coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/src/secrets_engine
History
tegwick b8094f701b
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Read the secrets-engine-openbao client secret in memory from OpenBao 
Founder direction 2026-10-06 and ops-mason plan
keycape-secrets-engine-openbao-client-custody (658cdbc): no workstation copy.
service-jwt now gets CLIENT_SECRET from platform/workloads/keycape/
secrets-engine-openbao through one attended OIDC login on
keycape-secrets-engine-openbao-operator-workload-kv-read (-no-store, token from
a pipe, header-only GET, unconditional revoke-self). The consumer file is
refused for this profile and kept for the approval client.
service-auth probe-openbao prints value-free first-use evidence.

SECRETS-WP-0012: T02 cancelled (D1-D4 superseded), T04 done, T03 is the
founder-run first live use. Synthetic tests only; 524 passed, 1 skipped.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 132360@bnt-lap001
Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b
2026-10-06 14:13:41 +02:00
..
__init__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
__main__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
application_time.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
apply.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
approval_auth.py feat: exchange scoped approval service tokens per request 2026-09-09 07:06:05 +02:00
approval_claim.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
approval_consume.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
audit.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
authorization.py Bind platform OpenBao service identity to tenant zero 2026-09-27 16:43:31 +02:00
catalog.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
cli.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
config.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
decision_check.py feat: adopt the owner-documented PDP access path, and prove it live 2026-09-07 00:22:12 +02:00
decisions.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
engine_auth.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
errors.py Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
evidence.py Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate 2026-09-02 01:06:50 +02:00
evidence_class.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
exec_delivery.py Enforce companion-only credential delivery and refresh activation handoff 2026-09-27 15:58:53 +02:00
exec_owner.py Enforce companion-only credential delivery and refresh activation handoff 2026-09-27 15:58:53 +02:00
handoff.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
lane_state.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
lifecycle.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
openbao.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
pep_stance.py feat: complete and prove the authorization chain end to end 2026-09-06 14:56:02 +02:00
plan.py Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
provision.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
publication_policy.py feat(policy): netkingdom maturity-gated publication-scope policy 2026-06-28 13:14:46 +02:00
redact.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
roles.py feat: prepare data-only Anthropic native delivery lane 2026-09-06 00:25:37 +02:00
rotate.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
routing.py Bind credential exec to exact owner inputs and approval digest 2026-09-10 09:29:38 +02:00
safe_paths.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
secret_use.py Ship secret-use snapshot surface for kings-guard 2026-09-02 01:31:23 +02:00
service_auth.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
verify.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
wrap.py Add response-wrapped operator handoff 2026-09-02 08:12:42 +02:00