ADR 0086 (a secret reaches a process as a file), the vault shipped, issues 041 and 072 #59

2026-09-21T08:44:08Z

jschoubben commented

2026-09-21 08:44:08 +00:00

Merge last of four.

The vault's "when something ships" step: as-is 06 describes the vault as it runs, design 24 is implemented, issue 071 names its merges.
ADR 0086: a secret reaches a process as a file; an environment exception is declared with a reason and refused otherwise. Design 13 states the rule and how it is checked. Issue 041 resolved.
Issue 072 opened: the controller's manifest exists twice and nothing keeps the copies equal.
Decisions index regenerated. Checks green.

Merge last of four. - The vault's "when something ships" step: as-is 06 describes the vault as it runs, design 24 is implemented, issue 071 names its merges. - ADR 0086: a secret reaches a process as a file; an environment exception is declared with a reason and refused otherwise. Design 13 states the rule and how it is checked. Issue 041 resolved. - Issue 072 opened: the controller's manifest exists twice and nothing keeps the copies equal. - Decisions index regenerated. Checks green.

jschoubben added 3 commits 2026-09-21 08:44:08 +00:00

The vault shipped: as-is 06 describes it, design 24 is implemented, 071 names its merges 7015bf58ac

ADR 0086: a secret reaches a process as a file, and an exception is declared ec7b6e0748

Closes issue 041 by decision and by code on the same branch: the catalogue
engine refuses a secret in a container's env, and a secret-carrying env-file
unless the container declares its reason; the controller reads all six of
its credentials from files; design 13 states the rule and how it is checked.

Issue 072: the controller's manifest exists twice; decisions index regenerated for ADR 0086 5fb8f06a91

jschoubben merged commit a211aecdfa into main

2026-09-21 09:59:22 +00:00

jschoubben deleted branch feat/secret-not-in-environment

2026-09-21 09:59:22 +00:00

jschoubben referenced this pull request

2026-09-26 12:58:31 +00:00

Issue 122: a module cannot ask for its own public name #121

jschoubben referenced this pull request

2026-09-26 13:07:32 +00:00

Issue 122: the pattern is already on main, in five modules #122

Sign in to join this conversation.