coulomb/rein-openweights
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record live-verified OpenBao path (GLAS-WP-0002-T02 closed)

Browse source 
Real AppRole login, real KV v2 read, real OpenRouter call, real commit,
with OPENROUTER_API_KEY explicitly unset. Full build record in
ops-mason/plans/rein-openweights-openrouter-approle.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
tegwick 2026-07-27 01:53:31 +02:00
parent 5619a14f15
commit 864ff4c124
1 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

16
INTENT.md
View file

@ -65,8 +65,14 @@ The glas-harness adapter (`glas_harness/reins/rein_openweights.py`,
mirroring `reins/rein_aharness.py`) now exists and is what performed
this run.
**Follow-up tracked in glas-harness:** `GLAS-WP-0002-T02` — the OpenBao
AppRole/vault credential path (`credentials.py`'s `_acquire_token`/`bao
kv get` branch) is only unit-tested against mocked `bao` calls; it needs
a real (or realistic sandboxed) AppRole and a live run with
`OPENROUTER_API_KEY` unset to prove the vault round trip actually works.
**`GLAS-WP-0002-T02` closed (2026-07-27):** the OpenBao AppRole/vault
credential path (`credentials.py`'s `_acquire_token`/`bao kv get`
branch) is now live-verified, not just unit-tested against mocks.
`ops-mason` built the real infrastructure (AppRole `rein-openweights`,
policy, `reins/rein-openweights/openrouter` KV v2 path); the founder
completed provisioning; a real task ran with `OPENROUTER_API_KEY`
explicitly unset — real AppRole login, real KV v2 read, real OpenRouter
call, real commit. See `ops-mason/plans/rein-openweights-openrouter-approle.md`
for the full build record, including two real bugs (a KV v2 policy path
shape mistake, a missing admin-policy entry for the new mount) found and
fixed by actually running this end to end rather than stopping at mocks.