13 lines
538 B
Python
13 lines
538 B
Python
|
"""secrets-engine: decision-aware workflow layer over OpenBao.
|
||
|
|
|
||
|
|
OpenBao enforces custody, policy, lease, and audit. This package owns the
|
||
|
|
operator/agent interaction model: catalog, decision checks, plan/apply, safe
|
||
|
|
provisioning, verification, exec-time delivery, and non-secret evidence.
|
||
|
|
|
||
|
|
Hard rule enforced throughout the code: raw secret *values* never enter logs,
|
||
|
|
evidence, State Hub payloads, return values, or stdout. Values live only in
|
||
|
|
OpenBao, transient process memory, and short-lived mode-0600 files.
|
||
|
|
"""
|
||
|
|
|
||
|
|
__version__ = "0.1.0"
|