the-custodian/docs/changes/CUST-WP-0073/interactive-launch-r2/provisioning-contract.json
codex 903616f2b7
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 10s
Reject generated-only commits / generated-commit-guard (push) Successful in 11s
Retain interactive isolation target and identity review
2026-10-19 14:47:02 +02:00

49 lines
1.5 KiB
JSON

{
"proposal_id": "CUST-WP-0073-interactive-launch",
"revision": 2,
"status": "source_proposal_not_applied",
"target": {
"workstation": "bnt-lap001",
"substrate": "WSL2",
"distribution": "custodian-codex",
"account": "custodian-codex",
"uid": null,
"home": "/home/custodian-codex",
"project": "/home/custodian-codex/work/the-custodian",
"ssh_alias": "custodian-codex-workstation",
"ssh_endpoint": null,
"rootfs_sha256": null,
"codex_sha256": null,
"host_identity": null
},
"account_policy": {
"password_login": false,
"sudo": false,
"supplementary_admin_groups": [],
"home_mode": "0700",
"codex_state_mode": "0700",
"operator_auth_copy": false
},
"required_effective_denials": [
"Windows executable interop",
"Windows drive mounts",
"shared WSL and container-control sockets",
"operator homes and SSH agent",
"admin kubeconfig and OpenBao credentials",
"network-accessible host and container control planes"
],
"ssh_policy": {
"exposure": "operator-loopback-only",
"root_login": false,
"password_login": false,
"agent_forwarding": false,
"tcp_forwarding": false,
"x11_forwarding": false,
"native_stdio_session": true
},
"attachment": "native-desktop-existing-chat-handoff",
"approval": "native-app-server-client-approval-ui-retained",
"spend_authorized": false,
"live_changes_authorized_by_this_file": false,
"actual_assignment_admitted": false
}