admin/felhom.eu
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CC uses its hub token: live C3 proof (floor no-op 303 floor_set, vouch 403, session-only 403); R-1051 closed; skill floor step + prune script on the token; STATUS: change the hub password
gates / gates (push) Successful in 6m33s
Details

Browse Source 
Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb
This commit is contained in:
admin committed 2026-10-15 13:10:00 +02:00
1 parent 2f1f6c8052
commit 5d78569bac
8 files changed
+69 -32
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

documentation/audits/hub-tokens-2026-10-15/C3-token-live.txt
+18
View File
@@ -0,0 +1,18 @@
1 floor no-op save: (303, '/configuration?flash=floor_set')
2 vouch attempt: (403, '', 'Forbidden: missing scope vouch:write')
3 session-only (customer page): (403, '', 'Forbidden: session only — never by a token')
3b session-only (reveal): (403, '', 'Forbidden: session only — never by a token')
4 read Configuration: 200
DB ('min_controller_version', '0.313.0')
DB ('min_controller_version_declared_min_agent', '0.313.0=0.155.0')
DB token ('cc-releases', '2026-10-15T11:07:33Z', '10.42.0.1')
2026/10/15 13:06:06 [INFO] access token "cc-releases" created from 192.168.0.110: scopes overview:read,floor:read,floor:write,customers:read,hosts:read,offsite:read,offsite:write,os:read,os:write, expires 2027-04-13T11:06:06Z
2026/10/15 13:07:32 [INFO] Global controller-version floor set to "0.313.0" (declared MinAgent "0.155.0")
2026/10/15 13:07:32 [WARN] global floor 0.313.0 does NOT move customer demo-hp: its own floor 0.311.0 wins (set 2026-10-14 15:18 UTC) — clear it on the customer page to let the global floor apply
2026/10/15 13:07:32 [INFO] Operator email sent for /floor_raise_skipped
2026/10/15 13:07:33 [INFO] access token "cc-releases": POST /configuration/global-floor → 303
2026/10/15 13:07:33 [WARN] access token "cc-releases" refused: missing scope vouch:write — POST /configuration/artifacts → 403
2026/10/15 13:07:33 [WARN] access token "cc-releases" refused: session only — never by a token — GET /customers/demo-felhom → 403
2026/10/15 13:07:33 [WARN] access token "cc-releases" refused: session only — never by a token — POST /hosts/demo-hp-bb76ea/reveal-recovery-credential → 403
2026/10/15 13:07:34 [INFO] access token "cc-releases": GET /configuration → 200
skill recipe run verbatim 2026-10-15 ~13:20 Budapest (no-op 0.313.0/0.155.0): HTTP/1.1 303, Location: /configuration?flash=floor_set; header file removed