coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/tools
History
Exact
tegwick ebd8e49aff
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05) 
Reuse the gated-executor approval pattern: ssh-keygen -Y signatures over exact
bytes, verified against a runtime-unwritable allowed_signers anchor with a fixed
namespace per purpose. load_trust now refuses responder trust without a founder
admission; the KeyCape selector preflight gains --admission for one exact,
bounded recovery attempt. WP14 re-pointed to CUST-WP-0082-T06 and split founder
key admission into human-gated T04; WP15 T04 now requires the signed admission.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 809600@bnt-lap001
Assistant-Session: 40ba228f-c8a0-4ec9-bb29-3129951afdc4
2026-10-21 00:30:59 +02:00
..
check-keycape-recovery-selector.py feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05) 2026-10-21 00:30:59 +02:00
exercise_approval_identity.py Build the access-engine binary in the approval exercise tool 2026-10-10 15:26:24 +02:00
openrouter_key_check.py Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
prepare_metered_activation.py Correct metered Sonnet 5 admission and prepare native action packet 2026-09-27 17:00:33 +02:00
verify_service_jwt_boundary.py Prepare reviewed service JWT boundary verification and retain execution adoption gates 2026-10-11 14:11:59 +02:00