coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-platform/tests
History
codex c921aa0aed
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 
Silent generate-in-custody: verifies the SecurityCase file (digest, type,
materialized, confidential, client_id) per ops-warden 23985370, mints the 5m
create-only grant token from the caller's session, proves absence, writes once
with CAS 0, verifies by metadata only and revokes the token. Agents, root and
callers without the issuer policy are refused. Secret length awaits key-cape.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 469992@bnt-lap001
Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
2026-10-09 20:12:44 +02:00
..
test_application_archive_retention_plan.py Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
test_application_backup_credentials.py Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
test_application_backup_pair_custody.py Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
test_approval_client_reader.py Verify scoped approval client delivery through attended reader session 2026-09-14 01:46:45 +02:00
test_apps_pg_capacity.py Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
test_archive_receipt_lifecycle.py Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
test_archive_recovery_evidence.py Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
test_audit_core_database_lease_recovery.py Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
test_audit_core_recovery_preflight.py Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
test_audit_core_whitehat_e2_credentials.py Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
test_audit_core_whitehat_e2_credentials_02.py Harden remote kubectl argument quoting 2026-08-22 21:25:20 +02:00
test_authelia_smtp_delivery.py Prepare attended scoped platform mailbox admission for Authelia 2026-10-06 19:30:59 +02:00
test_backup_credential_contract_export.py Accept both backup readers and deliver the email-connect pair. 2026-10-09 00:05:35 +02:00
test_backup_credentials.py fix(backup): send required public DAV upload marker 2026-10-03 21:20:21 +02:00
test_backup_retention_plan.py Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
test_backup_tiers.py Bind essentials recovery to explicit manifest and verified offsite provenance 2026-09-06 09:25:26 +02:00
test_broker_grant_lane.py RPF-WP-0054: record CCR-2026-0040 apply; fix State Hub evidence crash for prefix lanes 2026-10-09 19:20:21 +02:00
test_catalog_lane_scaffold.py Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
test_consumption_mode.py Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
test_core_hub_forgejo_source_provision.py CCR-2026-0031: choose the private probe repo with the admin token 2026-10-03 10:07:54 +02:00
test_credential_change.py Allow platform/suppliers/<supplier>/<account> in credential-change applier 2026-10-09 11:47:09 +02:00
test_credential_change_appliers.py Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
test_credential_grants.py Close RAILIANCE-WP-0015-T06 rapp credential-lane binding 2026-08-14 00:47:28 +02:00
test_credential_helper.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00
test_custody_contract.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_custody_projection.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_digest_retention.py Protect digest-pinned packages and refuse partial-inventory pruning 2026-09-27 16:00:51 +02:00
test_eso_auth_recovery.py Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
test_eso_token_renewer.py RPF-WP-0046: periodic ESO database tokens and a daily renewer 2026-09-23 19:53:12 +02:00
test_factory_audit_custody.py Record live receiver gate and isolate readiness from attestation jobs 2026-09-11 07:26:16 +02:00
test_factory_audit_delivery.py feat: deliver approved factory audit sender custody 2026-09-11 09:38:27 +02:00
test_factory_native_acceptance.py Exercise fsGroup startup through the corrected producer helper 2026-09-11 12:41:50 +02:00
test_fluid_telegram_custody_move.py RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 2026-10-09 12:10:21 +02:00
test_forgejo_archive_integrity.py Reject unfinished or truncated Forgejo backup archives before encryption 2026-09-05 22:10:22 +02:00
test_forgejo_package_prune.py Refuse prune apply when requested image inventories are unavailable 2026-09-05 02:00:50 +02:00
test_inbound_library_imap_entry.py Prepare password-free inbound-library IMAP entry for attended custody 2026-10-05 11:14:54 +02:00
test_informed_decision_requester_metadata.py Record native ESO result and prepare scoped self-token amendment 2026-10-04 23:21:55 +02:00
test_keycape_approval_custody.py feat: verify live KeyCape custody and preserve versions on resume 2026-09-09 02:18:12 +02:00
test_keycape_client_secret_generate.py RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate 2026-10-09 20:12:44 +02:00
test_keycape_factor_activation.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_factor_metadata.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_factor_provider.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_factor_recovery.py Implement audited lost-factor recovery and track remaining P04 acceptance 2026-09-13 17:28:45 +02:00
test_keycape_factor_renewal.py Establish scoped KeyCape factor custody and verified automatic renewal 2026-09-13 16:25:33 +02:00
test_keycape_secrets_engine_openbao_custody.py Record founder approval 2ab717e1 on CCR-2026-0033/0034 and the ESO admission 2026-10-07 00:25:37 +02:00
test_kv_duplicate_retire.py kv_duplicate_retire: block only on data-path grants 2026-10-09 12:27:43 +02:00
test_live_images_inventory.py Add failure-safe cluster image capture hook 2026-09-05 10:04:38 +02:00
test_metered_requester.py Prepare exact metered requester extension with scope refusal tests 2026-09-27 20:34:52 +02:00
test_nextcloud_backup_account.py Prepare dedicated Backup account cutover with quota and recovery verification 2026-09-05 20:35:13 +02:00
test_nextcloud_recovery_cleanup.py Bound rejected backup fixture cleanup to successful replacement recovery 2026-09-06 01:05:27 +02:00
test_offsite_restore_boundaries.py Prepare isolated offsite restore and stream large backup transfers 2026-09-05 22:18:05 +02:00
test_openbao_operator_loopback_callback.py Add sitting-requester create-only token-exchange proof. 2026-09-15 20:38:47 +02:00
test_openbao_platform_admin_callback_prune.py Fix callback-prune test fixture for the post-prune declaration 2026-09-24 01:16:08 +02:00
test_openbao_platform_admin_check.py Declare live platform-admin role and policies; add attended admin check 2026-09-23 19:27:25 +02:00
test_openbao_policy_sync.py CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) 2026-09-23 20:00:40 +02:00
test_operator_browser.py Restore contained attended browser launch on WSL without xdg-utils 2026-09-06 00:44:08 +02:00
test_operator_matrix_lane.py RPF-WP-0054-T04: create-only broker grant keycape/client-secret-generate 2026-10-09 19:08:25 +02:00
test_policy_nexus_forgejo_source_provision.py Activate Policy Nexus source credential lane 2026-09-01 01:35:48 +02:00
test_primary_application_archive.py Prepare immutable application archive transfer and retention admission 2026-10-07 23:23:33 +02:00
test_provisioning_window.py Prepare offline attended provisioning checklists and route remaining custody gates 2026-10-04 00:27:00 +02:00
test_railiance_clock_custody.py Implement attended Railiance Clock host key delivery 2026-09-15 23:00:20 +02:00
test_recovery_evidence.py Validate OpenBao snapshot evidence and record assurance closure gates 2026-09-06 15:24:58 +02:00
test_remote_exec.py Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
test_root_custody_finish.py feat(backup): repair reviewed upload share after history recovery proof 2026-10-03 21:50:19 +02:00
test_root_grant_attended.py Implement attended root custody admission and crash-safe publisher 2026-10-03 19:44:22 +02:00
test_root_grant_publish.py Prepare conditional platform-root custody document producer 2026-10-03 18:51:26 +02:00
test_secrets_engine_jwt_contract.py RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao 2026-10-09 00:31:47 +02:00
test_service_assurance.py RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished 2026-09-24 00:48:24 +02:00
test_service_jwt_lane.py RPF-WP-0035-T02: record founder approval and delegated apply of CCR-2026-0038 2026-10-09 11:47:09 +02:00
test_sitting_requester_provisioning.py Classify sitting-requester exchange failures and retry failed receipts. 2026-09-15 20:51:28 +02:00
test_state_hub_preflight_lane.py Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
test_t03_request_time.py Renew T03 requests using Railiance time and bind native execution 2026-09-16 01:08:56 +02:00
test_t03_revocation_probe.py Point the OpenRouter cycle at memo version 3. 2026-09-27 15:33:09 +02:00
test_telemetry_primary_archive.py Verify telemetry essentials recovery from versioned Scaleway archive 2026-09-06 23:46:20 +02:00
test_telemetry_smtp_delivery.py Add attended SMTP verification and exact reader admission 2026-09-28 11:21:57 +02:00
test_telemetry_smtp_entry.py Prepare password-free telemetry SMTP entry for attended custody 2026-09-28 11:11:34 +02:00
test_tenant_engine_audit_core_sender_eso.py RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test 2026-10-03 00:16:49 +02:00
test_tenant_engine_audit_core_sender_seed.py CUST-WP-0075: tenant-engine sender seed helper; re-qualify RPF-WP-0035-T02/T08 2026-10-03 08:28:32 +02:00
test_vergabe_demo_provisioning.py Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
test_verify_informed_decision_requester.py Prepare bounded native requester and wrong-identity proofs 2026-10-04 23:32:00 +02:00
test_wp0024_owner_review.py Include platform owner in WP-0024 receipts 2026-08-22 14:59:59 +02:00
test_wp0024_t02_driver_candidate.py Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00
test_wp0025_broker_readiness.py Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00