coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/docs
History
tegwick 745ad146b5
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
evidence(service-jwt): attended CCR-2026-0038 boundary check passed 
Founder-authorized attended run of tools/verify_service_jwt_boundary.py
--execute: exact self policy, capabilities-self deny on all five paths, service
and operator revocation succeeded. Claim negatives, expiry/use and adoption
remain open in SECRETS-WP-0008-T06.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 17890@bnt-lap001
Assistant-Session: 7d96d43c-0154-4a22-af71-71c349ac6dc3
2026-10-21 20:54:32 +02:00
..
drafts Finish companion catalog work and reconcile completed approval tasks 2026-09-27 16:15:01 +02:00
evidence evidence(service-jwt): attended CCR-2026-0038 boundary check passed 2026-10-21 20:54:32 +02:00
proposals Record reproducible CLI release and exact native admission requirements 2026-10-16 18:44:05 +02:00
2026-09-27-loose-end-closeout.md Finish companion catalog work and reconcile completed approval tasks 2026-09-27 16:15:01 +02:00
approval-consumption.md Finish companion catalog work and reconcile completed approval tasks 2026-09-27 16:15:01 +02:00
approval-service-auth.md Changes from flex-auth to access-engine rename 2026-09-30 19:53:37 +02:00
canonical-request-digest-profile.md Align authorization request digests with Go canonical wire profile 2026-10-11 19:47:45 +02:00
catalog-admission.md Require declared human control in factory credential delivery 2026-09-10 20:16:55 +02:00
cli-release-bundle.md build: package CLI with pinned producer verifier 2026-10-16 09:20:33 +02:00
cli.md Bind wrapped issuance to native metadata and preserve immutable recipient attempts 2026-10-12 00:11:49 +02:00
exec-owner-binding.md Point exec-owner-binding at the access-engine checkout 2026-10-09 19:53:41 +02:00
founder-admission.md feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05) 2026-10-21 00:30:59 +02:00
gated-actions.md docs: publish the authoritative gated-action list for flex-auth 2026-09-06 01:27:17 +02:00
glas-claude-delivery.md Correct metered Sonnet 5 admission and prepare native action packet 2026-09-27 17:00:33 +02:00
hardening-backlog.md Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
keycape-isolated-consumer-continuity-plan.md docs(recovery): deliver isolated original consumer custody plan 2026-10-17 04:23:03 +02:00
keycape-isolated-recovery-selector.md feat(recovery): prepare owner-bound offline continuity preflight 2026-10-17 01:03:36 +02:00
keycape-openbao-consumer-custody.md Reflect the published service-JWT login contract and proven login 2026-10-10 12:41:16 +02:00
keycape-recovery-selector.json feat(recovery): prepare owner-bound offline continuity preflight 2026-10-17 01:03:36 +02:00
native-lane-cutover.md Prepare exact native recipient and record approval service activation 2026-09-14 01:08:50 +02:00
netkingdom-security-infrastructure.md Declare Engine/Lifecycle against security layer model v0.7 2026-08-29 11:57:47 +02:00
openbao-jwt-login.md Prepare reviewed service JWT boundary verification and retain execution adoption gates 2026-10-11 14:11:59 +02:00
openbao-stage-roles.md feat: add auth-capability lanes and pilot closeout 2026-06-29 16:58:16 +02:00
openrouter-native-access.md Complete T03 with native OpenRouter authentication evidence 2026-09-16 02:12:45 +02:00
ops-warden-routing-contract.md Document scope alignment and warden-sign readiness 2026-06-30 00:52:05 +02:00
pdp-access-path.md Document exact native signer and CLI admission requirements 2026-10-16 10:48:40 +02:00
publication-scope-policy.md Migrate whynot-design npm catalog and docs to Forgejo registry 2026-07-09 11:38:15 +02:00
railiance-clock-consumer-review.md Finish companion catalog work and reconcile completed approval tasks 2026-09-27 16:15:01 +02:00
secret-use-evidence-contract.md Ship secret-use snapshot surface for kings-guard 2026-09-02 01:31:23 +02:00
service-auth.md Prepare reviewed service JWT boundary verification and retain execution adoption gates 2026-10-11 14:11:59 +02:00
service-jwt-final-acceptance.md Prepare reviewed service JWT boundary verification and retain execution adoption gates 2026-10-11 14:11:59 +02:00
ssh-ca-signing-contract.md Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
statehub-register.md Initial commit 2026-06-28 09:03:37 +00:00
task-execution-handoff.md Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
task-scoped-openbao-execution-contract.md Verify normalized task approval facts and preserve signed source types 2026-10-16 17:28:03 +02:00
template-validation-checklist.md Initial commit 2026-06-28 09:03:37 +00:00
tenant-alignment.md Bind platform OpenBao service identity to tenant zero 2026-09-27 16:43:31 +02:00
warden-sign-auth-capability.md Close warden-sign token lane 2026-06-30 01:01:55 +02:00
whynot-design-real-publish-closeout.md Answer the exec-path question: the front door reads the ungoverned duplicate. 2026-09-21 02:36:31 +02:00