operator-token-runbook: add a credential inventory (from co-op/docs#7, by solo.ist) #1

2026-11-04T01:18:42Z

inference-bot commented

2026-11-04 01:18:42 +00:00

Ported from co-op/docs#7, written by @solo.ist. That PR patched operator-token-runbook.md when it lived in co-op/docs; the file has since moved here as git-only operator material, which is the right home for a credential inventory. Rather than rewrite solo.ist's prose, this is their inventory committed with their authorship, plus the two points raised after the PR's last review:

OC_PERSONAL_TOKEN: recorded as revoked (operator confirmed 2026-10-27), not 'should be revoked'.
Added the LibreChat RAG service key (RAG_OPENAI_API_KEY, gateway alias rag-service-embeddings), added 2026-10-27.

Names and roles only; no secret values. Refs co-op/support#31.

Ported from co-op/docs#7, written by @solo.ist. That PR patched `operator-token-runbook.md` when it lived in co-op/docs; the file has since moved here as git-only operator material, which is the right home for a credential inventory. Rather than rewrite solo.ist's prose, this is their inventory committed with their authorship, plus the two points raised after the PR's last review: - `OC_PERSONAL_TOKEN`: recorded as revoked (operator confirmed 2026-10-27), not 'should be revoked'. - Added the LibreChat RAG service key (`RAG_OPENAI_API_KEY`, gateway alias `rag-service-embeddings`), added 2026-10-27. Names and roles only; no secret values. Refs co-op/support#31.

inference-bot added 1 commit 2026-11-04 01:18:43 +00:00

operator-token-runbook: add a credential inventory 63d14156ec

Ported from co-op/docs#7 (written by solo.ist). The runbook this patched
moved to this git-only repository, so the inventory belongs here with it.

Every credential the agents and the member-facing apps hold: purpose, where
it lives, who rotates it, and the accounts they come from. Names and roles
only; no secret values.

Applied on landing (the two points raised after the PR's last review):
- OC_PERSONAL_TOKEN: the previous personal token is recorded as revoked
  (the operator confirmed on 2026-10-27), not 'should be revoked'.
- Added the LibreChat RAG service key (RAG_OPENAI_API_KEY, gateway alias
  rag-service-embeddings), added 2026-10-27.

inference-bot merged commit 63d14156ec into main

2026-11-04 01:18:45 +00:00

inference-bot referenced this pull request from co-op/docs

2026-11-04 01:18:48 +00:00

operator-token-runbook: add a credential inventory #7

inference-bot referenced this pull request from co-op/support

2026-11-04 01:19:43 +00:00

Agent docs for members + operator token inventory #31

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: co-op/ops-docs#1