tegwick
5a2099f400
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
133 lines
8.6 KiB
JSON
133 lines
8.6 KiB
JSON
{
|
|
"proposal_id": "SECRETS-WP-0014-native-cli-20261016",
|
|
"status": "preparation only; not installable or executable authorization",
|
|
"source_base": "ff1a13dabd44ba02ddd6bc26ad75568f6d2e6225",
|
|
"workplans": [
|
|
"SECRETS-WP-0014-T02",
|
|
"SECRETS-WP-0014-T03",
|
|
"SECRETS-WP-0013-T01",
|
|
"SECRETS-WP-0013-T03"
|
|
],
|
|
"initial_scope": {
|
|
"producer": "existing flex-auth/flex-auth-secrets-engine lifecycle pin",
|
|
"consumer": "existing Secrets CLI serving authorization workflow, prospective reviewed release-bundle entrypoint only",
|
|
"stage1": "independent signer/package/trust admission and offline captured native allow+deny verification; zero protected effects",
|
|
"native_effects_admitted": 0,
|
|
"task_execution_enabled": false
|
|
},
|
|
"owner_returns": {
|
|
"access": "Custodian docs/changes/netkingdom-target-2026-10-16/access-native-preparation/native-admission-proposal-r1.json and source-policy-pins.json",
|
|
"platform": "No selected actual approved CCR/catalog/Plan/descriptor/grant/install placement; CCR-2026-0042 remains in_flight without matching catalog. Disposable source proofs are not production inputs."
|
|
},
|
|
"producer_pin": {
|
|
"evaluator": "flex-auth/local",
|
|
"mode": "standalone",
|
|
"policy_package": "secrets-engine.catalog-lane.lifecycle",
|
|
"policy_version": "v2",
|
|
"policy_package_digest": "sha256:bd11c5fe77ce6439c65fea225ad6b71d2110efc5e7b5bc9b499c59cd0a53b8b4"
|
|
},
|
|
"independent_admission": {
|
|
"production_kid": null,
|
|
"public_key": null,
|
|
"public_key_sha256": null,
|
|
"custody_receipt": null,
|
|
"candidate_producer_oci_digest": null,
|
|
"rule": "No responder keys endpoint, synthetic fixture key or deployment metadata substitutes for independent owner admission",
|
|
"receipt_verifier_integrated_revision": null,
|
|
"signer_purpose_pin_and_sharing_receipt": null
|
|
},
|
|
"placement": {
|
|
"owner": "Secrets consumer/deploying owner; exact runtime UID and paths not yet agreed",
|
|
"cli_release_prefix": null,
|
|
"cli_entrypoint": "<admitted-prefix>/bin/secrets-engine",
|
|
"fixed_verifier": "<admitted-prefix>/libexec/secrets-engine-pdp-verify",
|
|
"config_parent": null,
|
|
"trust_file": null,
|
|
"catalog_directory": null,
|
|
"policy_directory": null,
|
|
"pep_stance_file": null,
|
|
"evidence_directory": null,
|
|
"constraints": [
|
|
"new owner-controlled immutable release prefix; no overwrite or rolling source alias",
|
|
"absolute independently reviewed config/catalog/policy/stance/trust paths; no working-directory defaults for native use",
|
|
"trust regular non-symlink, not group/world writable; key admission not file-presence inference",
|
|
"owner retains manifest/admission/installation receipts and same-UID control boundary"
|
|
]
|
|
},
|
|
"configuration_contract": {
|
|
"SECRETS_ENGINE_PDP_URL": "literal loopback bare origin bound to independently verified cluster and named producer pod; exact native port awaiting owner placement",
|
|
"SECRETS_ENGINE_PDP_TOKEN_FILE": "admitted bounded Secrets ServiceAccount caller file outside Git; no mint/read here",
|
|
"SECRETS_ENGINE_PDP_TRUST_FILE": "absolute independently admitted lifecycle trust path; empty-key template deliberately refuses",
|
|
"SECRETS_ENGINE_PDP_VERIFIER": "bundle wrapper fixes installed helper; no ambient override or source-checkout helper",
|
|
"SECRETS_ENGINE_AUTHORIZATION_SUBJECT_ID": "secrets-engine",
|
|
"SECRETS_ENGINE_AUTHORIZATION_SUBJECT_TYPE": "service",
|
|
"SECRETS_ENGINE_AUTHORIZATION_POLICY_PACKAGE": "secrets-engine.catalog-lane.lifecycle",
|
|
"SECRETS_ENGINE_AUTHORIZATION_POLICY_VERSION": "v2",
|
|
"SECRETS_ENGINE_APPROVAL_URL": "independently admitted Approval endpoint/owner-bound tunnel; not yet supplied for this session",
|
|
"SECRETS_ENGINE_APPROVAL_CLIENT_SECRET_FILE": "separately admitted attended provider lifetime from existing custody contract; no read here",
|
|
"SECRETS_ENGINE_APPROVAL_TOKEN_FILE": "unset when client-secret provider selected; no simultaneous providers",
|
|
"SECRETS_ENGINE_CATALOG": "absolute owner-admitted metadata directory; initial actual lane unselected",
|
|
"SECRETS_ENGINE_POLICIES": "absolute owner-admitted metadata/policy directory",
|
|
"SECRETS_ENGINE_PEP_STANCE": "absolute hash-pinned existing total stance map; prod remains fail_closed",
|
|
"SECRETS_ENGINE_EVIDENCE": "absolute owner-private evidence/outbox path with declared custody/delivery",
|
|
"SECRETS_ENGINE_UNSAFE_DEMO": "unset; no native exception",
|
|
"backend_provider": "no new selection/entitlement; configured service-jwt protected handlers remain blocked; do not switch to bootstrap/env as workaround"
|
|
},
|
|
"rotation": {
|
|
"admit": "owner reviews independent new kid/public key/custody receipt and bounded overlap, preserving exact issuer/policy artifact pin",
|
|
"roll": "separate exact producer candidate digest/seed projection rollout with native signed receipts; never fetch discovery keys",
|
|
"remove": "after new-key native receipt/consumer acceptance, remove old kid and prove old-key refusal",
|
|
"rollback": "retain reviewed signed producer/key overlap or stop/refuse. An unsigned old deployment is an outage; never disable consumer verification, restore removed key without review, relax pin, widen backend grants or blind retry consumed operation"
|
|
},
|
|
"task_mapping_gap": {
|
|
"existing_cli_execute_ccr_command": false,
|
|
"source_handoff": "secrets_engine.task_execution_handoff authorize_task_execution/consume_task_execution",
|
|
"platform_source_mediator": "railiance-platform/scripts/task_execution_mediator.py run_native_fixture_task; source proof only",
|
|
"unadmitted_inputs": [
|
|
"real service caller-to-subject server mapping and request/service binding join",
|
|
"actual task policy candidate and independently reviewed source/runtime admission; both false gates unchanged",
|
|
"owner-selected fresh approved CCR/catalog/execution-grant, compiled Plan/whole descriptor and operation UUID",
|
|
"independent expected-before/after bytes for exact two metadata targets and actual estate/backend origin",
|
|
"actual source/Plan/install/journal/cleanup placement and trusted provider endpoints/credentials/custody",
|
|
"load-bearing audit/outbox cadence and durable receipt correlation",
|
|
"Approval/Access reviewed out-of-band fresh-fact versus original carried-claim correspondence and signed provenance; strict context equality remains unchanged"
|
|
],
|
|
"approval_fact_interface_review": {
|
|
"status": "review preference only; no implementation/admission",
|
|
"preserve": "strict binding.context equality and original submitted/approval-free/native joins",
|
|
"direction": "Access prefers out-of-band server-fetched authoritative fact checking while retaining original carried context, then reviewed producer-owned signed provenance/audit evidence",
|
|
"required_review": [
|
|
"Approval fact/freshness semantic correspondence",
|
|
"Access source receipt/provenance binding and exact request digests"
|
|
],
|
|
"b1": "signed-DENY caller join only; no context replacement",
|
|
"b2_b3": "not enabled or implemented here"
|
|
},
|
|
"approval_fact_contract": {
|
|
"artifact": "the-custodian/docs/changes/netkingdom-target-2026-10-16/approval-fact-contract/consumer-contract.md",
|
|
"sha256": "3dfb7987a4d9fe461b917cfa5bae7beef61bc4d9a4561fdded3e90128f5966de",
|
|
"vectors_artifact": "the-custodian/docs/changes/netkingdom-target-2026-10-16/approval-fact-contract/golden-vectors.json",
|
|
"vectors_sha256": "dfb0a8810cd91847d7af6a7af6a51607a67a66fad7b86fc57365308c36bd9323",
|
|
"status": "owner source contract pending integration; no Go conformance or B2 behavior admitted",
|
|
"required": "preserve original fact/context/freshness, independently validate fresh fact window and exact nonfreshness authority; do not translate native numeric digests or invent target restrictions"
|
|
}
|
|
},
|
|
"approval_state": "no owner assent, key admission, install, caller token, operation grant or live change requested/executed by this preparation",
|
|
"denominator": {
|
|
"shared_check_implementation": 1,
|
|
"serving_cli_call_sites": 11,
|
|
"serving_cli_handlers": 10,
|
|
"lifecycle_pdp_action_values": 12,
|
|
"native_effect_call_sites_accepted": 0,
|
|
"excluded": [
|
|
"session revoke stance-only backend path",
|
|
"service-auth explicit identity probes",
|
|
"route ambient-backend readiness probes",
|
|
"dry-run/non-effect reporting"
|
|
],
|
|
"task_cli_command_count": 0,
|
|
"platform_source_mediator_native_acceptance": false,
|
|
"generic_cli_consume_is_strict_task_handoff": false,
|
|
"effect_acceptance_required": "Review actual selected handler/generic consume response and caller scope separately; strict Platform fixture proof does not close existing CLI effects"
|
|
}
|
|
}
|