14 lines
4.1 KiB
JSON
14 lines
4.1 KiB
JSON
{
|
|
"command": [
|
|
"/home/worsch/ops-warden/.venv/bin/python",
|
|
"-c",
|
|
"from warden.cli import app; app()",
|
|
"plan",
|
|
"attended OpenBao platform administration for reviewed flex-auth signer custody CAS0 and fixed KV metadata",
|
|
"--json"
|
|
],
|
|
"cwd": "/tmp/warden-admin-routing-20261016",
|
|
"exit_code": 0,
|
|
"stdout": "{\n \"need\": \"attended OpenBao platform administration for reviewed flex-auth signer custody CAS0 and fixed KV metadata\",\n \"verdict\": \"founder_required\",\n \"organization_posture\": \"build\",\n \"policy_gate\": \"zone-aware \\u2014 fetches gated by flex-auth-ops-warden-fetch at http://127.0.0.1:19091\",\n \"lane_id\": \"openbao-platform-admin-login\",\n \"lane_title\": \"Attended OpenBao platform administration login\",\n \"match_score\": 10,\n \"commands\": [\n \"warden access openbao-platform-admin-login --exec -- <reviewed-command>\",\n \"# owner login is contained by warden; do not invoke it separately\"\n ],\n \"founder_act\": {\n \"kind\": \"oidc_login\",\n \"summary\": \"Interactive OIDC/MFA login via railiance-platform\",\n \"details\": {\n \"lane_id\": \"openbao-platform-admin-login\",\n \"auth_method\": \"attended KeyCape OIDC/MFA at OpenBao auth mount netkingdom, role platform-admin\",\n \"fetch_command\": \"warden access openbao-platform-admin-login --exec -- <reviewed-command>\",\n \"desk_hint\": \"warden desk --from-plan (act=oidc_login); execute only through: warden access openbao-platform-admin-login --exec -- <reviewed-command>\"\n }\n },\n \"ccr_stub\": null,\n \"catalog\": {\n \"path\": \"/tmp/warden-admin-routing-20261016/registry/routing/catalog.yaml\",\n \"source\": \"override\",\n \"content_hash\": \"c47065c0892f\",\n \"mtime_iso\": \"2026-10-16T15:44:19.751415+00:00\",\n \"package_version\": \"0.1.2\",\n \"entry_count\": 44,\n \"active_count\": 40,\n \"newest_reviewed\": \"2026-10-11\",\n \"oldest_reviewed\": \"2026-06-18\",\n \"stale_entry_count\": 17,\n \"using_bundled\": false,\n \"warnings\": [\n \"17 catalog entries past 90d review cadence\",\n \"17 interim delegations need re-verifying (risk-scaled blocker cadence) \\u2014 see `warden route gaps`\"\n ]\n },\n \"candidates\": [\n {\n \"id\": \"openbao-platform-admin-login\",\n \"title\": \"Attended OpenBao platform administration login\",\n \"score\": 10,\n \"status\": \"active\",\n \"resolvable\": true,\n \"exec_capable\": true,\n \"warden_executes\": false,\n \"lane\": \"login\",\n \"risk\": \"high\"\n },\n {\n \"id\": \"openbao-structure-survey\",\n \"title\": \"OpenBao existing-structure survey for a construction plan (section 2)\",\n \"score\": 11,\n \"status\": \"active\",\n \"resolvable\": false,\n \"exec_capable\": false,\n \"warden_executes\": false,\n \"lane\": \"ceremony\",\n \"risk\": \"high\"\n },\n {\n \"id\": \"ops-warden-warden-sign-token\",\n \"title\": \"Scoped OpenBao token for ops-warden SSH signing (warden-sign)\",\n \"score\": 8,\n \"status\": \"active\",\n \"resolvable\": false,\n \"exec_capable\": false,\n \"warden_executes\": false,\n \"lane\": \"secret\",\n \"risk\": \"high\"\n },\n {\n \"id\": \"openbao-api-key\",\n \"title\": \"API key, DB credential, or dynamic lease\",\n \"score\": 7,\n \"status\": \"active\",\n \"resolvable\": false,\n \"exec_capable\": true,\n \"warden_executes\": false,\n \"lane\": \"secret\",\n \"risk\": \"high\"\n },\n {\n \"id\": \"agent-harness-forgejo-deploy\",\n \"title\": \"agent-harness Forgejo deploy key (write sandbox; binky-control at cutover)\",\n \"score\": 6,\n \"status\": \"active\",\n \"resolvable\": true,\n \"exec_capable\": true,\n \"warden_executes\": false,\n \"lane\": \"secret\",\n \"risk\": \"high\"\n }\n ],\n \"reasons\": [\n \"login lane requires interactive founder/operator identity act\"\n ],\n \"actor\": null,\n \"domain\": null\n}\n",
|
|
"stderr": ""
|
|
}
|