secrets-engine/docs/evidence
tegwick 745ad146b5
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
evidence(service-jwt): attended CCR-2026-0038 boundary check passed
Founder-authorized attended run of tools/verify_service_jwt_boundary.py
--execute: exact self policy, capabilities-self deny on all five paths, service
and operator revocation succeeded. Claim negatives, expiry/use and adoption
remain open in SECRETS-WP-0008-T06.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 17890@bnt-lap001
Assistant-Session: 7d96d43c-0154-4a22-af71-71c349ac6dc3
2026-10-21 20:54:32 +02:00
..
2026-10-11-task-execution Align authorization request digests with Go canonical wire profile 2026-10-11 19:47:45 +02:00
2026-10-12-wrapped-issuer-hardening Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00
2026-09-09-approval-identity-exercise.json feat: exchange scoped approval service tokens per request 2026-09-09 07:06:05 +02:00
2026-09-09-replay-contract-exercise.json fix: bind approval consumption to actual Flex Auth submissions 2026-09-09 08:55:46 +02:00
2026-09-10-exec-owner-approval-exercise.json Bind credential exec to exact owner inputs and approval digest 2026-09-10 09:29:38 +02:00
2026-09-10-human-control-consumer-exercise.json Require declared human control in factory credential delivery 2026-09-10 20:16:55 +02:00
2026-09-14-approval-engine-deployment.json Prepare exact native recipient and record approval service activation 2026-09-14 01:08:50 +02:00
2026-09-14-openrouter-apply-request.json Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
2026-09-14-openrouter-approval-exercise.json Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
2026-09-14-openrouter-final-apply-request.json Prepare exact native recipient and record approval service activation 2026-09-14 01:08:50 +02:00
2026-09-14-openrouter-final-exec-request.json Prepare exact native recipient and record approval service activation 2026-09-14 01:08:50 +02:00
2026-09-14-openrouter-final-verify-request.json Prepare exact native recipient and record approval service activation 2026-09-14 01:08:50 +02:00
2026-09-14-openrouter-live-pdp.json Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
2026-09-14-openrouter-native-plan.txt Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
2026-09-14-openrouter-recipient-install.json Prepare exact native recipient and record approval service activation 2026-09-14 01:08:50 +02:00
2026-09-14-t03-approved-awaiting-reader.json Record confirmed human approvals and pending attended reader login 2026-09-14 03:26:39 +02:00
2026-09-14-t03-join-preflight.json Wait within decision validity bounds and preserve failed preflight evidence 2026-09-14 03:46:28 +02:00
2026-09-14-t03-login-recovery.json Record attended login recovery and remaining T03 prerequisites 2026-09-14 03:55:43 +02:00
2026-09-14-t03-native-execution-attempt-01.json Wait within decision validity bounds and preserve failed preflight evidence 2026-09-14 03:46:28 +02:00
2026-09-14-t03-native-pdp-inputs.json Record native T03 review deployment and remaining human gate 2026-09-14 02:47:32 +02:00
2026-09-15-t03-native-execution.json Complete T03 with native OpenRouter authentication evidence 2026-09-16 02:12:45 +02:00
2026-09-16-t03-completion.json Complete T03 with native OpenRouter authentication evidence 2026-09-16 02:12:45 +02:00
2026-09-16-t03-renewed-review-handoff.json Record renewed T03 human-review handoff after Clock deployment 2026-09-16 01:08:56 +02:00
2026-09-16-t03-resume-exec.json Complete T03 with native OpenRouter authentication evidence 2026-09-16 02:12:45 +02:00
2026-09-27-companion-catalog-readiness.json Finish companion catalog work and reconcile completed approval tasks 2026-09-27 16:15:01 +02:00
2026-09-27-installed-policy-refusal.json Correct metered Sonnet 5 admission and prepare native action packet 2026-09-27 17:00:33 +02:00
2026-09-27-metered-host-preflight.json Correct metered Sonnet 5 admission and prepare native action packet 2026-09-27 17:00:33 +02:00
2026-09-27-metered-owner-deployment.json Reconcile completed evidence and block remaining external acceptance 2026-09-28 10:43:27 +02:00
2026-09-27-sonnet5-runtime-proof.json Correct metered Sonnet 5 admission and prepare native action packet 2026-09-27 17:00:33 +02:00
2026-09-27-sonnet5-tool-session-proof.json Reconcile completed evidence and block remaining external acceptance 2026-09-28 10:43:27 +02:00
2026-09-27-t03-native-execution.json Record the passed IR-WP-0005 key-check delivery. 2026-10-04 17:13:00 +02:00
2026-10-04-t03-native-execution-cwd-missing.json Record the passed IR-WP-0005 key-check delivery. 2026-10-04 17:13:00 +02:00
2026-10-10-keycape-openbao-probe.json Close SECRETS-WP-0012-T03: service-JWT OpenBao login probe passed 2026-10-10 10:19:19 +02:00
2026-10-10-service-jwt-no-fallback.json Keep ambient tokens out of the service-JWT OpenBao login 2026-10-10 13:26:20 +02:00
2026-10-11-security-layer-v08-migration.json Validate accepted security layer v0.8 owner declaration 2026-10-11 02:21:25 +02:00
2026-10-21-service-jwt-boundary.json evidence(service-jwt): attended CCR-2026-0038 boundary check passed 2026-10-21 20:54:32 +02:00