the-custodian/docs/changes/netkingdom-target-2026-10-17/native-identity-r1/owner-declaration.template.json
codex 275e034883
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 9s
Record native security preparation and owner checkpoints (1/7)
2026-10-17 04:30:03 +02:00

38 lines
1.5 KiB
JSON

{
"status": "draft_for_actual_owners_no_assent",
"tls": {
"source_owner": "railiance-cluster",
"namespace_intent_owner": "net-kingdom",
"original_private_custody_owner": null,
"provider": null,
"artifact_reference": null,
"capture_time": null,
"capture_binding_to_archive_attempt": null,
"independent_private_custody_entrypoint_reference": null,
"outage_prerequisites": null,
"public_metadata_receipt": null,
"reissue_disposition_reference": null,
"accepted_continuity_scope": null,
"owner_review_reference": null
},
"consumer": {
"source_owner": "secrets-engine",
"selector": {
"client_id": "secrets-engine-openbao",
"secret_env": "KEYCAPE_SECRETS_ENGINE_OPENBAO_CLIENT_SECRET",
"audience": "secrets-engine-openbao",
"scope": "openbao:login",
"subject": "service:secrets-engine",
"tenant": "tenant:platform",
"roles": "secrets-engine",
"deny_scope": "openbao:admin"
},
"current_recovery_assent_reference": null,
"exact_archived_registration_uniqueness_receipt": null,
"archive_to_consumer_binding_receipt": null,
"outage_compatible_private_custody_plan_reference": null,
"continuity_scope_disposition_reference": null,
"owner_review_reference": null
},
"instruction": "Actual owners fill references through existing processes; agents do not fabricate owner/founder assent. Never include values, private manifest digest or executable approval tokens."
}