tegwick
d8edd9e516
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
96 lines
4.7 KiB
Markdown
96 lines
4.7 KiB
Markdown
---
|
|
id: SECRETS-WP-0013
|
|
type: workplan
|
|
title: "Design and prove task-scoped protected OpenBao execution"
|
|
domain: infotech
|
|
repo: secrets-engine
|
|
status: proposed
|
|
flavor: planning
|
|
owner: codex
|
|
topic_slug: netkingdom
|
|
created: "2026-10-11"
|
|
updated: "2026-10-11"
|
|
depends_on: []
|
|
state_hub_workstream_id: "5e38aecc-85ca-5f55-94c6-9fbb08604819"
|
|
---
|
|
|
|
Execution-contract direction remains proposed; the narrow local readiness guard
|
|
is now reviewed, published and verified in the owner checkout. No native
|
|
execution authority or general entitlement adoption is inferred.
|
|
Existing SECRETS-WP-0008-T06 remains open for actual adoption. CCR38 is an
|
|
unchanged identity-only login and is not a protected execution entitlement.
|
|
|
|
## Define the exact mediated execution contract
|
|
|
|
```task
|
|
id: SECRETS-WP-0013-T01
|
|
status: progress
|
|
priority: high
|
|
state_hub_task_id: "b2f0d462-a542-518b-a26b-b7ec07b3c7c1"
|
|
```
|
|
|
|
Design SECRETS-EXEC-20261011-v1 in docs/task-scoped-openbao-execution-contract.md
|
|
binds action, target, payload/source digests, initiating identity, exact PDP/CAS,
|
|
owner-held ephemeral two-path token, bounded TTL/uses, durable admission and
|
|
cleanup. Independent Platform/Secrets Engine/identity/approval/PDP owner returns
|
|
are required. No foreign review is written by this draft.
|
|
|
|
2026-10-11 source-only preparation: typed execution_contract is staged through
|
|
all four request builders. The new descriptor is restricted to execute-ccr,
|
|
requires prod/platform/human control and binds the catalog fingerprint before
|
|
claim. Existing apply/other actions cannot borrow this descriptor. 99 focused
|
|
source checks verify propagation, canonical approval/full consume joins,
|
|
immutable copies and changed-binding refusals. Detailed schema/limitations are
|
|
in the execution-contract document. No source owner assent, initiating-principal
|
|
admission, new policy package, ledger/mediator/backend or native acceptance is
|
|
claimed. Independent source review remains required. Task statuses are unchanged.
|
|
|
|
## Prevent consumption without execution readiness
|
|
|
|
```task
|
|
id: SECRETS-WP-0013-T02
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "4ad61917-506d-5c12-a715-3d336e6b95e0"
|
|
```
|
|
|
|
Completed the narrow local implementation and source-verification obligation.
|
|
Secrets Engine source commit 97dfa5ea8fbfe998094bf03a3581ee0c5313ac30 was published
|
|
through the root's C17 source-publication record. Independent Platform source
|
|
acknowledgment is published in 46f5c956b52524d9d8177002bb60020c7e558039 and
|
|
`railiance-platform/docs/reviews/2026-10-11-secrets-execution-readiness-v2-platform-review.json`.
|
|
The root verified all 36 focused guard/auth/consume/privileged-evidence checks in
|
|
the actual owner checkout; Platform's independent source review passed 58 checks.
|
|
Current published CLI/auth/test hashes match those accepted exact sources.
|
|
|
|
Configured auto and explicit service-jwt refuse the ten guarded backend handlers
|
|
before claim/PDP/CAS/login/backend work because no task-execution backend exists.
|
|
Named bootstrap/env paths retain their existing approval/stance gates; login-self
|
|
probes remain available. The unchanged ambient route/readiness surface is outside
|
|
this guard's scope and is not service-JWT adoption. Task completion covers only
|
|
this local fail-closed guard, its source review/publication and source verification.
|
|
T01 remains progress, T03 remains wait with qualified dependencies, WP13 remains
|
|
proposed, and SECRETS-WP-0008-T06 remains open for actual protected execution
|
|
adoption/native effect, denial/no-fallback and cleanup evidence. No task-scoped
|
|
backend entitlement, provider default flip, founder native go or native acceptance
|
|
is claimed.
|
|
|
|
## Implement and prove one native metadata action
|
|
|
|
```task
|
|
id: SECRETS-WP-0013-T03
|
|
status: wait
|
|
depends_on: [SECRETS-WP-0013-T01, RPF-WP-0035-T12]
|
|
wait_reason: "Wait for independent execution-contract acceptance and Platform task-scoped entitlement design/materialization, then exact founder native go."
|
|
priority: high
|
|
state_hub_task_id: "5f8f7c41-5921-543f-a7c6-0b1350ea6d82"
|
|
```
|
|
|
|
After T01 independent owner acceptance, implement the narrow execute-ccr surface,
|
|
Platform task-grant mediator, bound policy package and admission ledger. Select
|
|
an actual unexecuted approved metadata CCR, exact founder go and attended owner
|
|
custody. Prove real protected effect, sibling/body/refusal/replay counterexamples
|
|
and confirmed revocation/cleanup. No applied CCR38 replay or broad default flip.
|
|
Native metadata proof does not certify provision/exec delivery or all T06 scope.
|
|
|
|
2026-10-11 source revision v2: qualified T03 dependencies point to the owning design and Platform execution-entitlement task. WP13 owns the missing task-scoped execution seam; WP8-T06 retains production adoption and its full workflow proof. Source publication and fixture checks do not imply native acceptance. Original v1 stage remains unchanged.
|