S3 Platform Services — PostgreSQL HA, Valkey, object storage
Find a file
codex c921aa0aed
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate
Silent generate-in-custody: verifies the SecurityCase file (digest, type,
materialized, confidential, client_id) per ops-warden 23985370, mints the 5m
create-only grant token from the caller's session, proves absence, writes once
with CAS 0, verifies by metadata only and revokes the token. Agents, root and
callers without the issuer policy are refused. Secret length awaits key-cape.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 469992@bnt-lap001
Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
2026-10-09 20:12:44 +02:00
.claude/rules docs: add scoped registrar recovery guidance 2026-08-21 21:38:35 +02:00
.forgejo/workflows Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
argocd Pin approved lifecycle discovery release 2026-10-05 01:06:09 +02:00
assurance RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished 2026-09-24 00:48:24 +02:00
credential-change-requests CCR-2026-0041: record founder apply of the Forgejo case ESO reader 2026-10-09 20:09:55 +02:00
credential-grants RPF-WP-0054-T04: create-only broker grant keycape/client-secret-generate 2026-10-09 19:08:25 +02:00
data/consumption-mode Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
docs CCR-2026-0038: allow local probe input before the login proof; refresh design status 2026-10-09 19:53:59 +02:00
examples/catalog-lane-scaffold Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
helm Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
history Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
intakes Index requester rotation residual and completed delivery 2026-10-05 00:17:44 +02:00
interfaces Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00
lib fix(backup): send required public DAV upload marker 2026-10-03 21:20:21 +02:00
manifests fix(security): prevent ESO copying source annotations (CUST-WP-0073) 2026-09-28 15:56:50 +02:00
openbao File Forgejo OIDC case readers as CCR-2026-0041 (ESO) and CCR-2026-0042 (consumer) 2026-10-09 19:55:11 +02:00
registry Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 3) 2026-07-06 19:50:54 +02:00
requirements Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
reviews Record WP0027 platform snapshot receipt 2026-08-23 00:32:20 +02:00
schemas Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
scripts RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 2026-10-09 20:12:44 +02:00
tests RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 2026-10-09 20:12:44 +02:00
tools Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
workplans RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 2026-10-09 20:12:44 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-10-09 11:47:32 +02:00
.gitignore Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
.sops.yaml Finish architecture-cleanup RAILIANCE-WP-0016 T05 2026-08-15 14:43:44 +02:00
AGENTS.md Document credential lane designs and adopt fast projection sync 2026-09-05 10:41:56 +02:00
ArchitectureBlueprint.md Decide blueprint 5.6 (adopt ArgoCD) and plan phase B adoption on railiance01. 2026-09-21 18:44:51 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:39 +02:00
INTENT.md Apply GH-DEC-2026-017 to the layer declaration. 2026-09-21 07:35:24 +02:00
layer.yaml Apply GH-DEC-2026-017 to the layer declaration. 2026-09-21 07:35:24 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:54:20 +02:00
Makefile Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
SCOPE.md Declare the security layer, and repair the placement admission check 2026-09-09 23:27:14 +02:00
tenancy.yaml Fix apps-pg tenancy evidence declaration 2026-08-23 13:21:42 +02:00
WORK-RECORDS.md chore(consistency): refresh WORK-RECORDS for RPF-WP-0054-T04 2026-10-09 19:09:25 +02:00