coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/src/secrets_engine
History
tegwick f211525f00
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Keep serve on the live lifecycle path until the job stream ends. 
The process reads one stage credential file at startup, applies each job through the CLI lifecycle functions, and waits for further jobs. A second stage credential file refuses startup. A local allow flag does not authorize the call.

Assistant: grok
Assistant-Session: 01a1609f-72b8-7222-9dff-fae300115e42
2026-10-22 18:15:23 +02:00
..
__init__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
__main__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
application_time.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
apply.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
approval_auth.py feat: exchange scoped approval service tokens per request 2026-09-09 07:06:05 +02:00
approval_claim.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
approval_consume.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
audit.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
authorization.py Align authorization request digests with Go canonical wire profile 2026-10-11 19:47:45 +02:00
catalog.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
cli.py Keep serve on the live lifecycle path until the job stream ends. 2026-10-22 18:15:23 +02:00
config.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
decision_check.py fix(auth): authenticate producer-signed decisions before authorization 2026-10-16 07:51:44 +02:00
decision_signature.py feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05) 2026-10-21 00:30:59 +02:00
decisions.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
engine_auth.py Refuse login-only protected execution before consuming approval 2026-10-11 14:19:30 +02:00
errors.py Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
evidence.py Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate 2026-09-02 01:06:50 +02:00
evidence_class.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
exec_delivery.py Enforce companion-only credential delivery and refresh activation handoff 2026-09-27 15:58:53 +02:00
exec_owner.py Enforce companion-only credential delivery and refresh activation handoff 2026-09-27 15:58:53 +02:00
execution_contract.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
founder_admission.py feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05) 2026-10-21 00:30:59 +02:00
handoff.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
lane_state.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
lifecycle.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
openbao.py Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00
pep_stance.py feat: complete and prove the authorization chain end to end 2026-09-06 14:56:02 +02:00
plan.py Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
provision.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
publication_policy.py feat(policy): netkingdom maturity-gated publication-scope policy 2026-06-28 13:14:46 +02:00
redact.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
roles.py feat: prepare data-only Anthropic native delivery lane 2026-09-06 00:25:37 +02:00
rotate.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
routing.py Bind credential exec to exact owner inputs and approval digest 2026-09-10 09:29:38 +02:00
safe_paths.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
secret_use.py Ship secret-use snapshot surface for kings-guard 2026-09-02 01:31:23 +02:00
service.py Keep serve on the live lifecycle path until the job stream ends. 2026-10-22 18:15:23 +02:00
service_auth.py Read the secrets-engine-openbao client secret in memory from OpenBao 2026-10-06 14:13:41 +02:00
stage_binding.py Manifest the lifecycle engine as a library, a one-stage CLI, and an in-process service. 2026-10-22 18:02:21 +02:00
task_execution_handoff.py Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
verify.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
wrap.py Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00