tegwick
4c940d49ae
Apply the separate attestor identity, named-ConfigMap RBAC, attest egress and daily CronJob. Bootstrap an empty chain-head ConfigMap only because it was absent; drop the placeholder from the apply path so a later apply cannot overwrite a live head. One-shot job published a 59-event attestation; mounted readback and receiver write-denial passed. Offsite copy stays the operator path. Assistant: grok Assistant-Session: 01a0a182-bab7-7f11-b32b-d06f3af52082 |
||
|---|---|---|
| .. | ||
| ADHOC-2026-09-14.md | ||
| AUDIT-WP-0001-statehub-bootstrap.md | ||
| AUDIT-WP-0002-pluggable-audit-backend.md | ||
| AUDIT-WP-0003-user-engine-event-ingestion-service.md | ||
| AUDIT-WP-0004-receiver-correctness-and-hardening.md | ||
| AUDIT-WP-0005-postgres-store-and-production-deployment.md | ||
| AUDIT-WP-0006-honest-custody-and-canon-join.md | ||
| AUDIT-WP-0007-integrity-verification.md | ||
| AUDIT-WP-0008-tenancy-posture-alignment.md | ||
| AUDIT-WP-0009-evidence-role-conformance.md | ||
| AUDIT-WP-0010-tenant-engine-sender-admission.md | ||