coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/.claude/rules/repo-boundary.md

16 lines
757 B
Markdown
Raw Normal View History

Initial commit
2026-06-28 09:03:37 +00:00
## Repo boundary
Declare Engine/Lifecycle against security layer model v0.7 Replace the gate-house review note with this repository's own declaration: INTENT.md frontmatter, layer.yaml, and a published PEP stance map. SCOPE.md and agent boundary docs now match that layer. The review under history/ identifies the implementation remainder; SECRETS-WP-0008 is the follow-on workplan. SECRETS-IN-0001 is closed. The layer is not contested. Catalog "custody" is a finding: OpenBao owns custody, this engine owns the lifecycle API over it. SSH-CA signing is accepted as a proposed engine API and declined as a Staff lane. Assistant: grok Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b
2026-08-29 11:57:47 +02:00
This repo owns the **secrets-engine** Lifecycle engine only (NetKingdom
security layer model v0.7: Engine / Lifecycle). It does not own:
Initial commit
2026-06-28 09:03:37 +00:00
chore(wp-0001): close State Hub bootstrap workplan; de-template repo identity - repo-identity.md / repo-boundary.md: replace leftover repo-seed template text with secrets-engine identity and boundary (T01) - mark SECRETS-WP-0001 T01–T03 done (T02 dev-workflow commands and T03 first real workplan were completed during the MVP build); workplan status -> finished Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 12:14:00 +02:00
- Secret custody, policy, lease, and audit backend → OpenBao / railiance-platform
Declare Engine/Lifecycle against security layer model v0.7 Replace the gate-house review note with this repository's own declaration: INTENT.md frontmatter, layer.yaml, and a published PEP stance map. SCOPE.md and agent boundary docs now match that layer. The review under history/ identifies the implementation remainder; SECRETS-WP-0008 is the follow-on workplan. SECRETS-IN-0001 is closed. The layer is not contested. Catalog "custody" is a finding: OpenBao owns custody, this engine owns the lifecycle API over it. SSH-CA signing is accepted as a proposed engine API and declined as a Staff lane. Assistant: grok Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b
2026-08-29 11:57:47 +02:00
- SSH certificate issuance (Staff PEP) → ops-warden (`warden sign`)
chore(wp-0001): close State Hub bootstrap workplan; de-template repo identity - repo-identity.md / repo-boundary.md: replace leftover repo-seed template text with secrets-engine identity and boundary (T01) - mark SECRETS-WP-0001 T01–T03 done (T02 dev-workflow commands and T03 first real workplan were completed during the MVP build); workplan status -> finished Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 12:14:00 +02:00
- Tunnels and remote transport → ops-bridge
Declare Engine/Lifecycle against security layer model v0.7 Replace the gate-house review note with this repository's own declaration: INTENT.md frontmatter, layer.yaml, and a published PEP stance map. SCOPE.md and agent boundary docs now match that layer. The review under history/ identifies the implementation remainder; SECRETS-WP-0008 is the follow-on workplan. SECRETS-IN-0001 is closed. The layer is not contested. Catalog "custody" is a finding: OpenBao owns custody, this engine owns the lifecycle API over it. SSH-CA signing is accepted as a proposed engine API and declined as a Staff lane. Assistant: grok Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b
2026-08-29 11:57:47 +02:00
- Authorization decisions → access-engine (`flex-auth`)
- Approval objects → approval-engine
- Evidence custody and integrity → audit-core
chore(wp-0001): close State Hub bootstrap workplan; de-template repo identity - repo-identity.md / repo-boundary.md: replace leftover repo-seed template text with secrets-engine identity and boundary (T01) - mark SECRETS-WP-0001 T01–T03 done (T02 dev-workflow commands and T03 first real workplan were completed during the MVP build); workplan status -> finished Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 12:14:00 +02:00
- Identity and claim lifecycle → user-engine / key-cape
Declare Engine/Lifecycle against security layer model v0.7 Replace the gate-house review note with this repository's own declaration: INTENT.md frontmatter, layer.yaml, and a published PEP stance map. SCOPE.md and agent boundary docs now match that layer. The review under history/ identifies the implementation remainder; SECRETS-WP-0008 is the follow-on workplan. SECRETS-IN-0001 is closed. The layer is not contested. Catalog "custody" is a finding: OpenBao owns custody, this engine owns the lifecycle API over it. SSH-CA signing is accepted as a proposed engine API and declined as a Staff lane. Assistant: grok Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b
2026-08-29 11:57:47 +02:00
- Security doctrine and the layer model → gate-house / net-kingdom canon
chore(wp-0001): close State Hub bootstrap workplan; de-template repo identity - repo-identity.md / repo-boundary.md: replace leftover repo-seed template text with secrets-engine identity and boundary (T01) - mark SECRETS-WP-0001 T01–T03 done (T02 dev-workflow commands and T03 first real workplan were completed during the MVP build); workplan status -> finished Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 12:14:00 +02:00
- Cross-system security boundary doc → net-kingdom/docs/
- Request history and progress index → State Hub (read model)
Reference in a new issue Copy permalink