From e263a640c8cf28a85ca055edadfe896e39047844 Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 28 Sep 2026 11:21:57 +0200 Subject: [PATCH] Record mailbox password supplied and scoped delivery gate Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f --- contracts/alert-acknowledgment.json | 2 +- history/2026-09-28-alert-acknowledgment.md | 5 +++++ workplans/RTEL-WP-0002-signal-contract.md | 6 ++++++ 3 files changed, 12 insertions(+), 1 deletion(-) diff --git a/contracts/alert-acknowledgment.json b/contracts/alert-acknowledgment.json index 05b5b2b..d2fe194 100644 --- a/contracts/alert-acknowledgment.json +++ b/contracts/alert-acknowledgment.json @@ -37,7 +37,7 @@ "acknowledgment_resolves_alert": false, "acknowledgment_silences_alert": false, "from_address": "platform@coulomb.social", - "from_mailbox_status": "created-by-founder-password-custody-pending", + "from_mailbox_status": "password-added-by-founder-native-verification-pending", "smtp_kv_path": "platform/workloads/railiance-telemetry/smtp", "smtp_password_field": "SMTP_PASSWORD" } diff --git a/history/2026-09-28-alert-acknowledgment.md b/history/2026-09-28-alert-acknowledgment.md index 8f33be6..cd6f068 100644 --- a/history/2026-09-28-alert-acknowledgment.md +++ b/history/2026-09-28-alert-acknowledgment.md @@ -43,3 +43,8 @@ entry, with the password to be added by the founder as a new version. Platform helper scripts/telemetry_smtp_entry.py is silent, CAS=0, never reads credential values, and preserves any existing version. Four unit tests pass. Attended founder OIDC/MFA execution is requested; no native KV creation is yet claimed. + +Founder subsequently confirmed the password was added. Scoped SMTP delivery +resources installed; attended reader admission/authentication helper prepared +and tested (ten custody tests total). Native password/SMTP verification remains +pending attended login; this report is not a credential readback claim. diff --git a/workplans/RTEL-WP-0002-signal-contract.md b/workplans/RTEL-WP-0002-signal-contract.md index e88d5b9..950bd8a 100644 --- a/workplans/RTEL-WP-0002-signal-contract.md +++ b/workplans/RTEL-WP-0002-signal-contract.md @@ -137,3 +137,9 @@ subsequently created the mailbox; password custody remains pending. Dedicated SM client and enforced PDP caller admission, application rollout, signed identity, real email/acknowledgment and independent audit readback remain. Outside-node watchdog and recurring backup gates remain. No new task/workplan was created. + +September 28 custody follow-up: founder reports SMTP_PASSWORD added to the +OpenBao entry. Exact SMTP ESO ServiceAccount/ClusterSecretStore/ExternalSecret +installed after server dry-run/diff; OpenBao reader admission still needs the +attended helper. Ten custody tests pass. SMTP authentication is not yet verified +and the live alert route remains disabled. No task/workplan added.