secrets-engine/.claude/rules/repo-identity.md

**Purpose:** secrets-engine is the Lifecycle engine for approved credential work: a deterministic API over OpenBao that orchestrates cataloged custody, delivery, and lifecycle actions across build, test, and production. It does not render authorization decisions.

**Domain:** infotech
**Repo slug:** secrets-engine
**Topic ID:** cee7bedf-2b48-46ef-8601-006474f2ad7a
Declare Engine/Lifecycle against security layer model v0.7 Replace the gate-house review note with this repository's own declaration: INTENT.md frontmatter, layer.yaml, and a published PEP stance map. SCOPE.md and agent boundary docs now match that layer. The review under history/ identifies the implementation remainder; SECRETS-WP-0008 is the follow-on workplan. SECRETS-IN-0001 is closed. The layer is not contested. Catalog "custody" is a finding: OpenBao owns custody, this engine owns the lifecycle API over it. SSH-CA signing is accepted as a proposed engine API and declined as a Staff lane. Assistant: grok Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b 2026-08-29 11:57:47 +02:00			`Purpose: secrets-engine is the Lifecycle engine for approved credential work: a deterministic API over OpenBao that orchestrates cataloged custody, delivery, and lifecycle actions across build, test, and production. It does not render authorization decisions.`
Initial commit 2026-06-28 09:03:37 +00:00
			`Domain: infotech`
chore(wp-0001): close State Hub bootstrap workplan; de-template repo identity - repo-identity.md / repo-boundary.md: replace leftover repo-seed template text with secrets-engine identity and boundary (T01) - mark SECRETS-WP-0001 T01–T03 done (T02 dev-workflow commands and T03 first real workplan were completed during the MVP build); workplan status -> finished Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> 2026-06-29 12:14:00 +02:00			`Repo slug: secrets-engine`
Initial commit 2026-06-28 09:03:37 +00:00			`Topic ID: cee7bedf-2b48-46ef-8601-006474f2ad7a`