tegwick 50ab78392f feat(smoke): joint-smoke mode against deployed flex-auth (assist FLEX-WP-0007 T4) ...

flex-auth asked ops-warden to help close FLEX-WP-0007 T4 (joint OpenBao + policy-gate
production smoke) against their deployed runtime (reachable on CoulombCore via the
flex-auth-coulombcore tunnel at 127.0.0.1:18090). The smoke previously spawned its own
local flex-auth, so it never exercised the deployed runtime.

Add FLEX_AUTH_EXTERNAL=1 to scripts/policy_gate_production_smoke.sh: skip the local
serve/load-registry and run the allow/deny/vault paths against the already-running
flex-auth, with a /healthz precheck that fails fast with a tunnel-up hint. Verified the
committed production_registry_snapshot.json is current vs inventory (4 actors). Recorded
in ADHOC-2026-06-29.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-29 00:40:20 +02:00

..

build_flex_auth_registry.py

feat: close WP-0009/WP-0013 production integration stewardship strand

2026-06-24 12:44:32 +02:00

check_principals_drift.py

feat: close WP-0009/WP-0013 production integration stewardship strand

2026-06-24 12:44:32 +02:00

check_secret_posture_conformance.py

feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles

2026-06-27 19:30:30 +02:00

check_tunnel_cert_readiness.py

feat(WARDEN-WP-0016): ops-bridge cert_command readiness gate + handoff

2026-06-27 19:50:28 +02:00

policy_gate_production_smoke.sh

feat(smoke): joint-smoke mode against deployed flex-auth (assist FLEX-WP-0007 T4)

2026-06-29 00:40:20 +02:00