coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ship secret-use snapshot surface for kings-guard
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Add secrets-engine secret-use snapshot: catalog plus local evidence only,
contracted non-secret fields, declared 1d heartbeat cadence. Never contacts
OpenBao. Completeness is not claimed. owner_status stays proposed until
kings-guard admits the snapshot as an observation input.

Assistant: grok
Assistant-Session: 01a05f07-ae72-7781-9fcb-19efd61add00
This commit is contained in:
tegwick 2026-09-02 01:31:23 +02:00
parent 3abee434df
commit 2278cefbb3
8 changed files with 374 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

9
layer.yaml
View file

@ -90,11 +90,10 @@ proposed_capabilities:
owner_status: proposed
contract: docs/secret-use-evidence-contract.md
blocked_on: >-
Contract published; kings-guard assented 2026-09-01 (message
75ebd2cc-a166-4676-94aa-deef2791c0c9) and will not treat this as an
observation input until the surface ships and publishes its cadence
declaration. Local JSONL, the load-bearing outbox, and `route`/`audit`
are not this observation API. Completeness is not claimed.
Surface shipped as `secrets-engine secret-use snapshot`; cadence is the
declared 1d heartbeat. kings-guard assented 2026-09-01 (message
75ebd2cc-a166-4676-94aa-deef2791c0c9) and has not yet admitted the
snapshot as an observation input. Completeness is not claimed.
review: "2026-11-28"
consequence: >-
kings-guard secret-abuse posture stays fixture-driven.