coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
secrets-engine/src/secrets_engine
History
tegwick bc58184d71
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 
A configured exec owner may receive fields from other consenting kv lanes.
Each lane is gated, consumed and read through its own AppRole; any refusal
starts no child. Companions are part of the owner digest.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 226514@bnt-lap001
Assistant-Session: 26ba103d-05fe-45a1-9cd7-9475bf239df6
2026-09-23 17:27:09 +02:00
..
__init__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
__main__.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
application_time.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
apply.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
approval_auth.py feat: exchange scoped approval service tokens per request 2026-09-09 07:06:05 +02:00
approval_claim.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
approval_consume.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
audit.py Harden production authorization and service auth 2026-08-23 14:15:42 +02:00
authorization.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
catalog.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
cli.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
config.py Use bounded Railiance time for protected validity checks 2026-09-15 22:16:31 +02:00
decision_check.py feat: adopt the owner-documented PDP access path, and prove it live 2026-09-07 00:22:12 +02:00
decisions.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
engine_auth.py Add named engine auth and accessor-file session revoke 2026-09-02 01:24:08 +02:00
errors.py Implement SECRETS-WP-0008 unblocked layer-model obligations 2026-08-29 12:52:55 +02:00
evidence.py Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate 2026-09-02 01:06:50 +02:00
evidence_class.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
exec_delivery.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
exec_owner.py Add companion lanes to catalog-bound exec owners (SECRETS-WP-0011 T01-T03) 2026-09-23 17:27:09 +02:00
handoff.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
lane_state.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
lifecycle.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
openbao.py Revoke leases by operator-held lease id 2026-09-02 10:08:33 +02:00
pep_stance.py feat: complete and prove the authorization chain end to end 2026-09-06 14:56:02 +02:00
plan.py Bind native OpenRouter approval to custody and delivery inputs 2026-09-14 00:54:55 +02:00
provision.py Harden secret provisioning and lifecycle controls 2026-08-23 12:05:58 +02:00
publication_policy.py feat(policy): netkingdom maturity-gated publication-scope policy 2026-06-28 13:14:46 +02:00
redact.py feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane 2026-06-28 12:28:45 +02:00
roles.py feat: prepare data-only Anthropic native delivery lane 2026-09-06 00:25:37 +02:00
rotate.py Add native rotate and persistent lane overlay states 2026-09-02 13:09:10 +02:00
routing.py Bind credential exec to exact owner inputs and approval digest 2026-09-10 09:29:38 +02:00
safe_paths.py feat: admit existing OpenBao catalog lanes 2026-08-21 08:20:33 +02:00
secret_use.py Ship secret-use snapshot surface for kings-guard 2026-09-02 01:31:23 +02:00
service_auth.py feat: exchange scoped approval service tokens per request 2026-09-09 07:06:05 +02:00
verify.py Add value-safe verification and audit reporting 2026-08-23 12:33:38 +02:00
wrap.py Add response-wrapped operator handoff 2026-09-02 08:12:42 +02:00