coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enforce companion-only credential delivery and refresh activation handoff
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 7s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0
This commit is contained in:
tegwick 2026-09-27 15:58:53 +02:00
parent 303cbf652b
commit 5c6f2b319d
8 changed files with 150 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/drafts/glas-exec-owner-configured.yaml
View file

@ -1,6 +1,7 @@
# Draft exec_owner for glas-claude-agent-dev-anthropic (SECRETS-WP-0009-T03).
# Not in the catalog: it replaces the pending binding only after
# activity-core-metered-worker-token is seeded and ACTIVITY-WP-0039 is live.
# Not in the catalog. Activity Core reports custody and identity live as of
# 2026-09-24 (ACTIVITY-WP-0039). Admission still requires current owner/pin
# validation and exact per-lane approvals for attended native activation.
exec_owner:
status: configured
owner: rein-aharness MessagesOwner (metered-once) with sand-boxer runtime boundary