coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bind native OpenRouter approval to custody and delivery inputs
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 5s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
This commit is contained in:
tegwick 2026-09-14 00:54:55 +02:00
parent 0783b50216
commit 7ba1b6223e
16 changed files with 656 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

22
docs/evidence/2026-09-14-openrouter-live-pdp.json Normal file
View file

@ -0,0 +1,22 @@
{
"image": "sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd",
"pod": "flex-auth-secrets-engine-6467b96c6f-ncl5t",
"scope": "PDP evaluation only; synthetic claim, no approval consume or OpenBao access",
"checks": {
"native_request_preserved": true,
"missing_caller_refused": true,
"wrong_caller_refused": true,
"foreign_owner_representation_refused": true,
"wrong_tenant_denied": true,
"recipient_cannot_be_lifecycle_subject": true,
"producer_approval_digest_pair": true,
"changed_path_cannot_reuse_approval_digest": true,
"changed_mount_cannot_reuse_approval_digest": true,
"changed_repo_cannot_reuse_approval_digest": true,
"other_deployment_specs_unchanged": true
},
"decision_id": "decision:e8bec2d72f7df007",
"forward_stopped": true,
"caller_token_handling": "10 minute audience-bound tokens held in memory only; expire at issuer, not revoked by dropping local references",
"consumer_validation": "Actual secrets-engine validate_decision_envelope accepted the live response against the exact submission and v2 pin."
}