tegwick 7728fde9b4 AUDIT-WP-0018-T02 done: nk-bounded-executor sender scope and sso ingress prepared ... - deploy/senders-scope.{json,yaml}: nk-bounded-executor (source net-kingdom.bounded-executor, tenants [platform], write-only, secret_policy reject, load-bearing); inert until a token is seeded - senders.py: the scope overlay may tighten secret_policy redact->reject, never relax it - networkpolicies.yaml: audit-core-nk-bounded-executor-ingress (sso AND app.kubernetes.io/name=bounded-executor, TCP 8080); not applied - tests on the executor's envelope shape: 202, 200 duplicate, 409, wrong source/tenant, secret-shaped step check 400 - T03 unblocked (window bound = admission window.not_after) - docs: emitter defect: executor AuditCore.emit rejects 202 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5502@bnt-lap001 Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196		2026-10-31 23:02:44 +01:00
..
evidence	Accept native Qonto sender admission and hourly receiver registration	2026-10-15 21:41:46 +02:00
approval-engine-source-registration.md	Evaluate declared emission cadence and close AUDIT-WP-0009 (T05)	2026-09-22 22:44:45 +02:00
audit-backend-contract.md	AUDIT-WP-0009-T01 — derive tamper_evidence from live attestation state	2026-09-06 20:34:22 +02:00
availability-recovery.md	Record the availability exercise and finish the tenancy posture plan.	2026-09-24 15:53:09 +02:00
bounded-executor-receipts.md	AUDIT-WP-0018-T02 done: nk-bounded-executor sender scope and sso ingress prepared	2026-10-31 23:02:44 +01:00
cadence-registration.md	Accept native Qonto sender admission and hourly receiver registration	2026-10-15 21:41:46 +02:00
cross-repo-evidence-admission.md	AUDIT-WP-0018: answer NK-WP-0056-T02 — hold bounded-executor receipts, propose event mapping	2026-10-31 14:19:10 +01:00
erasure-and-audit.md	Implement AUDIT-WP-0008 T03, T06, T07, T08.	2026-08-18 15:24:55 +02:00
event-envelope.md	Register informed-decision.memo.posed for the platform tenant.	2026-10-03 21:18:13 +02:00
flex-auth-secrets-engine-admission.md	Define retained PDP audit admission and complete-ledger reconciliation	2026-10-16 19:25:03 +02:00
informed-decision-source-registration.md	Register informed-decision.memo.posed for the platform tenant.	2026-10-03 21:18:13 +02:00
integrity.md	fix: repair chained imports and track blocked evidence dependencies	2026-10-04 11:36:06 +02:00
interface-card.yaml	Refine AUDIT-WP-0008 open tasks against draft-8.	2026-08-18 15:20:58 +02:00
operator-runbook.md	AUDIT-WP-0013-T06: independent full-scope readers may count any source (NK-WP-0035-T04)	2026-10-28 09:49:10 +01:00
recovery-synthetic-load-driver.md	feat(AUDIT-WP-0008): add T02 synthetic load driver	2026-08-22 16:46:31 +02:00
section-4-source-of-evidence.md	AUDIT-WP-0013-T06: independent full-scope readers may count any source (NK-WP-0035-T04)	2026-10-28 09:49:10 +01:00
senders.example.json	AUDIT-WP-0009-T03/T09 — evidence_kind, and approval-engine's registration inputs	2026-09-06 22:31:37 +02:00
stream-completeness.md	fix: repair chained imports and track blocked evidence dependencies	2026-10-04 11:36:06 +02:00
tenant-engine-source-registration.md	AUDIT-WP-0010 T01/T03/T04 — admit tenant-engine, and the envelope does not match	2026-09-10 16:34:45 +02:00