Finish companion catalog work and reconcile completed approval tasks
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0
This commit is contained in:
tegwick 2026-09-27 16:15:01 +02:00
parent 41e4c4a3d8
commit e33f9c3ca5
18 changed files with 472 additions and 87 deletions

View file

@ -85,13 +85,20 @@ state_hub_intake_id: "01a0c279-538e-7d99-bf69-f4c67a8d3eda"
id: SECRETS-IN-0003
kind: intake
title: 'railiance-clock: review signing custody, rotation and lifecycle-consumer adoption condition'
status: open
status: closed
origin: cross-repo
origin_ref: hub messages f90b9f17 and 302291b5 (railiance-clock, 2026-09-14)
priority: low
owner: secrets-engine
requested_by: railiance-clock
resolution: ''
resolution: >-
Consumer review completed 2026-09-27 in docs/railiance-clock-consumer-review.md.
Reviewed ES256/PyJWT compatibility, platform signing custody boundary,
independent boot-bound trust, rotation/revocation propagation requirements,
interval validity and CAS check-to-use limits. Existing consumer code and
2026-09-16 scoped native receipt supersede the intake's proposal-only framing.
No new authority/key/activation admitted. Operational acceptance remains with
existing RCLK-WP-0002-T04 and RCLK-WP-0004/0005 owner work.
description: >-
railiance-clock published its foundation (commit 0a144b6, RCLK-WP plans) and a
candidate time-sample profile (commit 7af595b, specs/sample-profile-v0.1.md: