coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/src/secrets_engine
History
tegwick 4dd004a225
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Verify normalized task approval facts and preserve signed source types 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
2026-10-16 17:28:03 +02:00
..
__init__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
__main__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
application_time.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
apply.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
approval_auth.py feat: exchange scoped approval service tokens per request 2026-09-09 07:06:05 +02:00
approval_claim.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
approval_consume.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
audit.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
authorization.py Align authorization request digests with Go canonical wire profile 2026-10-11 19:47:45 +02:00
catalog.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
cli.py Document exact native signer and CLI admission requirements 2026-10-16 10:48:40 +02:00
config.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
decision_check.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
decision_signature.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
decisions.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
engine_auth.py Refuse login-only protected execution before consuming approval 2026-10-11 14:19:30 +02:00
errors.py Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
evidence.py Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate 2026-09-02 01:06:50 +02:00
evidence_class.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
exec_delivery.py Enforce companion-only credential delivery and refresh activation handoff 2026-09-27 15:58:53 +02:00
exec_owner.py Enforce companion-only credential delivery and refresh activation handoff 2026-09-27 15:58:53 +02:00
execution_contract.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
handoff.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
lane_state.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
lifecycle.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
openbao.py Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00
pep_stance.py feat: complete and prove the authorization chain end to end 2026-09-06 14:56:02 +02:00
plan.py Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
provision.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
publication_policy.py feat(policy): netkingdom maturity-gated publication-scope policy 2026-06-28 13:14:46 +02:00
redact.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
roles.py feat: prepare data-only Anthropic native delivery lane 2026-09-06 00:25:37 +02:00
rotate.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
routing.py Bind credential exec to exact owner inputs and approval digest 2026-09-10 09:29:38 +02:00
safe_paths.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
secret_use.py Ship secret-use snapshot surface for kings-guard 2026-09-02 01:31:23 +02:00
service_auth.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
task_execution_handoff.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
verify.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
wrap.py Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00