From 5619a14f1599f15d44d731abfdeea322e018a238 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Sun, 26 Jul 2026 20:13:49 +0200
Subject: [PATCH] Cross-reference GLAS-WP-0002-T02 for the untested OpenBao
 credential path

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 INTENT.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/INTENT.md b/INTENT.md
index c3b8fe6..0b994d5 100644
--- a/INTENT.md
+++ b/INTENT.md
@@ -64,3 +64,9 @@ round trip needed for this run.
 The glas-harness adapter (`glas_harness/reins/rein_openweights.py`,
 mirroring `reins/rein_aharness.py`) now exists and is what performed
 this run.
+
+**Follow-up tracked in glas-harness:** `GLAS-WP-0002-T02` — the OpenBao
+AppRole/vault credential path (`credentials.py`'s `_acquire_token`/`bao
+kv get` branch) is only unit-tested against mocked `bao` calls; it needs
+a real (or realistic sandboxed) AppRole and a live run with
+`OPENROUTER_API_KEY` unset to prove the vault round trip actually works.