aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

security(deep-research): credential-isolation decision + shared-folder policy (HOM-519) #382

Open
aaron wants to merge 1 commit from security/HOM-519-deep-research-key-split into live
pull from: security/HOM-519-deep-research-key-split
merge into: aaron:live
Conversation 0 Commits 1 Files changed 2 +101
aaron commented 2026-07-02 07:17:00 +00:00
Owner
Copy link

Records the reader/verifier credential-isolation decision as ADR-009 and documents the intra-user-only shared-folder model in the mgmt-deep-research role defaults.

Finding: reader and verifier pools run in-process as a single pi-research UID (via @tintinweb/pi-subagents), so splitting models.json into per-role files gives no OS-level isolation. ADR-009 retains the single file with compensating controls (0600 owner-only, dedicated nologin user, distinct independently-revocable keys, rotation runbook).

Requires CTO sign-off on retaining the single file (per HOM-519 acceptance criteria). ADR status is Proposed until then.

Part of HOM-519 (follow-up to HOM-509).

Records the reader/verifier credential-isolation decision as ADR-009 and documents the intra-user-only shared-folder model in the `mgmt-deep-research` role defaults. **Finding:** reader and verifier pools run in-process as a single `pi-research` UID (via `@tintinweb/pi-subagents`), so splitting `models.json` into per-role files gives no OS-level isolation. ADR-009 retains the single file with compensating controls (0600 owner-only, dedicated nologin user, distinct independently-revocable keys, rotation runbook). **Requires CTO sign-off** on retaining the single file (per HOM-519 acceptance criteria). ADR status is Proposed until then. Part of HOM-519 (follow-up to HOM-509).
security(deep-research): record credential-isolation decision + shared-folder policy (HOM-519)
Some checks failed
CI Review / pr-title (pull_request) Failing after 0s
Details
CI Review / helm-validate (pull_request) Successful in 5s
Details
CI Review / ai-review (pull_request) Failing after 4s
Details
Lint & Validate / terraform-validate (pull_request) Successful in 2m39s
Details
Lint & Validate / yaml-lint (pull_request) Successful in 9s
Details
Lint & Validate / shellcheck (pull_request) Successful in 3s
Details
7b0a7ae707 
Reader/verifier subagents run in-process as a single pi-research UID, so
splitting models.json into per-role files gives no OS-level isolation.
ADR-009 records the single-file decision (pending CTO sign-off), the
compensating controls, and the intra-user-only shared-folder model, which
is also documented in the role defaults.
Some checks failed
CI Review / pr-title (pull_request) Failing after 0s
Required
Details
CI Review / helm-validate (pull_request) Successful in 5s
Required
Details
CI Review / ai-review (pull_request) Failing after 4s
Details
Lint & Validate / terraform-validate (pull_request) Successful in 2m39s
Required
Details
Lint & Validate / yaml-lint (pull_request) Successful in 9s
Required
Details
Lint & Validate / shellcheck (pull_request) Successful in 3s
Required
Details
Some required checks were not successful.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin security/HOM-519-deep-research-key-split:security/HOM-519-deep-research-key-split
git switch security/HOM-519-deep-research-key-split
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!382
No description provided.