Commit graph

  • b8dda4115a repo.work.assign_missing_identifiers main repo-manager 2026-09-01 01:36:20 +02:00
  • 3ed3a391d6 docs: close canonical UserInfo repair tegwick 2026-09-01 01:36:12 +02:00
  • 153258b9d3 Fix UserInfo canonical subject resolution tegwick 2026-08-31 23:41:29 +02:00
  • 49dabb2d5c Refresh work-record index tegwick 2026-08-29 02:45:20 +02:00
  • 608c5d20cf repo.work.create_intake KEY-IN-0001 repo-manager 2026-08-28 23:01:53 +02:00
  • 892149a7b5 Point layering note at the published standard tegwick 2026-08-28 21:21:07 +02:00
  • 1299ef60a3 Note NetKingdom layering review in INTENT tegwick 2026-08-28 20:33:42 +02:00
  • 270a065383 fix(workplans): adopt ADR-007 derived identifiers for unregistered records codex 2026-08-25 20:13:23 +02:00
  • 23ab8397b6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 19:53:11 +02:00
  • 5c730240af docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:21:16 +02:00
  • 93704fd242 ops: restart identity provisioner during keycape rotation tegwick 2026-08-23 14:42:44 +02:00
  • 6a996bd71e security: rotate exposed KeyCape credentials tegwick 2026-08-23 14:26:36 +02:00
  • c9fd9b1f9a chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:24:54 +02:00
  • bb6dc8d7fc chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 13:57:59 +02:00
  • a9dce795b7 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:57:58 +02:00
  • b7b4985baa Track KeyCape live secret exposure recovery tegwick 2026-08-23 13:56:09 +02:00
  • d150be1097 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 13:19:35 +02:00
  • 48fb556ce8 Use canonical workplan ID for callback admission tegwick 2026-08-23 13:16:46 +02:00
  • f5cf77fa0c Admit operator-tunneled OpenBao callback tegwick 2026-08-23 13:16:21 +02:00
  • 34fadae1c1 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 13:13:38 +02:00
  • 56adce7652 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:13:37 +02:00
  • efce3e9331 Implement KeyCape provider and service identity contracts tegwick 2026-08-23 13:10:13 +02:00
  • cdfb046b80 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:00:52 +02:00
  • 0a7cc7e9e9 Refresh WORK-RECORDS after KEY-WP-0008 closeout tegwick 2026-08-16 01:06:27 +02:00
  • bd90a0e82c chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-16 01:06:09 +02:00
  • b6af6c5268 Finish KEY-WP-0008: registration handoff and client MFA isolation tegwick 2026-08-16 01:05:27 +02:00
  • fff9e39478 docs: point at RMASTER-WP-0019 after master prefix rename tegwick 2026-08-14 14:29:19 +02:00
  • 3bef507cb8 KEY-WP-0008: honor per-client mfaRequired and acr_values step-up tegwick 2026-08-09 22:42:51 +02:00
  • 8e976bc60f chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-09 21:56:59 +02:00
  • 460dcbce0d chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-09 20:52:35 +02:00
  • cd33e118c0 Add coulomb-social public OIDC client to KeyCape dev-config tegwick 2026-08-09 01:50:52 +02:00
  • 09aafdb9c6 Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) tegwick 2026-07-29 23:48:58 +02:00
  • a6ff5384b1 Finish portal OIDC integration tegwick 2026-07-29 22:59:38 +02:00
  • 6b32fb1384 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-29 22:55:54 +02:00
  • 253a5bac77 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-29 22:15:20 +02:00
  • 2465481e3c Complete Binky tenant onboarding tegwick 2026-07-29 22:13:53 +02:00
  • abd9e6fa2b Record Binky MFA login acceptance tegwick 2026-07-29 22:05:18 +02:00
  • 72b0eb404c Record platform-root authorization fix tegwick 2026-07-29 21:33:37 +02:00
  • 90a20783e5 Map platform-root group to platform operator tegwick 2026-07-29 21:30:56 +02:00
  • 41d2e1d1f6 Record Binky password handoff readiness tegwick 2026-07-28 17:56:14 +02:00
  • 49a8992d6e Advance Binky human onboarding tegwick 2026-07-28 16:49:27 +02:00
  • 2bfd115f11 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-28 16:48:13 +02:00
  • 070c38f447 Record suspended identity enforcement tegwick 2026-07-28 01:33:24 +02:00
  • 909bb327fc Deny suspended directory identities tegwick 2026-07-28 01:23:22 +02:00
  • 76da0237ff Bind portal OIDC workplan to State Hub tegwick 2026-07-28 00:43:56 +02:00
  • 806bcf18d4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-28 00:40:13 +02:00
  • e8b4eded88 Map explicit tenant groups into OIDC claims tegwick 2026-07-28 00:34:19 +02:00
  • 993a4dd589 Register user-engine portal OIDC client tegwick 2026-07-28 00:06:38 +02:00
  • 401ab9ca55 Refresh Binky onboarding records tegwick 2026-07-27 22:34:21 +02:00
  • c9459b29fc chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 22:31:59 +02:00
  • 1cd137cd9d Route Binky onboarding through user portal tegwick 2026-07-27 22:31:43 +02:00
  • 3d108adeb8 Refresh work record index tegwick 2026-07-27 21:13:44 +02:00
  • 3def97b087 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:53:36 +02:00
  • e54bcd9a40 Advance Binky identity onboarding tegwick 2026-07-27 20:39:13 +02:00
  • 0fa9ec9673 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:18:33 +02:00
  • 881fffc079 Complete KeyCape service-token rollout tegwick 2026-07-27 20:17:55 +02:00
  • f4a2f7eb1e chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:03:36 +02:00
  • e4464278e7 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:03:31 +02:00
  • e877d2752d Implement KeyCape service-token issuance tegwick 2026-07-27 20:03:07 +02:00
  • 519f0772d2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 19:39:07 +02:00
  • 86e6c083f7 Define Qonto runtime identity contract tegwick 2026-07-26 13:34:56 +02:00
  • 739b1f5c72 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-26 13:09:56 +02:00
  • a32512c6de chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-26 11:03:32 +02:00
  • 9ce84b915f chore(consistency): sync WORK-RECORDS.md for KEY-WP-0005 closure [auto] tegwick 2026-07-24 00:18:50 +02:00
  • f4da182a1f chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-24 00:18:41 +02:00
  • 44da5f5f99 KEY-WP-0005-T02-T03: cached tenant_roles claim, close workplan tegwick 2026-07-24 00:18:17 +02:00
  • fb888579dc chore(consistency): sync WORK-RECORDS.md for KEY-WP-0005-T01 [auto] tegwick 2026-07-24 00:04:09 +02:00
  • f66df69202 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-24 00:03:59 +02:00
  • f1f7fa9dd7 KEY-WP-0005-T01: IAM Profile core claims for the human PKCE flow tegwick 2026-07-24 00:03:31 +02:00
  • e51a2d74e9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-23 23:52:35 +02:00
  • 8059f65a1b chore(consistency): write back state_hub ids for KEY-WP-0005 [auto] tegwick 2026-07-23 23:52:13 +02:00
  • cca7434b2d chore(consistency): register KEY-WP-0005 in State Hub [auto] tegwick 2026-07-23 22:48:04 +02:00
  • 74c81f0566 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-23 22:47:34 +02:00
  • 260ff9cc99 Draft KEY-WP-0005: IAM Profile core claims (tenant, principal_type, roles, assurance, tenant_roles) tegwick 2026-07-23 22:47:00 +02:00
  • df26aee844 KEY-WP-0004-T01: adopt tenant:<grouping>:<name> identifier, binky -> friendly tegwick 2026-07-23 15:45:43 +02:00
  • 7ddc48d3cd chore(consistency): register KEY-WP-0004 in State Hub [auto] tegwick 2026-07-23 14:35:36 +02:00
  • 8a7e243d69 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-23 14:35:12 +02:00
  • b9a7d1b008 Draft KEY-WP-0004: Binky Hedgehog GmbH as first tenant + qonto-assistant workload identity tegwick 2026-07-23 14:34:40 +02:00
  • 1a7fdadcda docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 5) tegwick 2026-07-08 19:51:38 +02:00
  • c95ec5d245 Regenerate agent instructions from state-hub templates (CUST-WP-0055 T01) tegwick 2026-07-08 14:50:29 +02:00
  • 33d7d44205 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-08 14:05:58 +02:00
  • 326f7d1f07 Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 2) tegwick 2026-07-06 19:41:37 +02:00
  • ec706da304 Tier-2 Forgejo pilot: image build workflow on railiance01 runner tegwick 2026-07-04 10:23:38 +02:00
  • 2fd69f0374 Normalize agent instructions and workplan frontmatter (STATE-WP-0067) tegwick 2026-06-22 23:16:27 +02:00
  • afc01456a5 Fixed workplan frontmatter tegwick 2026-06-22 18:40:55 +02:00
  • d076e7ee7b chore(consistency): sync task status from DB [auto] tegwick 2026-06-22 18:02:26 +02:00
  • c4f281a376 Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) tegwick 2026-06-22 17:56:17 +02:00
  • bee021735c Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) tegwick 2026-06-22 17:47:37 +02:00
  • c9838a4811 Add credential routing instructions for all agent runtimes tegwick 2026-06-18 22:48:38 +02:00
  • 593b5af8dc Add capability registry scaffold (REUSE-WP-0014-T05 B03) tegwick 2026-06-16 01:53:59 +02:00
  • d6d41dd84f Fix OpenBao OIDC token exchange compatibility tegwick 2026-06-01 21:20:54 +02:00
  • 06d20c3379 Load LLDAP organizational unit config tegwick 2026-05-25 00:28:33 +02:00
  • 937cb39de6 Require MFA during bootstrap mode tegwick 2026-05-25 00:09:40 +02:00
  • 56d279a8e6 Use basic auth for Authelia token exchange tegwick 2026-05-24 18:04:28 +02:00
  • 1d68639225 Align KeyCape image namespace with deployment tegwick 2026-05-24 17:17:37 +02:00
  • 7e22fcf3c7 bootrapping support tegwick 2026-05-24 17:03:01 +02:00
  • 393abf3e0e Reference IAM Profile v0.2 tegwick 2026-05-22 14:35:29 +02:00
  • f45784f951 Make INTENT.md self-coherent tegwick 2026-05-21 01:50:08 +02:00
  • 465a778c1f Refresh agent instruction files tegwick 2026-05-18 16:55:43 +02:00
  • 10868739a8 Added INTENT.md file tegwick 2026-05-03 17:37:45 +02:00