secrets-engine/tests
tegwick 1945e16685
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Declare Engine/Lifecycle against security layer model v0.7
Replace the gate-house review note with this repository's own declaration:
INTENT.md frontmatter, layer.yaml, and a published PEP stance map. SCOPE.md
and agent boundary docs now match that layer. The review under history/
identifies the implementation remainder; SECRETS-WP-0008 is the follow-on
workplan. SECRETS-IN-0001 is closed.

The layer is not contested. Catalog "custody" is a finding: OpenBao owns
custody, this engine owns the lifecycle API over it. SSH-CA signing is
accepted as a proposed engine API and declined as a Staff lane.

Assistant: grok
Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b
2026-08-29 11:57:47 +02:00
..
__init__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
test_action_authorization.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_audit.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_auth_capability.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_catalog.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
test_decisions.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_exec_delivery.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_existing_lane_admission.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_guards.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
test_integration_bao.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
test_layer_conformance.py Declare Engine/Lifecycle against security layer model v0.7 2026-08-29 11:57:47 +02:00
test_lifecycle.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_multifield_readiness.py Record privileged action failure evidence 2026-08-23 12:58:12 +02:00
test_openbao_safe_write.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
test_privileged_cli_evidence.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_publication_policy.py feat(policy): netkingdom maturity-gated publication-scope policy 2026-06-28 13:14:46 +02:00
test_redact_evidence.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_safe_paths.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
test_service_auth.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
test_verification_negative.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00