secrets-engine/docs/evidence/2026-09-14-openrouter-native-plan.txt
tegwick 7ba1b6223e
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 5s
Bind native OpenRouter approval to custody and delivery inputs
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
2026-09-14 00:54:55 +02:00

20 lines
1,008 B
Text

Plan for lane 'openrouter-llm-connect' (stage=prod)
decision: <none>
stage role: secrets-engine-prod
consumer policy: se-prod-openrouter-llm-connect
consumer approle: se-prod-openrouter-llm-connect
actions:
[kv-mount-check] platform (type=kv-v2, management=existing, mutation=none)
[policy] se-prod-openrouter-llm-connect (paths=platform/data/workloads/activity-core/llm-connect/llm-connect-provider-secrets)
[approle] se-prod-openrouter-llm-connect (token_policies=se-prod-openrouter-llm-connect, auth=approle, token_ttl=15m, token_max_ttl=30m, token_num_uses=8, secret_id_ttl=15m, secret_id_num_uses=1)
generated consumer policy (HCL):
# Generated by secrets-engine for policy "se-prod-openrouter-llm-connect"
path "platform/data/workloads/activity-core/llm-connect/llm-connect-provider-secrets" {
capabilities = ["read"]
}
path "platform/metadata/workloads/activity-core/llm-connect/llm-connect-provider-secrets" {
capabilities = ["read"]
}