Skip to content

Add enterprise integration secret rotation gate#200

Open
HunterCML wants to merge 1 commit into
SCIBASE-AI:mainfrom
HunterCML:codex/enterprise-secret-rotation-19
Open

Add enterprise integration secret rotation gate#200
HunterCML wants to merge 1 commit into
SCIBASE-AI:mainfrom
HunterCML:codex/enterprise-secret-rotation-19

Conversation

@HunterCML
Copy link
Copy Markdown

/claim #19

Summary

  • add a self-contained enterprise-integration-secret-rotation module for institutional API credential and webhook signing-secret governance
  • evaluate API clients for rotation age, expiry, inactivity, least-privilege scope drift, ownership, and break-glass risk
  • evaluate webhook destinations for HTTPS/HMAC, secret rotation age, overlap windows, idempotency, dead-letter queues, recipient verification, and allowed events
  • emit dashboard-ready risk metrics plus deterministic compliance evidence digests

Demo video

  • enterprise-integration-secret-rotation/demo.mp4

Validation

  • node enterprise-integration-secret-rotation/test.js
  • node enterprise-integration-secret-rotation/demo.js
  • git diff --check
  • ffprobe enterprise-integration-secret-rotation/demo.mp4 -> H.264, 1280x720, 8.4s

Issue fit

This covers the Enterprise Tooling API/Webhooks/Admin Dashboard/Compliance portions with a focused credential and secret-rotation control plane rather than another generic dashboard or export package.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant