coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/src/secrets_engine
History
tegwick 3abee434df
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Add named engine auth and accessor-file session revoke 
Select service-jwt, bootstrap, or env exclusively: JWT login uses a JSON
file, self-revokes, and never falls back to bootstrap or BAO_TOKEN. The
platform JWT mount/role is still unpublished, so auto keeps named
bootstrap/env providers.

session revoke --accessor-file revokes an already-issued token with
fingerprint-only evidence. Production remains fail-closed.

Assistant: grok
Assistant-Session: 01a05f07-ae72-7781-9fcb-19efd61add00
2026-09-02 01:24:08 +02:00
..
__init__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
__main__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
apply.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
approval_consume.py Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate 2026-09-02 01:06:50 +02:00
audit.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
authorization.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
catalog.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
cli.py Add named engine auth and accessor-file session revoke 2026-09-02 01:24:08 +02:00
config.py Add named engine auth and accessor-file session revoke 2026-09-02 01:24:08 +02:00
decisions.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
engine_auth.py Add named engine auth and accessor-file session revoke 2026-09-02 01:24:08 +02:00
errors.py Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
evidence.py Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate 2026-09-02 01:06:50 +02:00
evidence_class.py Add named engine auth and accessor-file session revoke 2026-09-02 01:24:08 +02:00
exec_delivery.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
handoff.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
lifecycle.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
openbao.py Add named engine auth and accessor-file session revoke 2026-09-02 01:24:08 +02:00
pep_stance.py Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
plan.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
provision.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
publication_policy.py feat(policy): netkingdom maturity-gated publication-scope policy 2026-06-28 13:14:46 +02:00
redact.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
roles.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
routing.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
safe_paths.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
service_auth.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
verify.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00