coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Harden secret provisioning and lifecycle controls
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0217e-8c4c-7383-be6b-f50a6e485306
This commit is contained in:
tegwick 2026-08-23 12:05:58 +02:00
parent 0617923ff1
commit 3a1bd4f1c8
23 changed files with 1369 additions and 162 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/hardening-backlog.md
View file

@ -49,8 +49,11 @@ contents in this repo.
## H4 — Rotation & lifecycle states
- Implement `rotate`, and explicit `compromised` / `deactivated` lane states with
evidence, beyond the current `revoke` (metadata delete).
- Implement `rotate` and persistent `compromised` / `deactivated` lane states
with evidence. Explicit suspend/deactivate/destroy plans now exist, and
ordinary `revoke` safely aliases native AppRole/policy deactivation, but lane
state and coordinated provider/workload rotation remain outstanding. Live
destroy remains disabled until exact-action authorization is available.
## H5 — Audit report command