1 line
3.3 KiB
JSON
1 line
3.3 KiB
JSON
{"allowed_bootstrap_operations":["CREATE_OR_REUSE_DEDICATED_GOVERNANCE_SERVICE_ACCOUNT","GRANT_REPOSITORY_ADMIN_ROLE_TO_DEDICATED_GOVERNANCE_EXECUTOR","ISSUE_OR_ROTATE_GOVERNANCE_EXECUTOR_CREDENTIAL","STORE_GOVERNANCE_CREDENTIAL_IN_GOVERNED_SECRET_BACKEND","PROJECT_GOVERNANCE_CREDENTIAL_AS_SYSTEMD_CREDENTIAL","INSTALL_GOVERNANCE_EXECUTOR_SERVICE","VERIFY_GOVERNANCE_EXECUTOR_API_CAPABILITY"],"bootstrap_credential_policy":{"existing_privileged_identity":"gito","git_credentials":false,"one_shot_service":true,"persistent_privileged_credential":false,"plaintext_exposed":false,"source_preference":["OpenBao secret reference","systemd encrypted credential","existing credential broker source"],"use_only_after_exact_owner_approval":true},"bootstrap_must_not_execute_stage1":true,"bootstrap_state_machine":["PREPARED","OWNER_APPROVAL_VERIFIED","BOOTSTRAP_CREDENTIAL_PROJECTED","SERVICE_ACCOUNT_CREATED_OR_VERIFIED","REPOSITORY_ROLE_APPLIED","EXECUTOR_CREDENTIAL_CREATED","SECRET_PERSISTED_ENCRYPTED","EXECUTOR_INSTALLED","EXECUTOR_VERIFIED","PRIVILEGED_BOOTSTRAP_CREDENTIAL_DESTROYED","COMPLETED"],"credential_lifecycle":{"change_identity":false,"expand_repository_scope":false,"grant_global_admin":false,"recover_lost_runtime_projection":true,"reissue_after_expiry":true,"replace_compromised_credential":true,"rotate_same_identity_same_scope":true},"current_production":{"must_remain_unchanged":true,"version":"V2R1C7"},"denied_operations":["grant_global_admin","Owner_impersonation","reuse_Owner_PAT_as_governance_credential","direct_main_push","force_push","Git_push_from_governance_executor","PR_merge_from_governance_executor","tag_create","tag_update","tag_delete","arbitrary_user_management","arbitrary_team_management","arbitrary_repository_management","branch_protection_mutation_during_bootstrap","production_change","Registry_change","Baseline_change"],"depends_on_governance_request":{"dismissed":false,"head":"015185d7e5191d18c5c1596160807ac228782a0a","manifest_sha256":"1b11ee42d53a9f6c1646e5f5ddd8ce5b7ecf301483b9f3d47a068290d541ba4b","pr":54,"review_id":104,"review_state":"APPROVED","reviewer":"owner","reviewer_id":2},"executor_api_surface":["GET_BRANCH_PROTECTION","APPLY_APPROVED_PROTECTION_DELTA","READBACK_BRANCH_PROTECTION"],"generic_request_forwarding":false,"governance_executor":{"global_admin":false,"login":"aios-governance-executor","owner":false,"repository":"aios/aios","repository_role":"administrator","role_scope":"repository-specific branch-protection management only"},"owner_interaction":{"campaign_rebootstrap":false,"pr53_review":false,"pr54_reapprove":false,"required":"exactly_once","target":"this_dedicated_governance_executor_bootstrap_request"},"protection_mutation_binding_required":["governance_request_PR","exact_request_head","Owner_review_id","Owner_review_exact_head","manifest_sha256","expected_previous_snapshot_sha256","approved_delta"],"purpose":"provision_dedicated_non_owner_governance_executor","repository":"aios/aios","request_id":"AIOS-DEDICATED-GOVERNANCE-EXECUTOR-BOOTSTRAP-V1","schema":"aios.governance-executor-bootstrap.v1","stage1_after_bootstrap":{"approved_delta":{"add_user_id":153,"merge_whitelist":[2]},"before_protection_sha256":"8b3370add21cd23c2b4f41d8d84d3eaaa09ddf0451549b72c7941bbd92d5d60a","governance_request_pr":54,"owner_review_id":104,"unchanged_fields":["required_approvals","can_push","can_force_push","required_contexts","review_protections"]}} |