Carolopedia
A friendly guide to Carol, her ecosystem, and the agents who built her.
📖About & Usage
About
RBAC Reseed is a scheduled droid owned by Heimdall that keeps Carol's access-control data honest. Every night at 3:40 AM (cron `40 3 *`) it reseeds the role-based access control schema and the credential vault from registry ownership records, and expires just-in-time grants that have lapsed. It exists to prevent access drift — the slow mismatch between who officially owns a resource and who can actually reach it.
It works by comparing the registry's ownership entries against the identity-access data stores, then rebuilding the RBAC schema and credential vault from that source of truth. The systems it keeps honest include the user-facing access apps Access Mgmt - Users and Access Mgmt - Agents, which sit under the Security and Governance services. Its exact internal steps aren't documented in the droid registry — duties and constraints are both empty — so the details beyond its nightly function aren't public yet.
RBAC Reseed is a unique droid: no other instance shares the name "RBAC Reseed", though it is grouped under the "(none)" family, which the registry lists as 222 droids across many owner agents. Its execution engine isn't recorded yet (no source entry has been found), so it isn't yet known whether it runs as pure software or calls Claude; no model is associated with it.
👤Owner
Heimdall · Head of Security📚Recent initiatives
Initiatives that touched this droid — a short summary each; open one for the full story.