Records the 12-month cadence and the trigger rules agreed in co-op/support#35,
a last-rotated table (first entry: the Open Collective token, rotated
2026-10-27; other rows blank because nothing is recorded), and the account map
behind the credentials. Adds scripts/rotation_due.py, which reads the table and
prints only when a credential is within 30 days of its due date.
Ported from co-op/docs#7 (written by solo.ist). The runbook this patched
moved to this git-only repository, so the inventory belongs here with it.
Every credential the agents and the member-facing apps hold: purpose, where
it lives, who rotates it, and the accounts they come from. Names and roles
only; no secret values.
Applied on landing (the two points raised after the PR's last review):
- OC_PERSONAL_TOKEN: the previous personal token is recorded as revoked
(the operator confirmed on 2026-10-27), not 'should be revoked'.
- Added the LibreChat RAG service key (RAG_OPENAI_API_KEY, gateway alias
rag-service-embeddings), added 2026-10-27.
inference-bot
solo.ist