Record native SMTP credential delivery and accepted email proof

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f
This commit is contained in:
tegwick 2026-09-28 11:27:00 +02:00
parent deb1b4d0f0
commit c3800edb6b
3 changed files with 23 additions and 2 deletions

View file

@ -143,3 +143,10 @@ OpenBao entry. Exact SMTP ESO ServiceAccount/ClusterSecretStore/ExternalSecret
installed after server dry-run/diff; OpenBao reader admission still needs the
attended helper. Ten custody tests pass. SMTP authentication is not yet verified
and the live alert route remains disabled. No task/workplan added.
SMTP custody gate now passed: attended verification of KV version 2 and IONOS
authentication; exact reader admitted, ESO Ready, password preserved. Scoped
egress installed after the first transport test exposed namespace isolation.
The corrected native test Job completed and SMTP accepted the test email.
Recipient inbox receipt and actual alert acknowledgment remain distinct pending
evidence, along with browser client/PDP/audit admission and other T04 gates.