coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(registrar): assign State Hub identifiers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: grok
Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b
This commit is contained in:
repo-manager 2026-08-29 12:00:51 +02:00
parent 5fa2883830
commit 57f6c4fa65
5 changed files with 18 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
WORK-RECORDS.md
View file

@ -16,6 +16,7 @@
| workplan | SECRETS-WP-0005 | finished | — | workplans/SECRETS-WP-0005-scope-intent-value-gaps.md |
| workplan | SECRETS-WP-0006 | active | — | workplans/SECRETS-WP-0006-catalog-lane-adoption.md |
| workplan | SECRETS-WP-0007 | active | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md |
| workplan | SECRETS-WP-0008 | ready | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md |
| task | SECRETS-WP-ADHOC-2026-08-21-T01 | done | — | workplans/ADHOC-2026-08-21.md |
| task | SECRETS-WP-ADHOC-2026-08-23-T01 | done | — | workplans/ADHOC-2026-08-23.md |
| task | SECRETS-WP-0001-T01 | done | — | workplans/SECRETS-WP-0001-statehub-bootstrap.md |
@ -56,4 +57,10 @@
| task | SECRETS-WP-0007-T05 | progress | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md |
| task | SECRETS-WP-0007-T06 | progress | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md |
| task | SECRETS-WP-0007-T07 | wait | — | workplans/SECRETS-WP-0007-production-lifecycle-hardening.md |
| intake | SECRETS-IN-0001 | open | — | intakes/intakes.md |
| task | SECRETS-WP-0008-T01 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md |
| task | SECRETS-WP-0008-T02 | wait | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md |
| task | SECRETS-WP-0008-T03 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md |
| task | SECRETS-WP-0008-T04 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md |
| task | SECRETS-WP-0008-T05 | todo | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md |
| task | SECRETS-WP-0008-T06 | wait | — | workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md |
| intake | SECRETS-IN-0001 | closed | — | intakes/intakes.md |

1
intakes/intakes.md
View file

@ -43,4 +43,5 @@ description: 'A conformance sweep on 2026-08-28 found this repository has no lay
that is more useful to us than a label added to close a checkbox. Standard: net-kingdom/canon/standards/security-layer-model_v0.4.md.'
created: '2026-08-28T21:02:14.320087Z'
updated: '2026-08-28T21:02:14.320087Z'
state_hub_intake_id: "01a04cf6-dcd7-7bd4-82e4-ef434b15fe46"
```

1
workplans/ADHOC-2026-08-21.md
View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: custodian
created: "2026-08-21"
updated: "2026-08-21"
state_hub_workstream_id: "5580d785-c80f-5dbd-9ef8-22a630fa607b"
---
# SECRETS-WP-ADHOC-2026-08-21 - OpenBao dev-test and safe-path robustness

1
workplans/ADHOC-2026-08-23.md
View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: custodian
created: "2026-08-23"
updated: "2026-08-23"
state_hub_workstream_id: "e84012a7-4e29-5f77-8254-6c04025c4db1"
---
# SECRETS-WP-ADHOC-2026-08-23 - Implemented scope and intent-gap reconciliation

7
workplans/SECRETS-WP-0008-layer-model-lifecycle-conformance.md
View file

@ -9,6 +9,7 @@ owner: grok
topic_slug: custodian
created: "2026-08-29"
updated: "2026-08-29"
state_hub_workstream_id: "9c9e5164-b2f5-5ea2-a557-5368d65e9fe0"
---
# SECRETS-WP-0008 - Evolve the Lifecycle engine to the accepted security layer model
@ -57,6 +58,7 @@ It adds the layer-model remainder: stance binding, decision-record consumption,
id: SECRETS-WP-0008-T01
status: todo
priority: high
state_hub_task_id: "945735c6-2d3d-5f72-baf0-692e6b210889"
```
`pep-stance.yaml` is published and tests pin `prod: fail_closed` to
@ -84,6 +86,7 @@ Acceptance:
id: SECRETS-WP-0008-T02
status: wait
priority: high
state_hub_task_id: "3eb9cff8-1441-5437-9e92-a2b655c82d04"
```
Blocked on the durable ActionAuthorization serving path owned with
@ -110,6 +113,7 @@ Acceptance:
id: SECRETS-WP-0008-T03
status: todo
priority: high
state_hub_task_id: "0b54cedf-9335-5fa0-bdcb-1efa9a9cd98d"
```
Classify each privileged action as load-bearing or attributive. Today's trail
@ -140,6 +144,7 @@ Acceptance:
id: SECRETS-WP-0008-T04
status: todo
priority: medium
state_hub_task_id: "581aeee3-3d99-5034-992b-7d42e6542a19"
```
ops-warden's `ssh-ca-signing-write` gap names this engine as intended owner.
@ -165,6 +170,7 @@ Acceptance:
id: SECRETS-WP-0008-T05
status: todo
priority: medium
state_hub_task_id: "3100d28c-9494-5b21-9d5a-af583cd8aa55"
```
kings-guard's secret-abuse posture is fixture-driven because no engine exposes
@ -188,6 +194,7 @@ Acceptance:
id: SECRETS-WP-0008-T06
status: wait
priority: medium
state_hub_task_id: "d7bc8bdc-a0f8-5058-a640-374ef9859148"
```
Blocked on the platform-owned OpenBao JWT mount/role (railiance-platform) and