toasterson/akh-medu
Watch
1
0
Fork
You've already forked akh-medu
 0
Code Issues 12 Pull requests 42 Projects Releases 3 Packages 8 Wiki Activity Actions 1

Allow explicitly scoped application ACP clients on Roman hosts #557

Open
toasterson wants to merge 1 commit from vox/native-chat-principal into main
pull from: vox/native-chat-principal
merge into: toasterson:main
Conversation 0 Commits 1 Files changed 3 +109
toasterson commented 2026-10-06 12:27:29 +00:00
Owner
Copy link

Vox Anima needs its own native ACP identity to talk to the hosted Romans and Lilith without implementation runner slots. The renderer now accepts an optional, versioned host-owned application client list and creates only explicitly named Akh scopes, preserving the existing roster when absent. It rejects identity collisions, wildcard/unknown scopes and control-plane expansion.

Documents separate OpenBao enrollment, restricted encrypted ingress, coordinated restart and the native ACP retention/replay boundary. No live runtime or credentials are changed by this PR.

Validation: 4 new application-principal tests and all 139 full-Akh rendering tests passed with Homebrew Python 3.

Vox Anima needs its own native ACP identity to talk to the hosted Romans and Lilith without implementation runner slots. The renderer now accepts an optional, versioned host-owned application client list and creates only explicitly named Akh scopes, preserving the existing roster when absent. It rejects identity collisions, wildcard/unknown scopes and control-plane expansion. Documents separate OpenBao enrollment, restricted encrypted ingress, coordinated restart and the native ACP retention/replay boundary. No live runtime or credentials are changed by this PR. Validation: 4 new application-principal tests and all 139 full-Akh rendering tests passed with Homebrew Python 3.
Allow explicitly scoped application ACP clients on Roman hosts
All checks were successful
CI / test-sokar (pull_request) Successful in 14m40s
Details
CI / check-akh-medu (pull_request) Successful in 16m44s
Details
CI / docker-akh-transcripts (pull_request) Successful in 11m4s
Details
CI / docker-seshd (pull_request) Successful in 23m32s
Details
CI / publish-chart (pull_request) Successful in 15m39s
Details
CI / test-session-platform (pull_request) Successful in 27m40s
Details
CI / check-seshat (pull_request) Successful in 27m39s
Details
CI / test-akh-medu (pull_request) Successful in 35m21s
Details
CI / docker-sokard (pull_request) Successful in 48m57s
Details
CI / platform-images-home (pull_request) Successful in 5m18s
Details
CI / platform-images-core (pull_request) Successful in 22m40s
Details
CI / platform-images-daemons (pull_request) Successful in 1h5m35s
Details
CI / platform-images-fleet (pull_request) Successful in 23m19s
Details
CI / platform-images-collect (pull_request) Successful in 7m28s
Details
130111cf68
All checks were successful
CI / test-sokar (pull_request) Successful in 14m40s
Details
CI / check-akh-medu (pull_request) Successful in 16m44s
Details
CI / docker-akh-transcripts (pull_request) Successful in 11m4s
Details
CI / docker-seshd (pull_request) Successful in 23m32s
Details
CI / publish-chart (pull_request) Successful in 15m39s
Details
CI / test-session-platform (pull_request) Successful in 27m40s
Details
CI / check-seshat (pull_request) Successful in 27m39s
Details
CI / test-akh-medu (pull_request) Successful in 35m21s
Details
CI / docker-sokard (pull_request) Successful in 48m57s
Details
CI / platform-images-home (pull_request) Successful in 5m18s
Details
CI / platform-images-core (pull_request) Successful in 22m40s
Details
CI / platform-images-daemons (pull_request) Successful in 1h5m35s
Details
CI / platform-images-fleet (pull_request) Successful in 23m19s
Details
CI / platform-images-collect (pull_request) Successful in 7m28s
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin vox/native-chat-principal:vox/native-chat-principal
git switch vox/native-chat-principal

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff vox/native-chat-principal
git switch vox/native-chat-principal
git rebase main
git switch main
git merge --ff-only vox/native-chat-principal
git switch vox/native-chat-principal
git rebase main
git switch main
git merge --no-ff vox/native-chat-principal
git switch main
git merge --squash vox/native-chat-principal
git switch main
git merge --ff-only vox/native-chat-principal
git switch main
git merge vox/native-chat-principal
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
follow-up
Documented operational follow-up

No labels
follow-up
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
toasterson/akh-medu!557
No description provided.