3 commits

Author	SHA1	Message	Date
tegwick	ab5cccdcf3	KEY-WP-0038: Forgejo custody path derived by case type; propose KEY-WP-0039 negative-probe tokens ... Forgejo's secret now lives at platform/workloads/keycape/forgejo, as derived by oidc-browser-relying-party 1.0 (net-kingdom 074b3a0). KEY-WP-0039 answers railiance-platform's CCR-2026-0038 question with one-mismatch probe registrations instead of an issuer path that could mint arbitrary claims. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 779409@bnt-lap001 Assistant-Session: c658ca06-19b5-468d-be64-2985dc20bfd3	2026-10-10 12:29:32 +02:00
tegwick	05e05aa945	KEY-WP-0038-T01 done: founder accepted the Forgejo client request ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 21:26:37 +02:00
tegwick	73d97e3323	KEY-WP-0038-T01: draft the Forgejo OIDC client request packet ... Non-secret claim contract for founder acceptance and railiance-apps agreement. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 19:32:00 +02:00