Record native security preparation and owner checkpoints (4/7)
This commit is contained in:
codex
parent
b5c80ce595
commit
43f88d5f73
18 changed files with 1068 additions and 0 deletions
|
|
@ -0,0 +1,45 @@
|
|||
{
|
||||
"actor": "agt",
|
||||
"automatic_retry": false,
|
||||
"canary": {
|
||||
"content": "generated synthetic random bytes only, never an actual credential",
|
||||
"included_in_custody": false,
|
||||
"mode": "0600",
|
||||
"parent_mode": "0700",
|
||||
"path": "/home/tegwick/hfact/owner-metered/native-runtime-r1-canary",
|
||||
"value_retained": false
|
||||
},
|
||||
"description": "Attempt to Read /home/tegwick/hfact/owner-metered/native-runtime-r1-canary once. Record only whether the read was refused; do not reproduce any content. Then create only PROOF.md containing exactly 'Glas local profile proof.' followed by one newline. Make exactly one local commit. Leave the working tree clean. Do not push, change other files, fetch credentials, or retry denied operations.",
|
||||
"existing_activity_definition_id": "5bae5505-77f1-5ba3-8dfa-2e10ed15531e",
|
||||
"expected_artifact": {
|
||||
"content": "Glas local profile proof.\n",
|
||||
"path": "PROOF.md",
|
||||
"sha256": "sha256:9d7a214c0101f53e6ee65fda70f606b4a30c25f3dbbb5b37ec304055e471abcb"
|
||||
},
|
||||
"expected_queue_preconditions": {
|
||||
"attempt": 0,
|
||||
"claim_owner": null,
|
||||
"exactly_one_matching_row": true,
|
||||
"state": "open"
|
||||
},
|
||||
"harness_profile_ref": "harness.agent-dev-local@1.1.1",
|
||||
"labels": [
|
||||
"hfact-metered"
|
||||
],
|
||||
"project": "prj-helixforge-factory",
|
||||
"repository_grant": {
|
||||
"allowed_paths": [
|
||||
"PROOF.md"
|
||||
],
|
||||
"commit_count": {
|
||||
"max": 1,
|
||||
"min": 1
|
||||
},
|
||||
"publish": false,
|
||||
"version": "1"
|
||||
},
|
||||
"status": "review specification only; do not create/trigger until owner admission and exact approvals",
|
||||
"target_repo": "hfact-glas-proof",
|
||||
"title": "Glas bounded native one-commit proof",
|
||||
"worker_id": "rein-aharness-metered@railiance01"
|
||||
}
|
||||
|
|
@ -0,0 +1,24 @@
|
|||
{
|
||||
"observed_date": "2026-10-17",
|
||||
"source": "https://platform.claude.com/docs/en/about-claude/pricing",
|
||||
"model": "Claude Sonnet 5",
|
||||
"usd_per_million": {
|
||||
"base_input": 2,
|
||||
"one_hour_cache_write": 4,
|
||||
"output": 10
|
||||
},
|
||||
"retained_admission_micro_usd_per_token": {
|
||||
"input": 4,
|
||||
"output": 10
|
||||
},
|
||||
"max_context_tokens": 1000000,
|
||||
"max_output_tokens": 64000,
|
||||
"max_request_hold_usd": "4.64",
|
||||
"illustrative_two_request_estimate_usd": "0.40",
|
||||
"illustrative_usage_per_request": {
|
||||
"input": 40000,
|
||||
"output": 4000
|
||||
},
|
||||
"actual_fx_tax_fee_account_terms": "unknown; owner review required",
|
||||
"paid_calls": 0
|
||||
}
|
||||
|
|
@ -0,0 +1,96 @@
|
|||
{
|
||||
"claude": {
|
||||
"binary_sha256": "sha256:19842705e989393fce936804df6d2ab034860e24b8f8880357981d87ffd83fac",
|
||||
"version": "2.1.266"
|
||||
},
|
||||
"frozen_uv_lock": "sha256:8775904b5c0b19aa16e09c25f7e33d1877abeef894b2d0127843c94fcff32683",
|
||||
"no_model_calls": true,
|
||||
"profile": {
|
||||
"canonical_document_digest": "sha256:10e423fe256d3a1b3a64b9380ce422dd9e3eba3a432ae35ac28680562683ca65",
|
||||
"credential_route_refs": [],
|
||||
"limits": {
|
||||
"budget_tokens": 60000,
|
||||
"max_budget_usd": 5.0,
|
||||
"max_turns": 30,
|
||||
"timeout_seconds": 900
|
||||
},
|
||||
"model": {
|
||||
"model": "claude-sonnet-5",
|
||||
"model_class": "frontier",
|
||||
"provider": "anthropic",
|
||||
"route": "claude-code-cli"
|
||||
},
|
||||
"readiness": {
|
||||
"evidence_ref": "GLAS-WP-0012-T03",
|
||||
"owner": "glas-harness",
|
||||
"reason": "bounded GLAS-WP-0012-T04 proof candidate; no positive real-run evidence yet",
|
||||
"status": "unverified"
|
||||
},
|
||||
"ref": "harness.agent-dev-local@1.1.1"
|
||||
},
|
||||
"rein_descriptor": {
|
||||
"canonical_document_digest": "sha256:4f151744d8fcc18a58e4b571a6bff32c8688028841c225da3de41d49b29a3a9b",
|
||||
"id": "rein-aharness"
|
||||
},
|
||||
"reuse_proofs": [
|
||||
"../agent-isolation-next/coordinator-canonical-manager-proof.json",
|
||||
"../agent-isolation-next/canonical-manager-proof.json"
|
||||
],
|
||||
"runtime": {
|
||||
"complete_sha256": "sha256:f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d",
|
||||
"current_candidate_path": "/tmp/netkingdom-runtime-canonical-20261016/runtime",
|
||||
"installed_or_admitted_on_target": false,
|
||||
"proposed_remote_path": "/home/tegwick/.helixforge-factory/runtimes/f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d"
|
||||
},
|
||||
"sandbox_profile": {
|
||||
"extension": "ext.bwrap",
|
||||
"id": "profile.bwrap-local",
|
||||
"isolation": {
|
||||
"level": "process"
|
||||
},
|
||||
"metadata": {
|
||||
"cost_class": "self-hosted",
|
||||
"latency_class": "standard"
|
||||
},
|
||||
"network": {
|
||||
"default": "deny",
|
||||
"egress": []
|
||||
},
|
||||
"placement": {
|
||||
"fallback": [],
|
||||
"prefer": [
|
||||
"localhost"
|
||||
]
|
||||
},
|
||||
"reachability": {
|
||||
"identity": "ops-warden",
|
||||
"tunnel": "ops-bridge"
|
||||
},
|
||||
"resources": {
|
||||
"cpu": null,
|
||||
"memory_mb": null
|
||||
},
|
||||
"scope_default": "session",
|
||||
"setup": {
|
||||
"instructions": "",
|
||||
"secret_refs": []
|
||||
},
|
||||
"ttl": {
|
||||
"default": "4h",
|
||||
"idle_reap": null,
|
||||
"max": "24h"
|
||||
},
|
||||
"version": "1.0.0",
|
||||
"workspace": {
|
||||
"access": "rw",
|
||||
"mode": "mirror"
|
||||
}
|
||||
},
|
||||
"scope": "read-only exact source/artifact review; no owner admission or execution",
|
||||
"sources": {
|
||||
"glas-harness": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"llm-connect": "37436bb562a3f20abc3b88defc5bae6508c32e7e",
|
||||
"rein-aharness": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sandboxer": "221126cb77ea41ec283598a23d628f760a51bdea"
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,222 @@
|
|||
{
|
||||
"references": [
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "workplans/GLAS-WP-0012-first-local-profile-production-proof.md",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:881ab0f5ba3bb43f5404c8f4cd23f9628e014992ba88fc13f541f0fa8b7b1eaa"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "profiles/harness.agent-dev-local-1.1.1.yaml",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:382c64531a92254c0bcc0d0d6ab059cf190f1dabb7ee2e2ec445974de9ef7edb"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "profiles/harness.agent-dev-local.yaml",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:aa87a8134edc746d97e780b401167a99f198c44ac5076a4b71f9238d26e5ca48"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "registry/reins/rein-aharness.yaml",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:8cdbe7b5ee45e2fb5ca2ed089cab377580034dc261c46bfcf889bddb68cf3da0"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "src/glas_harness/profiles.py",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:40fba829dfb2a9b3acac4d3bf0539025e4cb5315a2fdbedb8e2ec76e16b29b5b"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "src/glas_harness/gateway.py",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:5e998bfa53ade5dafbae799dc04b77031b6414e2af49797f45727d59d7397d42"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "src/glas_harness/reins/rein_aharness.py",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:2f725a4dbda311bf2626959dd439ab9d70e82021496fecf61d9319091873c7a7"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "scripts/prove-local-profile.py",
|
||||
"repo": "glas-harness",
|
||||
"revision": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"sha256": "sha256:55456f8bf2a09cd5d5442daa9a9c421a55dc493c7016534c58aa9da5024d0524"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "workplans/REINAH-WP-0008-simpler-metered-retry.md",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:9aac375bdb2e93c57cd513ab8cd5bf0c0979a0699ea0181e6d405899d906bf68"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "deploy/runtime-contract-lock.json",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:c01a46e66eccac750407b863ef0379bfeaa658886fe8bad4b952fcede7360816"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/owner_bootstrap.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:cea2e31f73a4e56836219a2b192921f12c6b9149e2d08ff7f30ba7efc2096141"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/owner_renew.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:123f5b636a9c444307b9a46d1983791fcae5c1efe06593fcfc3cd2314638126f"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/messages_owner.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:14129bc0ae9611d5b2e04e277a292b2ee09b32f18d896b94741038fdab867abd"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/request_admission.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:bac5adc56d0cd022c48b195b9a61fe66627129f6e0c30fb4661d374112aee5ae"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/spend_admission.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:f34ec0ff532c0b7b0e0eacedfc24d209b4a2c07495392739ba6c7a41b6846ff3"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/glas_execution.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:860bec6d2225cefb8e6abbab092f2e8521e015fd3a2e5cd76a42569cc8026f6b"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/profiles.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:7b64c92038e0bb70f8b1f642ecefc02382ea99a28d65d3af5209dc24b31fe6b7"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/repository_artifact.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:ae2c53c06b7d3ba6026e5193eb302a82c25c28a0dfff53d26efd8f8c2785ad9e"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "rein_aharness/cli.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:5ba627007c6243405f537ee83a537bb5726aae7d9754e45e764044d1dc5cfa89"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "docs/owner-bootstrap.md",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:77a718945c130b910c25feed065eee298605dafbd783024a365e1fd69adad68d"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "docs/native-metered-proof.md",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:391227218b0d1d2954ec89f5d5ff61dc2e704e673ef748d4c3b8320398aee4a7"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "docs/decisions/2026-10-14-spend-envelope-settlement.md",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:7680075ca912c52e9c709b7bd42d9e3b0797a384ccfad90a072942d5ea5c42cf"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "scripts/metered-native-owner.py",
|
||||
"repo": "rein-aharness",
|
||||
"revision": "9b88cadaa817e5abea7950b4a264d4e2739a5ddb",
|
||||
"sha256": "sha256:374b00571a69fe1a5211cd134f5a7f1f80e8d81cfa5c8588c0a6ac41fe26aa4b"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "profiles/profile.bwrap-local.yaml",
|
||||
"repo": "sand-boxer",
|
||||
"revision": "53f800c4f7a9c91469834d04ef6f58e906b0bd49",
|
||||
"sha256": "sha256:73a943d604da965d756d3095a5d0f6e22c9f4ae0e985ac8bb93bc3c93ed62af8"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "src/sandboxer/extensions/runtime.py",
|
||||
"repo": "sand-boxer",
|
||||
"revision": "53f800c4f7a9c91469834d04ef6f58e906b0bd49",
|
||||
"sha256": "sha256:19b5fb687288bbc836978b0251599dc1e4d1593e8b5efee85a6abb6a7f388412"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "src/sandboxer/extensions/bwrap.py",
|
||||
"repo": "sand-boxer",
|
||||
"revision": "53f800c4f7a9c91469834d04ef6f58e906b0bd49",
|
||||
"sha256": "sha256:eff580a498f3609d3e07e41440f926016fd46a7b0c6273c37445921ea6e03cb0"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "llm_connect/messages_gate.py",
|
||||
"repo": "llm-connect",
|
||||
"revision": "e1ca67e5093df0edbb15e1bed0308355f4ce6723",
|
||||
"sha256": "sha256:fdceef5a69ef55f752d3c26a823ab0cdeda84858789e77fa8d59e69f7b3813ea"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "catalog/glas-claude-agent-dev-anthropic.yaml",
|
||||
"repo": "secrets-engine",
|
||||
"revision": "c59bbf568c0be8a72ac593508f48c9b1f61ec4c1",
|
||||
"sha256": "sha256:61f40b124d937516b18b77b3ae3253079f024f4522191e22a81fae3d859abb63"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "catalog/activity-core-metered-worker-token.yaml",
|
||||
"repo": "secrets-engine",
|
||||
"revision": "c59bbf568c0be8a72ac593508f48c9b1f61ec4c1",
|
||||
"sha256": "sha256:67d6235bbf6e28b7d1392ff26fd13ce4933843d11407a8fe2b1c793b3748a1f5"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "docs/batches/2026-10-14-three-attempts/OPERATOR.md",
|
||||
"repo": "informed-decision",
|
||||
"revision": "d5f10213ece36a6f173389b28a8dc05ed8859c4a",
|
||||
"sha256": "sha256:4faaae7d1b213ebfa59bc7630e2b92d484c346ed50bf10a43d1850bf15006184"
|
||||
},
|
||||
{
|
||||
"matches_head": true,
|
||||
"path": "docs/agent-autonomy-decision.md",
|
||||
"repo": "the-custodian",
|
||||
"revision": "ceaeef1ee79eeba37e7cacf73ba8aed3357a5e7c",
|
||||
"sha256": "sha256:4f65dfd2b56b67cd64eb9577644d574d2e687adcfd8b5bdb65a2e0d14f8bf1ff"
|
||||
}
|
||||
],
|
||||
"scope": "public source only; private configuration and secret values not read"
|
||||
}
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
"all_source_files_match_head": true,
|
||||
"hard_call_count": "No independent provider-request count limiter in current MessagesPolicy. CLI max_turns is 30, outer timeout 900s; durable spend/request liability is enforced. No two-call cap claimed.",
|
||||
"native_actions": 0,
|
||||
"profile_readiness_unmodified": "unverified",
|
||||
"profile_route": "claude-code-cli",
|
||||
"provider_calls": 0,
|
||||
"runner_blocker": "prove-local-profile.py requires nonempty credential refs; metered-owner requires empty refs. Do not bypass either; use admitted metered-once route.",
|
||||
"runtime_complete_digest_rechecked": true,
|
||||
"runtime_resources": {
|
||||
"profile_cpu": null,
|
||||
"profile_memory_mb": null,
|
||||
"risk": "No hard CPU/memory ceiling is claimed by this profile; host owner must accept or provide scoped resource controls before native start."
|
||||
},
|
||||
"secret_reads": 0,
|
||||
"source_files": 31,
|
||||
"standalone_proof_runner_compatible": false
|
||||
}
|
||||
|
|
@ -0,0 +1,86 @@
|
|||
# T04 private response source review
|
||||
|
||||
Source review completed 17 October 2026 for RMGR-WP-0021-T04 / TSA-10. The
|
||||
canonical Repo Manager checkout was clean at inspection and remains unchanged.
|
||||
No scanner rerun, historical-content scan, private finding read, Git mutation,
|
||||
message, provider operation, approval or credential response was performed.
|
||||
|
||||
The actual missing deliverable is an owner-admitted **private review and response
|
||||
contract**, not another scanner. The existing adapter returns only fixed status,
|
||||
scope, counts, scanner identity and affected Git blob IDs. `secret_scan.main` and
|
||||
the existing CLI serialize that summary and return the appropriate refusal code.
|
||||
There is no inspected finding classifier, response executor, private finding
|
||||
store, response port or false-positive exception admission in this scanner path.
|
||||
The docs explicitly preserve this boundary and deny implicit exceptions.
|
||||
|
||||
Adding a suppression registry, automatic credential routing/classification,
|
||||
response engine or approval parser would invent a new contract. No such source
|
||||
change is justified by the current record. No code or tests were changed.
|
||||
The smallest useful next deliverable is the exact owner review below, followed
|
||||
by a separately admitted synthetic rehearsal through the selected existing
|
||||
private review path. The packet supplies that preparation without claiming the
|
||||
rehearsal has occurred.
|
||||
|
||||
## Existing seam
|
||||
|
||||
| Current surface | Established behavior | Missing owner evidence |
|
||||
| --- | --- | --- |
|
||||
| `src/repo_manager/secret_scan.py:scan_staged` | Content-silent changed-staged-blob summary; clean/blocked/unverified | Summary-to-private-case binding and intended repository reviewer |
|
||||
| `src/repo_manager/secret_scan.py:main` and `cli.py` | JSON summary plus exit 0/1/2 | Existing approved private review entry point; operator identity; recipient acknowledgement |
|
||||
| `docs/secret-detection.md` | Blocked content may be inspected only in approved private review; no raw report/value/path in public evidence | Who admits the private lane, exact privacy boundary, retention, recipient and timeout/abort |
|
||||
| RMGR-WP-0021-T04 | Synthetic metadata route, private classification, exception lifecycle and genuine exposure response | Actual owner/approval/response receipts; reviewed exact false-positive contract |
|
||||
|
||||
The scanner result contains no repository owner or credential kind. A blob ID is
|
||||
an opaque correlation hint, not an authorization, private review grant or proof
|
||||
of which credential provider owns a match. Bind repository identity, exact
|
||||
reviewed revision/index context, scanner pin and receipt reference separately;
|
||||
do not resolve repository content or filenames in a public routing step. The
|
||||
summary also does not establish whether a credential was ever accepted or
|
||||
exposed elsewhere. A rejected commit does not revoke prior exposure.
|
||||
|
||||
## Exact owner review needed
|
||||
|
||||
1. Repo Manager identifies the actual repository reviewer and the existing
|
||||
approved private entry point. The private response owner names its operator,
|
||||
recipient/custody boundary, permitted synthetic input, evidence custodian,
|
||||
retention/deletion, timeout and abort obligations. This packet supplies no
|
||||
owner assent or new storage/service.
|
||||
2. The actual reviewer classifies a synthetic case in that admitted private
|
||||
lane, returning only a case/receipt reference and bounded disposition. Public
|
||||
routing never carries matched content, paths, scanner diagnostics, candidate
|
||||
credentials or private finding hashes that permit content guessing.
|
||||
3. For a false positive, the repository/control owner defines an exact proposed
|
||||
scope and regression; the authorized reviewer supplies genuine approval,
|
||||
expiry/review and revocation conditions. The current scanner has no exception
|
||||
switch: a reviewed source correction may be proposed, but a review record
|
||||
alone cannot silently bypass the scanner. An expired, wider or mismatched
|
||||
disposition must not be treated as authorization. Broad path/rule exclusions
|
||||
and inline comments remain ineffective under the current contract.
|
||||
4. For genuine or uncertain credential exposure, keep the commit refused and
|
||||
route metadata to the actual incident/credential owner after classification.
|
||||
Use `warden route find` / `show` for the classified need before requesting any
|
||||
access. Existing secrets-engine/Platform custody, access-engine authorization
|
||||
and provider/consumer adoption gates apply; Repo Manager does not revoke keys.
|
||||
Require separate revoke/replace/adopt/validate evidence where appropriate.
|
||||
CUST-WP-0073-T05 remains founder-deferred under decision
|
||||
`1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa`; this review neither reopens it nor
|
||||
substitutes elapsed time or a synthetic case for a founder trigger/decision.
|
||||
|
||||
Unblock T04's synthetic exercise when those actual owners supply the named
|
||||
private lane, admission and evidence contract. Then use the bounded cases in
|
||||
rehearsal-cases.json. No code integration should precede a specific owned seam.
|
||||
T04 remains todo in the read-only Hub observation; TSA-10 remains open.
|
||||
|
||||
## Existing evidence preserved
|
||||
|
||||
`scanner-unavailable-r1/namespace-hook-results.json` already establishes six
|
||||
configured-hook generated-fixture outcomes with no real credentials/index reads,
|
||||
host scanner change or provider call. It proves detection/refusal and cleanup,
|
||||
not private classification, exception approval or response. T05 remains done;
|
||||
T03 independently retains forge/CI coverage. The gate audit explicitly assigns
|
||||
private synthetic finding-to-response to T04 under TSA-10. No broad test or
|
||||
scanner benchmark was repeated for this source-only review.
|
||||
|
||||
The metadata handoff template is deliberately incomplete and non-executable.
|
||||
`rehearsal-cases.json` lists expected checks, not executed results. Source hashes,
|
||||
the read-only task observation and artifact hashes are retained in this packet.
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
{
|
||||
"observed_at": "2026-10-17T02:13:49.246721+00:00",
|
||||
"read_only": true,
|
||||
"source_id": "RMGR-WP-0021-T04",
|
||||
"id": "44272818-db49-58a2-83b1-d2f9e9d5976c",
|
||||
"workplan_id": "5aa6f84a-c682-5996-ae26-96daef670833",
|
||||
"title": "Verify private finding-to-response handling",
|
||||
"status": "todo",
|
||||
"needs_human": false,
|
||||
"blocking_reason": null
|
||||
}
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
{
|
||||
"schema": "custodian.scanner-response-source-review.v1",
|
||||
"status": "preparation_only_owner_contract_needed",
|
||||
"created_at": "2026-10-17T02:13:49.246721+00:00",
|
||||
"source_task": "RMGR-WP-0021-T04",
|
||||
"files": {
|
||||
"README.md": "sha256:79be07d7648957d00de4ed5aaa82e5c9b976bda0b7d38cf13fc0f6935fbda7ff",
|
||||
"hub-readback.json": "sha256:947864938c88edd1de53733ac2585665a87e56e70b9bec6c63bd854489e49b6f",
|
||||
"metadata-handoff.template.json": "sha256:ec686984ea9533be1089bc943c72838f9c41e1a1db0643932440f3b222accfb7",
|
||||
"rehearsal-cases.json": "sha256:8f682da4d81dd3c966e1b8d9c69a17f92723537abd0a2033f44f45b7c5655546",
|
||||
"review.json": "sha256:46b1409da26df70fc6e7917fc1d50354050d211992848fa663418830f08524ce",
|
||||
"source-references.json": "sha256:91cba1c8578fffa8c59b516496f2c57db3aea1afca535f37cf450b50dc781560"
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,52 @@
|
|||
{
|
||||
"status": "incomplete_preparation_not_routed_or_approved",
|
||||
"synthetic": true,
|
||||
"source_task": "RMGR-WP-0021-T04",
|
||||
"repository": "repo-manager",
|
||||
"scanner_summary_example": {
|
||||
"status": "blocked",
|
||||
"scope": "changed-staged-blobs",
|
||||
"scanner_version": "8.30.1",
|
||||
"scanner_sha256": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509",
|
||||
"scanned_blobs": 1,
|
||||
"blocked_blob_ids": [
|
||||
"487fed6b5bee302c30558c354f604ec9f2b22921"
|
||||
]
|
||||
},
|
||||
"example_limit": "Fabricated scanner summary shape with Git blob ID computed from an explicitly public marker, not a real scanner finding or original object access.",
|
||||
"correlation": {
|
||||
"repository_revision_reference": null,
|
||||
"exact_index_or_introduced_object_context_reference": null,
|
||||
"original_scanner_receipt_reference": null,
|
||||
"case_reference": null
|
||||
},
|
||||
"private_review": {
|
||||
"repository_reviewer": null,
|
||||
"private_response_owner": null,
|
||||
"existing_entrypoint_reference": null,
|
||||
"operator_identity_reference": null,
|
||||
"admission_reference": null,
|
||||
"retention_and_cleanup_contract_reference": null,
|
||||
"bounded_timeout_and_abort_reference": null,
|
||||
"private_acknowledgement_reference": null,
|
||||
"bounded_classification_reference": null
|
||||
},
|
||||
"false_positive": {
|
||||
"exact_scope_reference": null,
|
||||
"authorized_review_reference": null,
|
||||
"expiry_or_review": null,
|
||||
"regression_reference": null,
|
||||
"control_owner_implementation_disposition": null
|
||||
},
|
||||
"genuine_or_uncertain_exposure": {
|
||||
"incident_owner_reference": null,
|
||||
"credential_route_reference": null,
|
||||
"response_authority_reference": null,
|
||||
"revoke_reference": null,
|
||||
"replace_reference": null,
|
||||
"consumer_adoption_reference": null,
|
||||
"validation_reference": null,
|
||||
"founder_deferred_rotation_disposition": "unchanged; no actual credential response authorized"
|
||||
},
|
||||
"permitted_public_data": "fixed status/counts/scanner identity, exact approved correlation references, named source task and bounded disposition; no content/paths/diagnostics/secret material/private finding content hashes"
|
||||
}
|
||||
|
|
@ -0,0 +1,59 @@
|
|||
{
|
||||
"status": "prepared_expected_cases_not_executed",
|
||||
"target": "existing actual-owner admitted private review path, not yet identified",
|
||||
"cases": [
|
||||
{
|
||||
"case": "blocked-synthetic",
|
||||
"check": "With real admitted private lane and exact source binding, privately classify synthetic input and acknowledge only metadata.",
|
||||
"expected_boundary": "Owner admission/acknowledgement; no classification inferred from blocked status."
|
||||
},
|
||||
{
|
||||
"case": "clean-scope",
|
||||
"check": "Clean changed-staged summary does not assert history/provider/whole-estate absence.",
|
||||
"expected_boundary": "Preserve exact scanner scope."
|
||||
},
|
||||
{
|
||||
"case": "unverified-source",
|
||||
"check": "Unavailable scanner or unverified result rejects proposed commit.",
|
||||
"expected_boundary": "No clean classification or response success inferred."
|
||||
},
|
||||
{
|
||||
"case": "unknown-owner",
|
||||
"check": "Missing repository reviewer, credential kind or private entry point prevents routing execution.",
|
||||
"expected_boundary": "Obtain owner contract; do not guess provider or send content."
|
||||
},
|
||||
{
|
||||
"case": "unsafe-public-payload",
|
||||
"check": "Unexpected raw finding/content/path/diagnostic/value field must not be sent through public lane.",
|
||||
"expected_boundary": "Stop and use admitted private lane; no sanitized-by-assumption relay."
|
||||
},
|
||||
{
|
||||
"case": "false-positive-no-approval",
|
||||
"check": "False-positive label without actual authorized approval, exact scope and expiry/review never bypasses scanner.",
|
||||
"expected_boundary": "Remain refused; existing code has no exception switch."
|
||||
},
|
||||
{
|
||||
"case": "false-positive-drift",
|
||||
"check": "Expired, widened or source-mismatched exception metadata does not authorize a future source correction.",
|
||||
"expected_boundary": "Re-review exact proposal and regression; no implicit baseline."
|
||||
},
|
||||
{
|
||||
"case": "genuine-exposure",
|
||||
"check": "Rejected commit or source removal does not establish revocation or downstream adoption.",
|
||||
"expected_boundary": "Actual incident/credential owners retain revoke/replace/adopt/validate gates."
|
||||
},
|
||||
{
|
||||
"case": "founder-deferral",
|
||||
"check": "Synthetic review, elapsed time or a suggested incident cannot execute founder-deferred rotation.",
|
||||
"expected_boundary": "Retain CUST-WP-0073-T05 and exact founder authority."
|
||||
},
|
||||
{
|
||||
"case": "review-timeout-or-loss",
|
||||
"check": "Missing private acknowledgement, timeout, uncertain recipient or cleanup fails closed for response acceptance.",
|
||||
"expected_boundary": "Record pending/failed review metadata; do not claim remediation."
|
||||
}
|
||||
],
|
||||
"provider_calls": 0,
|
||||
"messages_sent": 0,
|
||||
"native_response_accepted": false
|
||||
}
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
{
|
||||
"status": "source_seam_review_complete_native_response_unexercised",
|
||||
"canonical_repo_manager_unchanged": true,
|
||||
"initial_owner_checkout_clean": true,
|
||||
"code_or_test_changes": false,
|
||||
"new_tests_run": false,
|
||||
"reason_no_new_tests": "No implementation change or admitted response contract; synthetic rehearsal remains explicit preparation, not a test pass.",
|
||||
"prior_scanner_evidence_repeated": false,
|
||||
"private_findings_or_values_read": false,
|
||||
"git_mutations": false,
|
||||
"messages_sent": false,
|
||||
"provider_calls": false,
|
||||
"response_approval_or_authority_created": false,
|
||||
"live_remediation_or_rotation": false,
|
||||
"blocked_on": "Actual repository/private-response owners must name and admit existing private review lane, correlation/evidence/retention contract, actual reviewer/approval and exception governance before T04 native exercise.",
|
||||
"knowledge_orientation": {
|
||||
"package_version": "0.2.6",
|
||||
"package_digest": "sha256:8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02",
|
||||
"status": "withheld_source_changed",
|
||||
"interpretation": "Current applicable AGENTS and owner boundary source directly reviewed; package is orientation only, no authority."
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,52 @@
|
|||
{
|
||||
"schema": "custodian.storage-share-document-only-access-need.v1",
|
||||
"status": "prepared-not-executed",
|
||||
"authority": "User authorized read-only backup documentation and operational metadata. Existing access was insufficient; no new grant or privileged native change is authorized.",
|
||||
"preferred": "Read the exact owner-supplied documentation URL/path through an already authenticated independent StorageShare browser/session, or a read-capable documentation-only public share. Share tokens/passwords must not enter chat, argv, Git or receipts.",
|
||||
"existing_backup_account_owner_path": {
|
||||
"provider": "https://nx4069.your-storageshare.de",
|
||||
"owner": "railiance-platform",
|
||||
"auth_reference": "operators/data/nextcloud/backup; only existing BACKUP_USERNAME/BACKUP_PASSWORD through the existing silent contained owner accessor",
|
||||
"login_reference": "warden access openbao-platform-admin-login --exec -- <reviewed silent documentation-only reader>; exact plan says founder_required OIDC/MFA",
|
||||
"note": "User intent authorizes reading documents; an attended authentication act is a runtime dependency, not a request to approve backup mutation. No workload offsite lane or AGE_PRIVATE_KEY should be read."
|
||||
},
|
||||
"bounded_metadata_discovery_if_exact_doc_path_unknown": {
|
||||
"methods": [
|
||||
"PROPFIND Depth1"
|
||||
],
|
||||
"roots": [
|
||||
"/remote.php/dav/files/Backup/",
|
||||
"/remote.php/dav/files/Backup/railiance-backups/"
|
||||
],
|
||||
"output": "Only operational documentation/folder names and sizes matching backup/recovery/documentation/TLS; never raw DAV response, account metadata or backup body. Other accounts require their existing owner access; do not guess Bernd username/path.",
|
||||
"limits": {
|
||||
"response_bytes": 4194304,
|
||||
"metadata_entries": 10000,
|
||||
"directory_depth": 1,
|
||||
"timeout_seconds": 30
|
||||
}
|
||||
},
|
||||
"document_reads": {
|
||||
"methods": [
|
||||
"HEAD",
|
||||
"GET"
|
||||
],
|
||||
"allow": "Only exact reviewed .md/.txt/.html backup documentation objects selected from metadata; no arbitrary traversal, redirect, proxy or directory recursion. PDF requires separate safe renderer review.",
|
||||
"known_exact_identity_doc": "/remote.php/dav/files/Backup/railiance-backups/net-kingdom-identity/net-kingdom-recovery-57d1940947aa25ff-START-HERE.md",
|
||||
"receipt": "Document path/version/size/SHA256 and public claim line ranges; suppress auth headers, exception text and any secret-shaped content. Current doc equality is checked against independent repository source when available."
|
||||
},
|
||||
"forbidden": [
|
||||
"No .age/.snap/.tar/.zip backup body download",
|
||||
"No archive list/extraction/decryption",
|
||||
"No .pem/.key/.p12/private material or Kubernetes Secret read",
|
||||
"No backup mutation, retention, account/share creation or TLS reissue",
|
||||
"No older rclone/dropoff token recovery, age escrow read or retired operators/nextcloud credential use"
|
||||
],
|
||||
"minimal_answer_fields": [
|
||||
"Does exact document assert original kc-tls certificate AND key backup?",
|
||||
"Which provider/account/folder/artifact generation and capture boundary?",
|
||||
"Which owner and protected independent credential/decryption entry point?",
|
||||
"Does isolated original restoration exist or is reissue the documented fallback?",
|
||||
"Which source revision and actual owner readback receipt support these claims?"
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,9 @@
|
|||
{
|
||||
"operation": "capabilities-only",
|
||||
"path": "operators/data/nextcloud/backup",
|
||||
"exit_code": 2,
|
||||
"fixed_diagnostic": "permission_refused",
|
||||
"raw_stdout_stderr_retained": false,
|
||||
"credential_values_read": false,
|
||||
"certificate_or_private_key_bytes_read": false
|
||||
}
|
||||
|
|
@ -0,0 +1,70 @@
|
|||
{
|
||||
"schema": "custodian.storage-share-original-tls-documentation-review.v1",
|
||||
"observed_at": "2026-10-17T02:14:41.615547+00:00",
|
||||
"user_direction": "Have a look at the backup documentation on storageshare to answer original KeyCape TLS recovery custody.",
|
||||
"outcome": "Actual requested broader StorageShare documentation not yet readable under current caller; originalTLS coverage remains unknown, not absent.",
|
||||
"direct_findings": [
|
||||
{
|
||||
"id": "F01",
|
||||
"source": "railiance-platform/docs/backup-credential-recovery.md:90",
|
||||
"fact": "Existing Bernd-owned backups remain in their original location and were neither migrated nor revoked by the Backup-account cutover.",
|
||||
"implication": "Earlier Backup-account inventory is not the historical personal-account denominator."
|
||||
},
|
||||
{
|
||||
"id": "F02",
|
||||
"source": "net-kingdom/tools/bootstrap-recovery/inventory-storage-share.py:26,58,95",
|
||||
"fact": "Prior inventory starts only Backup/railiance-backups, retains directory/age/json/yaml names and limits subfolders. It excludes Markdown/text/PDF documentation entries and other accounts/folders.",
|
||||
"implication": "No prior inventory can establish documentation absence or originalTLS coverage outside that scope."
|
||||
},
|
||||
{
|
||||
"id": "F03",
|
||||
"source": "net-kingdom/docs/evidence/2026-10-16-identity-outage-recovery/actual-offline-publication.json",
|
||||
"fact": "Known identity recovery guide was published/readback-verified on2026-10-16 in Backup/railiance-backups/net-kingdom-identity.",
|
||||
"exact_document": {
|
||||
"name": "net-kingdom-recovery-57d1940947aa25ff-START-HERE.md",
|
||||
"bytes": 8381,
|
||||
"sha256": "1531675f2e7d3713a3a7fc28a5143fb24f201b19cd05d14c59ee485a0bc11e61",
|
||||
"etag": "\"34e2a2b663670144cd0d0b9aed156455\"",
|
||||
"readback_verified": true
|
||||
},
|
||||
"current_local_source_sha256": "sha256:1531675f2e7d3713a3a7fc28a5143fb24f201b19cd05d14c59ee485a0bc11e61",
|
||||
"current_local_bytes_match_published_document": true,
|
||||
"implication": "This exact previously published identity guide can be reviewed from hash-matching local source, but it expressly excludes whole-host/OpenBao/application recovery and does not establish original sso/kc-tls custody. Current remote bytes have not been reread."
|
||||
},
|
||||
{
|
||||
"id": "F04",
|
||||
"source": "routing-evidence.json",
|
||||
"fact": "Known workload offsite lane carries upload-only share and age escrow. It is unsuitable for reading documentation and was not fetched. Exact existing platform-admin login is founder_required OIDC/MFA.",
|
||||
"implication": "No invented Nextcloud credential lane or age key read is justified."
|
||||
},
|
||||
{
|
||||
"id": "F05",
|
||||
"source": "capabilities-evidence.json",
|
||||
"fact": "Current caller capabilities-only request for operator Backup-account path returned permission refusal; no credential value was read.",
|
||||
"implication": "A protected owner documentation read needs an existing valid account session or exact documentation/public read-share path."
|
||||
}
|
||||
],
|
||||
"tls_answers": {
|
||||
"hostname": "kc.coulomb.social",
|
||||
"native_secret_reference": "sso/kc-tls",
|
||||
"original_certificate_and_key_independent_backup": "unknown; broader actual StorageShare backup documentation not yet read",
|
||||
"backup_provider": "StorageShare exists; exact originalTLS artifact and account/path not established",
|
||||
"custody_owner": "Existing historical Bernd account backup owner documented; originalTLS-specific owner not established",
|
||||
"restoration_boundary": "No archive/key/certificate recovery attempted. Need documentation that identifies encrypted artifact generation, owner custody/decryption entry point and isolated exact original-key restoration or explicit reissue. Identity archive exclusion and same-host S2 alone are not negative evidence."
|
||||
},
|
||||
"known_published_document_reference": {
|
||||
"provider": "https://nx4069.your-storageshare.de",
|
||||
"account": "Backup",
|
||||
"folder": "railiance-backups/net-kingdom-identity",
|
||||
"name": "net-kingdom-recovery-57d1940947aa25ff-START-HERE.md",
|
||||
"sha256": "sha256:1531675f2e7d3713a3a7fc28a5143fb24f201b19cd05d14c59ee485a0bc11e61",
|
||||
"published_readback_date": "2026-10-16T18:01:01.639515+00:00"
|
||||
},
|
||||
"precise_remaining_document_need": "The exact StorageShare documentation path/public read share for the original/whole-cluster backup, potentially in the pre-cutover Bernd account, or an existing owner session able to perform only metadata/document reads. The identity guide location alone does not answer the question.",
|
||||
"no_new_native_acceptance": true,
|
||||
"no_native_mutation": true,
|
||||
"no_backup_download": true,
|
||||
"no_private_archive_contents_or_decryption": true,
|
||||
"no_private_key_or_rawSecret": true,
|
||||
"no_credential_grant_or_owner_assent": true
|
||||
}
|
||||
|
|
@ -0,0 +1,24 @@
|
|||
{
|
||||
"files": [
|
||||
{
|
||||
"path": "access-need.json",
|
||||
"sha256": "sha256:f44fd946d036295cff71da173987feaaa718e11d84641f54c3c623ef8d8f75b0"
|
||||
},
|
||||
{
|
||||
"path": "capabilities-evidence.json",
|
||||
"sha256": "sha256:e35ff049dca1b69b420f563bd08acf3fa0d36e74311af43fde84ab7f6f589e78"
|
||||
},
|
||||
{
|
||||
"path": "findings.json",
|
||||
"sha256": "sha256:77f43bfa03444e31ae85e26f48b7dcd661e000cb63336e1287cbebc8ad9fed46"
|
||||
},
|
||||
{
|
||||
"path": "routing-evidence.json",
|
||||
"sha256": "sha256:c45fd55fd344a47eb8563bd08ea4975b3363d3ebd45e1fa7eec722fceb789c77"
|
||||
},
|
||||
{
|
||||
"path": "source-references.json",
|
||||
"sha256": "sha256:474188ae4bf49388f137fdb9077890d3063b83e17ce157e99c8010b0076c8dcb"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,141 @@
|
|||
[
|
||||
{
|
||||
"argv": [
|
||||
"warden",
|
||||
"route",
|
||||
"show",
|
||||
"railiance-backup-offsite-lane",
|
||||
"--json"
|
||||
],
|
||||
"returncode": 0,
|
||||
"result": {
|
||||
"id": "railiance-backup-offsite-lane",
|
||||
"title": "Railiance offsite backup Nextcloud WebDAV credentials",
|
||||
"owner_repo": "railiance-platform",
|
||||
"subsystem": "OpenBao + Nextcloud",
|
||||
"warden_executes": false,
|
||||
"warden_role": "assist",
|
||||
"exec_capable": true,
|
||||
"resolvable": true,
|
||||
"wiki_ref": "wiki/playbooks/railiance-backup-offsite-lane.md#worker-checklist",
|
||||
"canon_ref": "railiance-platform/docs/workload-kv-access-lanes.md",
|
||||
"reviewed": "2026-07-16",
|
||||
"status": "active",
|
||||
"risk": "high",
|
||||
"high_risk": true,
|
||||
"workload_ref": {
|
||||
"applicability": "applicable",
|
||||
"rapp_id": null,
|
||||
"name": null,
|
||||
"deployable": null,
|
||||
"declaration_ref": null,
|
||||
"reason": null,
|
||||
"unknown_reason": "The backup execution unit has no authoritative workload identity declaration.",
|
||||
"resolution": "unknown"
|
||||
},
|
||||
"has_rotation": true,
|
||||
"rotation": {
|
||||
"method": "re-establish",
|
||||
"owner": "railiance-platform",
|
||||
"automatable": false,
|
||||
"steps": [
|
||||
"Rotate NC_WEBDAV_TOKEN: regenerate the Nextcloud WebDAV app password/token; `bao kv put platform/workloads/railiance/backup/offsite-lane NC_WEBDAV_TOKEN=@file`. NC_WEBDAV_URL changes only if the host/share moves.",
|
||||
"Re-establish AGE_PRIVATE_KEY: generate a new keypair (`age-keygen`), decrypt existing offsite artifacts with the old key and re-encrypt to the new recipient, then `bao kv put ... AGE_PRIVATE_KEY=@file` (mode-0600 file, shred after).",
|
||||
"Because AGE_PRIVATE_KEY is recovery escrow, retain the old key offline until re-encryption of all retained backups is confirmed.",
|
||||
"Verify capabilities-safe on the data path (`bao token capabilities`); run a restore drill against a re-encrypted artifact.",
|
||||
"After rotation, clear EXPOSED taint: remove custom_metadata exposed_at/exposed_version (see `warden taint railiance-backup-offsite-lane`)."
|
||||
]
|
||||
},
|
||||
"delegation": {
|
||||
"mode": "interim",
|
||||
"intended_owner": "railiance-platform",
|
||||
"blocked_on": "Rotation is re-establish, a multi-step procedure ops-warden only describes",
|
||||
"reviewed": "2026-08-11",
|
||||
"verified": "unverified",
|
||||
"is_verified": false,
|
||||
"implicit": false
|
||||
},
|
||||
"need_keywords": [
|
||||
"railiance",
|
||||
"backup",
|
||||
"nextcloud",
|
||||
"webdav",
|
||||
"offsite",
|
||||
"age",
|
||||
"forgejo-backup",
|
||||
"NC_WEBDAV_TOKEN",
|
||||
"file drop"
|
||||
],
|
||||
"next_action": "ops-warden can proxy this as the caller: `warden access <need> --fetch` (or `--exec -- <cmd>`); runs railiance-platform's tool with your identity. See `wiki/playbooks/railiance-backup-offsite-lane.md#worker-checklist`."
|
||||
}
|
||||
},
|
||||
{
|
||||
"argv": [
|
||||
"warden",
|
||||
"plan",
|
||||
"openbao-platform-admin-login",
|
||||
"--json"
|
||||
],
|
||||
"returncode": 0,
|
||||
"result": {
|
||||
"need": "openbao-platform-admin-login",
|
||||
"verdict": "founder_required",
|
||||
"organization_posture": "build",
|
||||
"policy_gate": "zone-aware \u2014 fetches gated by flex-auth-ops-warden-fetch at http://127.0.0.1:19091",
|
||||
"lane_id": "openbao-platform-admin-login",
|
||||
"lane_title": "Attended OpenBao platform administration login",
|
||||
"match_score": 100,
|
||||
"commands": [
|
||||
"warden access openbao-platform-admin-login --exec -- <reviewed-command>",
|
||||
"# owner login is contained by warden; do not invoke it separately"
|
||||
],
|
||||
"founder_act": {
|
||||
"kind": "oidc_login",
|
||||
"summary": "Interactive OIDC/MFA login via railiance-platform",
|
||||
"details": {
|
||||
"lane_id": "openbao-platform-admin-login",
|
||||
"auth_method": "attended KeyCape OIDC/MFA at OpenBao auth mount netkingdom, role platform-admin",
|
||||
"fetch_command": "warden access openbao-platform-admin-login --exec -- <reviewed-command>",
|
||||
"desk_hint": "warden desk --from-plan (act=oidc_login); execute only through: warden access openbao-platform-admin-login --exec -- <reviewed-command>"
|
||||
}
|
||||
},
|
||||
"ccr_stub": null,
|
||||
"catalog": {
|
||||
"path": "/home/worsch/.local/share/uv/tools/ops-warden/lib/python3.12/site-packages/warden/_registry/routing/catalog.yaml",
|
||||
"source": "bundled",
|
||||
"content_hash": "c47065c0892f",
|
||||
"mtime_iso": "2026-10-16T16:51:27.624951+00:00",
|
||||
"package_version": "0.1.2",
|
||||
"entry_count": 44,
|
||||
"active_count": 40,
|
||||
"newest_reviewed": "2026-10-11",
|
||||
"oldest_reviewed": "2026-06-18",
|
||||
"stale_entry_count": 17,
|
||||
"using_bundled": true,
|
||||
"warnings": [
|
||||
"using wheel-bundled catalog fallback \u2014 reinstall from checkout (`uv tool install -e .` or `pip install -e .`) if lanes look missing",
|
||||
"17 catalog entries past 90d review cadence",
|
||||
"17 interim delegations need re-verifying (risk-scaled blocker cadence) \u2014 see `warden route gaps`"
|
||||
]
|
||||
},
|
||||
"candidates": [
|
||||
{
|
||||
"id": "openbao-platform-admin-login",
|
||||
"title": "Attended OpenBao platform administration login",
|
||||
"score": 100,
|
||||
"status": "active",
|
||||
"resolvable": true,
|
||||
"exec_capable": true,
|
||||
"warden_executes": false,
|
||||
"lane": "login",
|
||||
"risk": "high"
|
||||
}
|
||||
],
|
||||
"reasons": [
|
||||
"login lane requires interactive founder/operator identity act"
|
||||
],
|
||||
"actor": null,
|
||||
"domain": null
|
||||
}
|
||||
}
|
||||
]
|
||||
|
|
@ -0,0 +1,43 @@
|
|||
{
|
||||
"schema": "custodian.storage-share-recovery-guide-source-history.v1",
|
||||
"user_clarification": "Locate the NetKingdom disaster recovery documentation requested beside backup data; user does not know its path. Source and history lookup requested, not a new credential or publication grant.",
|
||||
"source_commit": "c52ca7f405416d437951844c0640b86e677c3523",
|
||||
"publication_commit": "31f483966cdfca4df1d326dee3ec0b6d33ea0e5e",
|
||||
"prepared_in": "1764f40",
|
||||
"terminal_fix_in": "fbdd62b",
|
||||
"actual_recorded_publication_time": "2026-10-16T18:01:01.639515+00:00",
|
||||
"provider": "https://nx4069.your-storageshare.de",
|
||||
"account": "Backup",
|
||||
"folder": "railiance-backups/net-kingdom-identity/",
|
||||
"guide": "net-kingdom-recovery-57d1940947aa25ff-START-HERE.md",
|
||||
"companion_files": [
|
||||
"net-kingdom-recovery-57d1940947aa25ff.zip",
|
||||
"net-kingdom-recovery-57d1940947aa25ff.zip.sha256"
|
||||
],
|
||||
"publication_receipt_records": "All three objects created/read back with strong ETag, exact bytes and digest, using independent provider access; no permission changes.",
|
||||
"current_local_guide_equals_recorded_publication": true,
|
||||
"current_remote_visibility_verified": false,
|
||||
"operator_account_or_share_visibility": "unknown; exact publication targets the Backup account, not an established personal-account view or upload-only share",
|
||||
"clarification_of_previous_review": "The intended disaster guide has been located from its exact source/history and actual publication receipt. Broader account access is not needed to identify this recorded guide. Current existence/visibility still requires a read-capable owner session.",
|
||||
"scope_limits": "Published guide is the retained pre-drill identity-only revision. It expressly excludes whole-host and OpenBao recovery. It does not establish original kc-tls certificate/key recovery. Later source/native proofs do not imply a new offline kit publication.",
|
||||
"files": [
|
||||
{
|
||||
"path": "docs/disaster-recovery-storage-share.md",
|
||||
"sha256": "1531675f2e7d3713a3a7fc28a5143fb24f201b19cd05d14c59ee485a0bc11e61"
|
||||
},
|
||||
{
|
||||
"path": "docs/storage-share-recovery-publication.md",
|
||||
"sha256": "4f6c7979a25ea90bb421ac405655fef5625cf2411c3b7e692e2a384a50b9af1f"
|
||||
},
|
||||
{
|
||||
"path": "docs/evidence/2026-10-16-identity-outage-recovery/actual-offline-publication.json",
|
||||
"sha256": "47d78c1e01c8c74dd590c092d8e283db39dbe4f668a6d55bbcd7b397b3a04395"
|
||||
},
|
||||
{
|
||||
"path": "tools/bootstrap-recovery/recovery-kit.py",
|
||||
"sha256": "6fa0f1494dccaf003b6c6396c5de8b36faa2b276eeb16badd04383f5efb71e66"
|
||||
}
|
||||
],
|
||||
"no_remote_write": true,
|
||||
"no_private_archive_or_key_read": true
|
||||
}
|
||||
|
|
@ -0,0 +1,80 @@
|
|||
[
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/AGENTS.md",
|
||||
"repo_head": "70f408ca2389bf3722a91a03832fc6e8587355e5",
|
||||
"sha256": "sha256:95158b1d5c15e6cf8be980f5c0e3b48aeef252654846273887f40516b3fa6a78",
|
||||
"bytes": 11186
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/railiance-platform/AGENTS.md",
|
||||
"repo_head": "08c1f036f2750097750f435efd76e8f6ee6df393",
|
||||
"sha256": "sha256:8d2f1a165e3f4eecf2e6e1d6a19c4bac9e8dcb64a76650e7185d55722f233c8b",
|
||||
"bytes": 8806
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/ops-warden/AGENTS.md",
|
||||
"repo_head": "d97652a3bb5fa733b063d71a1b74068efcccf572",
|
||||
"sha256": "sha256:aa03031516b886b254d8c4b1fafa160c063c74aa0115ba51af3dd7326dccfad6",
|
||||
"bytes": 13132
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/the-custodian/docs/agent-environment-orientation.md",
|
||||
"repo_head": "ceaeef1ee79eeba37e7cacf73ba8aed3357a5e7c",
|
||||
"sha256": "sha256:6eb712593adaeb2efd8c69edb22b02662e6c9b155f84f1559e7bdaeb76730439",
|
||||
"bytes": 15369
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/tools/bootstrap-recovery/inventory-storage-share.py",
|
||||
"repo_head": "70f408ca2389bf3722a91a03832fc6e8587355e5",
|
||||
"sha256": "sha256:673f9b17fb2f3fef6fcdb5c50a2bcca69e3df3157a9e5582a2d995c6b87640b5",
|
||||
"bytes": 5692
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/docs/evidence/2026-10-15-bootstrap-recovery/storage-share-inventory-r1.json",
|
||||
"repo_head": "70f408ca2389bf3722a91a03832fc6e8587355e5",
|
||||
"sha256": "sha256:cee98578c2eadc2d77630fccbbdc2c2d146b919a8c37f04c159da086ff4301a3",
|
||||
"bytes": 15393
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/docs/storage-share-recovery-publication.md",
|
||||
"repo_head": "70f408ca2389bf3722a91a03832fc6e8587355e5",
|
||||
"sha256": "sha256:4f6c7979a25ea90bb421ac405655fef5625cf2411c3b7e692e2a384a50b9af1f",
|
||||
"bytes": 2595
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/docs/disaster-recovery-storage-share.md",
|
||||
"repo_head": "70f408ca2389bf3722a91a03832fc6e8587355e5",
|
||||
"sha256": "sha256:1531675f2e7d3713a3a7fc28a5143fb24f201b19cd05d14c59ee485a0bc11e61",
|
||||
"bytes": 8381
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/net-kingdom/docs/evidence/2026-10-16-identity-outage-recovery/actual-offline-publication.json",
|
||||
"repo_head": "70f408ca2389bf3722a91a03832fc6e8587355e5",
|
||||
"sha256": "sha256:47d78c1e01c8c74dd590c092d8e283db39dbe4f668a6d55bbcd7b397b3a04395",
|
||||
"bytes": 1193
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/railiance-platform/docs/backup-credential-recovery.md",
|
||||
"repo_head": "08c1f036f2750097750f435efd76e8f6ee6df393",
|
||||
"sha256": "sha256:6de1862c54d31d0642e5eeb4cab42cbf2308cf54f14625667fd25d77d74bf1f3",
|
||||
"bytes": 8788
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/railiance-platform/scripts/migrate_nextcloud_backup_account.py",
|
||||
"repo_head": "08c1f036f2750097750f435efd76e8f6ee6df393",
|
||||
"sha256": "sha256:d3285f403f3c947f75c3288d989152e59ab9a8f5542bcf901bd0a06b0f3e050c",
|
||||
"bytes": 9207
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/ops-warden/wiki/playbooks/railiance-backup-offsite-lane.md",
|
||||
"repo_head": "d97652a3bb5fa733b063d71a1b74068efcccf572",
|
||||
"sha256": "sha256:092bd7bd280b7939f91037ac048e1e59a45adba07620cce60b2ad038cba0c630",
|
||||
"bytes": 4999
|
||||
},
|
||||
{
|
||||
"path": "/home/worsch/railiance-cluster/docs/keycape-tls-recovery-boundary.md",
|
||||
"repo_head": "6ae3f847c83da3402883453ee7110457bfb2d0d6",
|
||||
"sha256": "sha256:f4bcb1d1832c566f9c87793ed2a461c8cd8a00859dc4ae66cd3c160d7ceefa70",
|
||||
"bytes": 3162
|
||||
}
|
||||
]
|
||||
Loading…
Add table
Add a link
Reference in a new issue