secrets-engine

Author	SHA1	Message	Date
tegwick	3ffb6a138e	Align authorization request digests with Go canonical wire profile All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 19:47:45 +02:00
tegwick	443c2698c3	Validate accepted security layer v0.8 owner declaration All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 02:21:25 +02:00
tegwick	9ec4e0bea5	Keep ambient tokens out of the service-JWT OpenBao login All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details The anonymous JWT login inherited BAO_TOKEN/VAULT_TOKEN and the bao CLI token helper, so it presented an env/operator token alongside the JWT. Run that login with no env token and a token helper that returns none, proven against the real bao CLI. This closes secrets-engine's part of the CCR-2026-0038 no-fallback check. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 544698@bnt-lap001 Assistant-Session: 279b8520-335f-4041-ba2a-9491335473db	2026-10-10 13:26:20 +02:00
tegwick	a963a77bc7	Close SECRETS-WP-0012-T03: service-JWT OpenBao login probe passed All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Record the founder-run probe-openbao result as non-secret evidence, finish SECRETS-WP-0012 and point SECRETS-WP-0008-T06 at the remaining platform negative checks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 544698@bnt-lap001 Assistant-Session: 279b8520-335f-4041-ba2a-9491335473db	2026-10-10 10:19:19 +02:00
tegwick	be8fab0332	Record the passed IR-WP-0005 key-check delivery. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 3s Details Assistant: grok Assistant-Session: 01a106a5-fc07-78c2-b64f-8e04cea25daf	2026-10-04 17:13:00 +02:00
tegwick	62192028d6	Reconcile completed evidence and block remaining external acceptance Some checks failed CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Has been cancelled Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e72b-466d-75c0-b550-2474a3be5f36	2026-09-28 10:43:27 +02:00
tegwick	11cc0d5452	Correct metered Sonnet 5 admission and prepare native action packet All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e332-3365-77c0-8491-084e9ea33ac1	2026-09-27 17:00:33 +02:00
tegwick	e33f9c3ca5	Finish companion catalog work and reconcile completed approval tasks All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 4s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0	2026-09-27 16:15:01 +02:00
tegwick	4a8ea4f591	Complete T03 with native OpenRouter authentication evidence All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-16 02:12:45 +02:00
tegwick	ec7263dc3f	Record renewed T03 human-review handoff after Clock deployment All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 6s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-16 01:08:56 +02:00
tegwick	c7582b1f0c	Record attended login recovery and remaining T03 prerequisites All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 03:55:43 +02:00
tegwick	5aaa49a2ec	Wait within decision validity bounds and preserve failed preflight evidence All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 3s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 03:46:28 +02:00
tegwick	3ced7a0411	Record confirmed human approvals and pending attended reader login All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 03:26:39 +02:00
tegwick	13ecd42077	Record native T03 review deployment and remaining human gate All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 02:47:32 +02:00
tegwick	1f7f42b277	Prepare exact native recipient and record approval service activation All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 3s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 01:08:50 +02:00
tegwick	7ba1b6223e	Bind native OpenRouter approval to custody and delivery inputs All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 5s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 00:54:55 +02:00
tegwick	2b0d04e8e1	Require declared human control in factory credential delivery All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-10 20:16:55 +02:00
tegwick	42b48aa54f	Bind credential exec to exact owner inputs and approval digest All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-10 09:29:38 +02:00
tegwick	ee4e901611	fix: bind approval consumption to actual Flex Auth submissions All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 08:55:46 +02:00
tegwick	7688445184	feat: exchange scoped approval service tokens per request All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 07:06:05 +02:00

20 commits