{
  "tenant": "tenant:platform",
  "subject": {
    "id": "secrets-engine",
    "type": "service"
  },
  "action": "apply",
  "resource": {
    "id": "catalog:openrouter-llm-connect",
    "type": "secret-catalog-lane",
    "system": "secrets-engine",
    "attributes": {
      "stage": "prod",
      "fields": [],
      "policy_targets": [
        "se-prod-openrouter-llm-connect"
      ],
      "auth_targets": [
        "se-prod-openrouter-llm-connect"
      ]
    }
  },
  "context": {
    "purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference",
    "catalog_target": {
      "kind": "kv",
      "org": "coulomb",
      "repo": "llm-connect",
      "mount": "platform",
      "path": "workloads/activity-core/llm-connect/llm-connect-provider-secrets",
      "fields": [
        "OPENROUTER_API_KEY"
      ],
      "mount_management": "existing",
      "consumers": [
        {
          "name": "llm-connect-activity-core",
          "auth": "kubernetes",
          "claim": "serviceaccount:external-secrets/external-secrets",
          "purpose": "sync llm-connect-provider-secrets for the activity-core deployment"
        },
        {
          "name": "intelligence-radar-key-check",
          "auth": "approle",
          "claim": "catalog:openrouter-llm-connect",
          "purpose": "IR-WP-0004 read-only OpenRouter key authentication check; no inference"
        }
      ],
      "delivery_modes": [
        "exec-env",
        "read-check"
      ],
      "delivery_auth": {
        "method": "approle",
        "management": "engine",
        "policy_name": "se-prod-openrouter-llm-connect",
        "role_name": "se-prod-openrouter-llm-connect",
        "token_ttl": "15m",
        "token_max_ttl": "30m",
        "secret_id_ttl": "15m",
        "secret_id_num_uses": 1,
        "token_num_uses": 8
      },
      "delivery_config": {
        "exec_owner": {
          "status": "configured",
          "owner": "intelligence-radar-key-check",
          "command": [
            "/usr/bin/python3.12",
            "-I",
            "-B",
            "/home/worsch/.local/share/secrets-engine/recipients/openrouter-key-check-dc1569f63ef7/openrouter_key_check.py"
          ],
          "cwd": "/run/user/1000/secrets-engine-openrouter-check",
          "environment": {
            "LANG": "C.UTF-8"
          },
          "files": {
            "/usr/bin/python3.12": {
              "sha256": "e50d468e8b0adfb05733f5b87b3cff34829c4a8c1aea50c865aa8bdfe4bb150f",
              "private": false
            },
            "/home/worsch/.local/share/secrets-engine/recipients/openrouter-key-check-dc1569f63ef7/openrouter_key_check.py": {
              "sha256": "dc1569f63ef74d73f0a735548c0573db2a1493f7ffc86945f52d0be9b27a3253",
              "private": true
            }
          }
        }
      },
      "auth_capability": {},
      "workload_delivery": [
        {
          "mode": "external-secrets",
          "owner": "railiance-platform + llm-connect"
        }
      ]
    },
    "human_control": true
  }
}