Skip to content

Classify VeriReel runtime secret bindings#1118

Merged
cbusillo merged 1 commit into
mainfrom
verireel-runtime-key-safety-policy
Jun 2, 2026
Merged

Classify VeriReel runtime secret bindings#1118
cbusillo merged 1 commit into
mainfrom
verireel-runtime-key-safety-policy

Conversation

@cbusillo
Copy link
Copy Markdown
Owner

@cbusillo cbusillo commented Jun 2, 2026

Summary

  • add runtime key-safety classifications for VeriReel runtime secret bindings
  • allow those bindings only for verireel testing/prod
  • keep the bindings classified as prod_only, which is allowed for testing/prod but not preview/dev

Why

verireel/testing live-target-runtime dry-run now fails closed after product-scoped sync because Launchplane expects the VeriReel runtime secrets but the active runtime key-safety policy does not classify them yet.

Failure evidence: Live Target Runtime run 26843745422, trace launchplane_req_c3386112916445a5912cef0effe9ed96, runtime_environment_empty after no expected values resolved. Product-config dry-run for the local private testing values then failed with runtime_key_safety_failed, trace launchplane_req_7693d28676014a84a29821418036c7d8.

Validation

  • npx --yes prettier --check import-material/launchplane/seed-imports/catalog.json
  • uv run python -m unittest tests.test_product_onboarding.ProductOnboardingTests.test_launchplane_seed_import_catalog_validates_contracts tests.test_product_onboarding.ProductOnboardingTests.test_launchplane_seed_import_script_requires_target_id_env tests.test_product_onboarding.ProductOnboardingTests.test_launchplane_seed_import_script_patches_provider_targets
  • uv run --extra dev ruff check tests/test_product_onboarding.py
  • uv run --extra dev ruff format --check tests/test_product_onboarding.py
  • uv run --extra dev mypy control_plane tests

@cbusillo cbusillo merged commit 7383269 into main Jun 2, 2026
12 checks passed
@cbusillo cbusillo deleted the verireel-runtime-key-safety-policy branch June 2, 2026 19:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant