00:51 +02:00
test_eso_auth_recovery.py
test_eso_token_renewer.py	RPF-WP-0046: periodic ESO database tokens and a daily renewer	2026-09-23 19:53:12 +02:00
test_factory_audit_custody.py	Record live receiver gate and isolate readiness from attestation jobs	2026-09-11 07:26:16 +02:00
test_factory_audit_delivery.py	feat: deliver approved factory audit sender custody	2026-09-11 09:38:27 +02:00
test_factory_native_acceptance.py	Exercise fsGroup startup through the corrected producer helper	2026-09-11 12:41:50 +02:00
test_fluid_telegram_custody_move.py	RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers	2026-10-09 12:10:21 +02:00
test_forgejo_archive_integrity.py
test_forgejo_package_prune.py
test_inbound_library_imap_entry.py	Prepare password-free inbound-library IMAP entry for attended custody	2026-10-05 11:14:54 +02:00
test_informed_decision_requester_metadata.py	Record native ESO result and prepare scoped self-token amendment	2026-10-04 23:21:55 +02:00
test_keycape_approval_custody.py	feat: verify live KeyCape custody and preserve versions on resume	2026-09-09 02:18:12 +02:00
test_keycape_client_secret_generate.py	RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate	2026-10-09 20:12:44 +02:00
test_keycape_factor_activation.py	Establish scoped KeyCape factor custody and verified automatic renewal	2026-09-13 16:25:33 +02:00
test_keycape_factor_metadata.py	Establish scoped KeyCape factor custody and verified automatic renewal	2026-09-13 16:25:33 +02:00
test_keycape_factor_provider.py	Establish scoped KeyCape factor custody and verified automatic renewal	2026-09-13 16:25:33 +02:00
test_keycape_factor_recovery.py	Implement audited lost-factor recovery and track remaining P04 acceptance	2026-09-13 17:28:45 +02:00
test_keycape_factor_renewal.py	Establish scoped KeyCape factor custody and verified automatic renewal	2026-09-13 16:25:33 +02:00
test_keycape_secrets_engine_openbao_custody.py	Record founder approval 2ab717e1 on CCR-2026-0033/0034 and the ESO admission	2026-10-07 00:25:37 +02:00
test_kv_duplicate_retire.py	kv_duplicate_retire: block only on data-path grants	2026-10-09 12:27:43 +02:00
test_live_images_inventory.py
test_metered_requester.py	Prepare exact metered requester extension with scope refusal tests	2026-09-27 20:34:52 +02:00
test_nextcloud_backup_account.py
test_nextcloud_recovery_cleanup.py
test_offsite_restore_boundaries.py
test_openbao_operator_loopback_callback.py	Add sitting-requester create-only token-exchange proof.	2026-09-15 20:38:47 +02:00
test_openbao_platform_admin_callback_prune.py	Fix callback-prune test fixture for the post-prune declaration	2026-09-24 01:16:08 +02:00
test_openbao_platform_admin_check.py	Declare live platform-admin role and policies; add attended admin check	2026-09-23 19:27:25 +02:00
test_openbao_policy_sync.py	CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)	2026-09-23 20:00:40 +02:00
test_operator_browser.py
test_operator_matrix_lane.py	RPF-WP-0054-T04: create-only broker grant keycape/client-secret-generate	2026-10-09 19:08:25 +02:00
test_policy_nexus_forgejo_source_provision.py
test_primary_application_archive.py	Prepare immutable application archive transfer and retention admission	2026-10-07 23:23:33 +02:00
test_provisioning_window.py	Prepare offline attended provisioning checklists and route remaining custody gates	2026-10-04 00:27:00 +02:00
test_railiance_clock_custody.py	Implement attended Railiance Clock host key delivery	2026-09-15 23:00:20 +02:00
test_recovery_evidence.py	Validate OpenBao snapshot evidence and record assurance closure gates	2026-09-06 15:24:58 +02:00
test_remote_exec.py
test_root_custody_finish.py	feat(backup): repair reviewed upload share after history recovery proof	2026-10-03 21:50:19 +02:00
test_root_grant_attended.py	Implement attended root custody admission and crash-safe publisher	2026-10-03 19:44:22 +02:00
test_root_grant_publish.py	Prepare conditional platform-root custody document producer	2026-10-03 18:51:26 +02:00
test_secrets_engine_jwt_contract.py	RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao	2026-10-09 00:31:47 +02:00
test_service_assurance.py	RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished	2026-09-24 00:48:24 +02:00
test_service_jwt_lane.py	RPF-WP-0035-T02: record founder approval and delegated apply of CCR-2026-0038	2026-10-09 11:47:09 +02:00
test_sitting_requester_provisioning.py	Classify sitting-requester exchange failures and retry failed receipts.	2026-09-15 20:51:28 +02:00
test_state_hub_preflight_lane.py
test_t03_request_time.py	Renew T03 requests using Railiance time and bind native execution	2026-09-16 01:08:56 +02:00
test_t03_revocation_probe.py	Point the OpenRouter cycle at memo version 3.	2026-09-27 15:33:09 +02:00
test_telemetry_primary_archive.py	Verify telemetry essentials recovery from versioned Scaleway archive	2026-09-06 23:46:20 +02:00
test_telemetry_smtp_delivery.py	Add attended SMTP verification and exact reader admission	2026-09-28 11:21:57 +02:00
test_telemetry_smtp_entry.py	Prepare password-free telemetry SMTP entry for attended custody	2026-09-28 11:11:34 +02:00
test_tenant_engine_audit_core_sender_eso.py	RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test	2026-10-03 00:16:49 +02:00
test_tenant_engine_audit_core_sender_seed.py	CUST-WP-0075: tenant-engine sender seed helper; re-qualify RPF-WP-0035-T02/T08	2026-10-03 08:28:32 +02:00
test_vergabe_demo_provisioning.py	Land RPF-WP-0039 third apps-pg consumer source.	2026-09-15 01:29:38 +02:00
test_verify_informed_decision_requester.py	Prepare bounded native requester and wrong-identity proofs	2026-10-04 23:32:00 +02:00
test_wp0024_owner_review.py
test_wp0024_t02_driver_candidate.py
test_wp0025_broker_readiness.py