188 lines
8.7 KiB
JSON
188 lines
8.7 KiB
JSON
{
|
|
"checked_at": "2026-10-17T20:43:50.840642+00:00",
|
|
"keycape_head": "git:d803e9282a47b49daf930fb905312fa5104c0ace",
|
|
"source_pins": [
|
|
{
|
|
"path": "net-kingdom/sso-mfa/k8s/keycape/openbao-negative-node-route.md",
|
|
"expected": "sha256:cad3e3dc481d45295cc014e48285e81614911dfb4a10523883f3044f6085f363",
|
|
"actual": "sha256:cad3e3dc481d45295cc014e48285e81614911dfb4a10523883f3044f6085f363",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "net-kingdom/sso-mfa/k8s/keycape/openbao-negative-node-wrapper.py",
|
|
"expected": "sha256:76ac013d1a676a0dfa58aea1ce87b0c3e72483ccd21f586a22c5475e9132f6c1",
|
|
"actual": "sha256:76ac013d1a676a0dfa58aea1ce87b0c3e72483ccd21f586a22c5475e9132f6c1",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "net-kingdom/sso-mfa/k8s/keycape/openbao-negative-session.py",
|
|
"expected": "sha256:24b7b803e4eb7e6e7c0700a069dad0ec315ee7eb5538a88b9e56147f8fab5cdd",
|
|
"actual": "sha256:24b7b803e4eb7e6e7c0700a069dad0ec315ee7eb5538a88b9e56147f8fab5cdd",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "net-kingdom/sso-mfa/k8s/keycape/test_openbao_negative_session.py",
|
|
"expected": "sha256:01e23f2b4fc77824a161a57acb3a52d19aad846b3b6c0fd3abd81afa1dc2985c",
|
|
"actual": "sha256:01e23f2b4fc77824a161a57acb3a52d19aad846b3b6c0fd3abd81afa1dc2985c",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "net-kingdom/sso-mfa/k8s/keycape/test_openbao_node_route.py",
|
|
"expected": "sha256:1c57053be6e8472174e4034fdfbf34b3e1729f5e239b3a9af89d9e59a08d6cb6",
|
|
"actual": "sha256:1c57053be6e8472174e4034fdfbf34b3e1729f5e239b3a9af89d9e59a08d6cb6",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "net-kingdom/sso-mfa/k8s/keycape/test_openbao_private_input.py",
|
|
"expected": "sha256:84277edb5bd7858885173dea802b6bdc4f0f0c7785d6e200ee9a98d8553891a1",
|
|
"actual": "sha256:84277edb5bd7858885173dea802b6bdc4f0f0c7785d6e200ee9a98d8553891a1",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "net-kingdom/sso-mfa/k8s/keycape/test_openbao_private_ready.py",
|
|
"expected": "sha256:8a7a033b1c509ba21397d1d74580c44f24592045b2b9de50fe87638607224277",
|
|
"actual": "sha256:8a7a033b1c509ba21397d1d74580c44f24592045b2b9de50fe87638607224277",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "key-cape/docs/openbao-negative-token-producer-decision.json",
|
|
"expected": "sha256:7b3e4a53ac4af33c780f16c3f1aa9cde0154040ad2747a8d361dd79bbb7f435c",
|
|
"actual": "sha256:7b3e4a53ac4af33c780f16c3f1aa9cde0154040ad2747a8d361dd79bbb7f435c",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "key-cape/docs/openbao-negative-token-producer-decision.md",
|
|
"expected": "sha256:38e4c9660ca57a1fb6e5ff04f214af61dd1a58abf564a5ed22216d909e27fc73",
|
|
"actual": "sha256:38e4c9660ca57a1fb6e5ff04f214af61dd1a58abf564a5ed22216d909e27fc73",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "key-cape/scripts/openbao_negative_private_handoff.py",
|
|
"expected": "sha256:faf63a3e9504dcbb46847a114275f83d508521e095410a47f92f02b86ba82b1b",
|
|
"actual": "sha256:faf63a3e9504dcbb46847a114275f83d508521e095410a47f92f02b86ba82b1b",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "key-cape/scripts/openbao_negative_private_launcher.py",
|
|
"expected": "sha256:46e57504b3185cc13f1656901a0ca02cc3887527cb09566e270f57b76099ab9c",
|
|
"actual": "sha256:46e57504b3185cc13f1656901a0ca02cc3887527cb09566e270f57b76099ab9c",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "key-cape/scripts/test_openbao_negative_private_handoff.py",
|
|
"expected": "sha256:e4eb600718e7d93b0e801ac3ab1427af9895a6e5d877c1134369e049e0849797",
|
|
"actual": "sha256:e4eb600718e7d93b0e801ac3ab1427af9895a6e5d877c1134369e049e0849797",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "key-cape/scripts/test_openbao_negative_private_launcher.py",
|
|
"expected": "sha256:243426a85075b3447adeb2ca320a13711409744f71837a06699de6ad5b04ee9d",
|
|
"actual": "sha256:243426a85075b3447adeb2ca320a13711409744f71837a06699de6ad5b04ee9d",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "key-cape/scripts/test_openbao_negative_private_preparation.py",
|
|
"expected": "sha256:8e4dd327c4a339a0151ecba57db5987965b5d536ca18123fb7c74a047a241548",
|
|
"actual": "sha256:8e4dd327c4a339a0151ecba57db5987965b5d536ca18123fb7c74a047a241548",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "railiance-platform/helm/openbao-ui-overlay-k8s.yaml",
|
|
"expected": "sha256:7b345359906bf1ecc4cb8e61de7a9f1a121068a66bd919e606190a9217a82daf",
|
|
"actual": "sha256:7b345359906bf1ecc4cb8e61de7a9f1a121068a66bd919e606190a9217a82daf",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "railiance-platform/helm/openbao-ui-overlay/nginx.conf",
|
|
"expected": "sha256:464f7f5cecc69ea343c1e2acc5932e832b2a9c0e6a5099113634a12abc80ccb3",
|
|
"actual": "sha256:464f7f5cecc69ea343c1e2acc5932e832b2a9c0e6a5099113634a12abc80ccb3",
|
|
"match": true
|
|
},
|
|
{
|
|
"path": "railiance-platform/helm/openbao-values.yaml",
|
|
"expected": "sha256:a10239851277889dd69dacb8636109dddd095551d85b46ca4ed2c141944e8d1e",
|
|
"actual": "sha256:a10239851277889dd69dacb8636109dddd095551d85b46ca4ed2c141944e8d1e",
|
|
"match": true
|
|
}
|
|
],
|
|
"plans": {
|
|
"KEY-WP-0039": {
|
|
"path": "/home/worsch/key-cape/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md",
|
|
"source_sha256": "sha256:517f9526d574ce3faafad18837e0039db8f3f7990eac3e34a1678cdd7307a9e1",
|
|
"parent_status": "active",
|
|
"tasks": [
|
|
{
|
|
"record_id": "KEY-WP-0039-T01",
|
|
"uuid": "4d06b059-3768-53bb-83a4-a9a71c0850b8",
|
|
"source_status": "done",
|
|
"hub_status": "done",
|
|
"blocking_reason": null
|
|
},
|
|
{
|
|
"record_id": "KEY-WP-0039-T02",
|
|
"uuid": "03da4c38-1dac-53b1-8b0b-e697df48e9d3",
|
|
"source_status": "wait",
|
|
"hub_status": "wait",
|
|
"blocking_reason": "Ordered identity gate: Forgejo first SecurityCase registration/claims proof, then NetKingdom registry session and attended human/coding-agent custody; original secrets-engine-openbao registration go remains resolved; probe/coding-client custody and attended readiness are not established."
|
|
},
|
|
{
|
|
"record_id": "KEY-WP-0039-T03",
|
|
"uuid": "54d37ad8-2352-51c2-bb2e-af6070dbbd73",
|
|
"source_status": "done",
|
|
"hub_status": "done",
|
|
"blocking_reason": null
|
|
}
|
|
]
|
|
},
|
|
"KEY-WP-0038": {
|
|
"path": "/home/worsch/key-cape/workplans/KEY-WP-0038-forgejo-oidc-client.md",
|
|
"source_sha256": "sha256:dc8d88d462799e7e6e44da759a973d52e44102a271969a5daaa9d30ec015b064",
|
|
"parent_status": "active",
|
|
"tasks": [
|
|
{
|
|
"record_id": "KEY-WP-0038-T01",
|
|
"uuid": "5f019d13-1fa3-5b88-a27a-75a3339ca96e",
|
|
"source_status": "done",
|
|
"hub_status": "done",
|
|
"blocking_reason": null
|
|
},
|
|
{
|
|
"record_id": "KEY-WP-0038-T02",
|
|
"uuid": "ddcfb482-8f33-5c81-9ce8-84be8fa5dc30",
|
|
"source_status": "wait",
|
|
"hub_status": "wait",
|
|
"blocking_reason": "Registration runs as the first KnownSecurityCase of type oidc-browser-relying-party (NK-WP-0048-T06), not as a hand-built rollout."
|
|
},
|
|
{
|
|
"record_id": "KEY-WP-0038-T03",
|
|
"uuid": "40ddaa29-7245-508c-ad48-ddc063e25115",
|
|
"source_status": "wait",
|
|
"hub_status": "wait",
|
|
"blocking_reason": "Claims are verified against the registered client."
|
|
},
|
|
{
|
|
"record_id": "KEY-WP-0038-T04",
|
|
"uuid": "583cf1f1-16dc-515f-83bc-1efc45024a89",
|
|
"source_status": "cancel",
|
|
"hub_status": "cancel",
|
|
"blocking_reason": null
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"infrastructure_review": {
|
|
"path": "/home/worsch/railiance-platform/docs/reviews/2026-10-11-key39-ready-pair-v9-v4-platform-review.json",
|
|
"sha256": "sha256:cb2729781cfce7637d7a4ba29412edde64d337c5efe3148600bd39fb12166894",
|
|
"decision": "approved",
|
|
"scope": "paired child-ready/control wrapper and bounded founder-held launcher source behavior only; no transport/coding-agent custody/native admission",
|
|
"validation": "passed synthetic/offline tests; no actualSSH/network/Kubernetes/credentials/native action"
|
|
},
|
|
"disposition": "Do not finalize the implementation parent: T01/T03 source work complete; T02 native acceptance remains wait. Existing source reviews remain accepted. No new helper, renewed original registration approval, credential access, native execution, or task status changes.",
|
|
"completion_evidence_still_required": [
|
|
"KEY-WP-0038-T02/T03 registration and claims proof",
|
|
"admitted existing coding-client custody and attended human/private handoff",
|
|
"attended provider route, role/config/plugin/effective leeway readiness returns",
|
|
"value-free actual negative/expiry/revoke and baseline/probe-removal cleanup receipt"
|
|
],
|
|
"assessment_reference": "../key39-infra-finalization-r1/ASSESSMENT.md"
|
|
}
|