Extract credential seeding (private env-file / keychain / decode) to cli-guard #268

New issue

Closed

opened 2026-06-24 07:46:09 +00:00 by coilyco-ops · 1 comment

coilyco-ops commented

2026-06-24 07:46:09 +00:00

Member

resolveClaudeCreds/claudeCredsHealth/resolveCodexCreds/credEnvLines/writeTokenEnvFile + the in-container decode are a reusable security mechanism: resolve host creds (keychain/file/SSM), base64-pack into a private 0600 --env-file so they never hit argv/audit, decode on the other side, never-audit. The which creds is product; the how is engine policy that belongs next to pkg/audit.

Move to cli-guard/pkg/credseed: a SecretEnvFile writer + a keychain/file/SSM resolver interface. ward supplies the harness->cred mapping.
Med risk (touches the live container launch); isolatable behind an interface.

From the 2026-06-24 ward/cli-guard boundary audit. See ward docs/architecture.md (the 3-layer model: cli-guard engine / ward-kdl generator / ward product). Related: ward#194, ward#200, cli-guard#139.

`resolveClaudeCreds`/`claudeCredsHealth`/`resolveCodexCreds`/`credEnvLines`/`writeTokenEnvFile` + the in-container decode are a reusable security mechanism: resolve host creds (keychain/file/SSM), base64-pack into a private 0600 `--env-file` so they never hit argv/audit, decode on the other side, never-audit. The *which* creds is product; the *how* is engine policy that belongs next to `pkg/audit`. - Move to `cli-guard/pkg/credseed`: a `SecretEnvFile` writer + a keychain/file/SSM resolver interface. ward supplies the harness->cred mapping. - Med risk (touches the live container launch); isolatable behind an interface. From the 2026-06-24 ward/cli-guard boundary audit. See ward docs/architecture.md (the 3-layer model: cli-guard engine / ward-kdl generator / ward product). Related: ward#194, ward#200, cli-guard#139.

coilyco-ops added the

headless

labels

2026-06-24 07:46:10 +00:00

coilyco-ops added

interactive

and removed

headless

labels

2026-06-24 17:20:13 +00:00

coilyco-ops commented

2026-06-24 17:30:25 +00:00

Author

Member

Re-triage (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24)

P3 - Credential-seeding extraction, med-risk cleanup, kept.
interactive - Touches the live container cred path, so an agent works it and a human verifies the secret-file behavior.

**Re-triage** (goose-triage method, claude-macos-kais-macbook-pro-2 as the judgment engine, 2026-06-24) - **P3** - Credential-seeding extraction, med-risk cleanup, kept. - **interactive** - Touches the live container cred path, so an agent works it and a human verifies the secret-file behavior.