Persist the operation journal and non-secret status acknowledgements #21

New issue

Closed

opened 2026-08-29 17:05:57 +00:00 by larandar · 0 comments

larandar commented

2026-08-29 17:05:57 +00:00

Owner

Proposal

Persist Vedanta lifecycle operations so each mutation is write-ahead, idempotent, restart-safe, and observable without credential material.

Delivery class

agent-unit — add src/operations.rs with restart and replay tests.

Design

Write a durable record before mutation. One operation ID causes at most one Kanidm mutation. Completed status and acknowledgement contain identifiers and outcomes only. Local audit failure denies before mutation.

Tasks

Add durable operation states and transitions.
Add metadata-only status and acknowledgement.
Prove duplicate and restart behavior.
Prove local write failure prevents Kanidm mutation.

Specification Delta

Requirement: one operation ID mutates at most once

Scenario: a completed operation is replayed

GIVEN an operation ID already completed with one token ID
WHEN the command repeats after a restart
THEN Vedanta returns non-secret status and does not mint or redeliver

OpenSpec

OpenSpec 20

Structural parent

Vedanta#20

## Proposal Persist Vedanta lifecycle operations so each mutation is write-ahead, idempotent, restart-safe, and observable without credential material. ## Delivery class `agent-unit` — add `src/operations.rs` with restart and replay tests. ## Design Write a durable record before mutation. One operation ID causes at most one Kanidm mutation. Completed status and acknowledgement contain identifiers and outcomes only. Local audit failure denies before mutation. ## Tasks - [ ] Add durable operation states and transitions. - [ ] Add metadata-only status and acknowledgement. - [ ] Prove duplicate and restart behavior. - [ ] Prove local write failure prevents Kanidm mutation. ## Specification Delta ### Requirement: one operation ID mutates at most once #### Scenario: a completed operation is replayed - **GIVEN** an operation ID already completed with one token ID - **WHEN** the command repeats after a restart - **THEN** Vedanta returns non-secret status and does not mint or redeliver ## OpenSpec [OpenSpec 20](https://jo.et0.pw/Ting/Vedanta/wiki/OpenSpec-20-openbao-forge-identity-lifecycle) ## Structural parent [Vedanta#20](https://jo.et0.pw/Ting/Vedanta/issues/20)

larandar added the

Kind/Feature

Kind/Security

labels

2026-08-29 17:05:57 +00:00

larandar added a new dependency

2026-08-29 17:06:39 +00:00

#20 Session: OpenBao-owned Forge identity leases and private Vedanta effect

larandar changed title from ~~Persist replay-safe lifecycle operations and compensate lost delivery~~ to Persist the operation journal and non-secret status acknowledgements

2026-08-29 19:53:26 +00:00

larandar referenced this issue

2026-08-29 19:53:27 +00:00

Session: OpenBao-owned Forge identity leases and private Vedanta effect #20

larandar added a new dependency

2026-08-29 19:53:55 +00:00

#22 Authenticate and validate private lifecycle commands

larandar added a new dependency

2026-08-29 19:53:55 +00:00

#23 Reconcile uncertain delivery and invalidate orphan credentials

larandar added a new dependency

2026-08-29 19:53:56 +00:00