coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: commit work in progress before registrar reconciliation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Refs CUST-WP-0068

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 17:51:13 +02:00
parent f61719ddda
commit 9093b9ebba
3 changed files with 17 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
workplans/SECRETS-WP-0007-production-lifecycle-hardening.md
View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: custodian
created: "2026-08-23"
updated: "2026-08-23"
state_hub_workstream_id: "68a39be1-bd9c-5133-ad64-e7bca892aaf3"
---
# SECRETS-WP-0007 - Production-safe provisioning, authorization, and lifecycle hardening
@ -81,6 +82,7 @@ must not expose the current bootstrap and lifecycle shortcuts as an API.
id: SECRETS-WP-0007-T01
status: done
priority: high
state_hub_task_id: "5ddba36d-bc86-5670-baf1-50c872e6577e"
```
Completed 2026-08-23. During containment, existing multi-field provisioning
@ -119,6 +121,7 @@ Acceptance:
id: SECRETS-WP-0007-T02
status: done
priority: high
state_hub_task_id: "ddf3ed54-9cbc-5e18-b15a-5da14cda5d9b"
```
Completed 2026-08-23. Replaced raw `field=value` argv writes with a CAS-aware
@ -155,6 +158,7 @@ Acceptance:
id: SECRETS-WP-0007-T03
status: progress
priority: high
state_hub_task_id: "bb6073e1-c952-5357-b707-5574cef50f2f"
```
Progress 2026-08-23. Added one lifecycle plan model shared by dry-run and live
@ -200,6 +204,7 @@ Acceptance:
id: SECRETS-WP-0007-T04
status: progress
priority: high
state_hub_task_id: "4b58edec-c705-55e5-9ece-362e1ff13079"
```
Progress 2026-08-23. flex-auth revision `c473f19` now supplies execute-time
@ -251,6 +256,7 @@ Acceptance:
id: SECRETS-WP-0007-T05
status: progress
priority: high
state_hub_task_id: "36bcd64d-8b27-542d-b8da-ede1a4d3c22f"
```
Progress 2026-08-23. AppRole login material now travels through strict temporary
@ -299,6 +305,7 @@ Acceptance:
id: SECRETS-WP-0007-T06
status: progress
priority: high
state_hub_task_id: "431bc91b-439e-595a-8a8a-7d4c82e68322"
```
Progress 2026-08-23. KV verification now checks every declared field by default,
@ -356,6 +363,7 @@ Acceptance:
id: SECRETS-WP-0007-T07
status: wait
priority: high
state_hub_task_id: "a0a1dd92-d703-5a95-b488-d895f34d5cf7"
```
Dependency: T01-T06 complete, then explicit per-lane approvals and scoped