coulomb/railiance-telemetry
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record mailbox password supplied and scoped delivery gate

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f
This commit is contained in:
tegwick 2026-09-28 11:21:57 +02:00
parent 9793bc6077
commit e263a640c8
3 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
contracts/alert-acknowledgment.json
View file

@ -37,7 +37,7 @@
"acknowledgment_resolves_alert": false,
"acknowledgment_silences_alert": false,
"from_address": "platform@coulomb.social",
"from_mailbox_status": "created-by-founder-password-custody-pending",
"from_mailbox_status": "password-added-by-founder-native-verification-pending",
"smtp_kv_path": "platform/workloads/railiance-telemetry/smtp",
"smtp_password_field": "SMTP_PASSWORD"
}

5
history/2026-09-28-alert-acknowledgment.md
View file

@ -43,3 +43,8 @@ entry, with the password to be added by the founder as a new version. Platform
helper scripts/telemetry_smtp_entry.py is silent, CAS=0, never reads credential
values, and preserves any existing version. Four unit tests pass. Attended
founder OIDC/MFA execution is requested; no native KV creation is yet claimed.
Founder subsequently confirmed the password was added. Scoped SMTP delivery
resources installed; attended reader admission/authentication helper prepared
and tested (ten custody tests total). Native password/SMTP verification remains
pending attended login; this report is not a credential readback claim.

6
workplans/RTEL-WP-0002-signal-contract.md
View file

@ -137,3 +137,9 @@ subsequently created the mailbox; password custody remains pending. Dedicated SM
client and enforced PDP caller admission, application rollout, signed identity,
real email/acknowledgment and independent audit readback remain. Outside-node
watchdog and recurring backup gates remain. No new task/workplan was created.
September 28 custody follow-up: founder reports SMTP_PASSWORD added to the
OpenBao entry. Exact SMTP ESO ServiceAccount/ClusterSecretStore/ExternalSecret
installed after server dry-run/diff; OpenBao reader admission still needs the
attended helper. Ten custody tests pass. SMTP authentication is not yet verified
and the live alert route remains disabled. No task/workplan added.