coulomb/binky-control
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
65 commits 1 branch 0 tags 678 KiB
Commit graph

7 commits

Author SHA1 Message Date
tegwick
02a8d293ab BINKY-WP-0004 T04/T05 done, T06 blocked with cutover runbook 
- T04: executor-worker MVP (new repo ~/executor-worker) ran one task
  end-to-end: kaizen schedule-prepare persona, agentic llm-connect
  session, sandbox commit e043f21, hub progress event
- T05: recurring mailbox scan fully wired (two-phase: deterministic
  credentialed scan + LLM triage session with suspicious-mail log-only
  rule); email checklist item 9 now gated only on Lane 3 AppRole
- T06: blocked — gates are DEC-2026-002, Red-lane Lanes 2/3, Railiance
  deploy, 3 verified runs; runbook at
  integrations/executor-cutover-runbook.md

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-17 17:17:15 +02:00
tegwick
ce14c254db BINKY-WP-0004-T03: executor worker secret lanes prepared 
- Lane 1 (LLM provider): reuse verified — warden catalog
  openrouter-llm-connect, policy workload-kv-read-llm-connect-provider-secrets
- Lane 2 (forgejo deploy key): new, per-repo write deploy key design,
  founder Red lane
- Lane 3 (mail-scan AppRole): executor-worker-binky-mail bound to the
  existing IMAP read policy — closes email checklist item 9's auth
  blocker on paper; provisioning founder Red lane
- No secret values anywhere; T04 can proceed on Lane 1 alone

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-17 17:08:33 +02:00
tegwick
686d2d3dbf email lane live: first read-only mailbox scan (93 messages) 
Scan c3c7e784 via warden/OpenBao lane, evidence CSV in mailmeta/reports/
(metadata only; sqlite state gitignored). Checklist item 8 done. New
AWQ-009: Stripe webhook delivery failure noticed 2026-07-05 — first
real-world event caught by the lane. Two suspicious external mails
logged, not acted on.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-17 00:47:50 +02:00
tegwick
260f734806 company-email: mark OpenBao lane provisioned and active 
Red provision and capabilities-safe verify complete (WARDEN-WP-0028).
 2026-07-17 00:33:20 +02:00
tegwick
b2ff07b036 Record IONOS IMAP host facts for company mailbox 
Blue-lane provider data: imap.ionos.de:993 SSL/TLS; username is full
email address. Non-secret email-connect config; password remains Red
OpenBao provision only.
 2026-07-17 00:15:25 +02:00
tegwick
a2a561757f Align company email OpenBao plan to tenants/binky path 
Match WARDEN-WP-0028 / CCR-2026-0007: mount tenants, checklist for
founder Red provision and host confirmation.
 2026-07-17 00:09:28 +02:00
tegwick
bc49a24c4c BINKY-WP-0003-T01: company email → OpenBao integration plan (AWQ-007 prep) 
Vault path prod/binky/company-email/imap, secrets-engine catalog draft,
email-connect read-only IMAP wiring. Credential handover stays a single
Red-lane founder step.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-16 10:50:29 +02:00