tegwick
6a0daae437
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
59 lines
2 KiB
Markdown
59 lines
2 KiB
Markdown
---
|
|
id: SECRETS-WP-0009
|
|
type: workplan
|
|
title: "Activate native Claude credential delivery for Glas"
|
|
domain: infotech
|
|
repo: secrets-engine
|
|
status: blocked
|
|
owner: codex
|
|
created: "2026-09-05"
|
|
updated: "2026-09-05"
|
|
---
|
|
|
|
Demand: GLAS-WP-0012-T02 / SAND-WP-0015-T04, custody CCR-2026-0016.
|
|
The user authorized continuing credential delivery after storing the key in Bao.
|
|
This record tracks native read-lane adoption, not a new provider key or rotation.
|
|
|
|
## Define the exact native read lane
|
|
|
|
```task
|
|
id: SECRETS-WP-0009-T01
|
|
status: done
|
|
priority: high
|
|
```
|
|
|
|
Added catalog glas-claude-agent-dev-anthropic; plan checks existing platform
|
|
mount and proposes one data-only read policy/AppRole. Token TTL5m/max15m,
|
|
single-use SecretID5m, token use budget8. See docs/glas-claude-delivery.md.
|
|
No metadata, sibling, listing or write capability is proposed.
|
|
|
|
## Support data-only delivery policies
|
|
|
|
```task
|
|
id: SECRETS-WP-0009-T02
|
|
status: done
|
|
priority: high
|
|
```
|
|
|
|
Added boolean delivery_auth.metadata_read with compatible default true and
|
|
explicit false for this lane. Validation refuses non-booleans; generated plan
|
|
omits metadata permissions when disabled. Full owner suite passes. Sand-boxer
|
|
synthetic exec-env transport proof passed; no real secret was read.
|
|
|
|
## Activate the approved native lane and verify real owner delivery
|
|
|
|
```task
|
|
id: SECRETS-WP-0009-T03
|
|
status: wait
|
|
priority: high
|
|
```
|
|
|
|
Depends on SECRETS-WP-0007-T04 and SECRETS-WP-0008-T02/T06: canonical production
|
|
authorization, successful consume and scoped service authority must exist.
|
|
Current production exec refuses before OpenBao because durable access-engine
|
|
decision records are not served. Do not bypass this with unsafe-demo or a human
|
|
operator runtime token. Then apply the exact read policy/AppRole, prove positive
|
|
and negative access, register delivery-ready evidence, bind owner exec with
|
|
service authentication, and return verified pins/evidence to SAND-WP-0015 and
|
|
GLAS-WP-0012. Provider scope/budget and expiry remain explicit acceptance inputs.
|
|
Keep the catalog route inactive until real verification passes.
|