coulomb/key-cape
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 82b471fc36 Add approval:read to informed-decision-sitting-requester (source only) main tegwick 2026-11-01 00:34:07 +01:00
  • 655d8d31b3 Review oidc-service-client 0.1 against KeyCape's client field rules tegwick 2026-10-31 23:02:54 +01:00
  • a140a4ab05 KEY-WP-0046: deployed in net-kingdom; finished tegwick 2026-10-31 10:52:27 +01:00
  • b3150f3530 KEY-WP-0046-T02: image main-e2b5fa1 published and pinned in net-kingdom tegwick 2026-10-31 10:34:12 +01:00
  • 731a6d7096 KEY-WP-0045, KEY-WP-0046: hub IDs written back by fix-consistency tegwick 2026-10-31 10:25:35 +01:00
  • e2b5fa1442 KEY-WP-0046: directory bind password from KEYCAPE_LLDAP_BIND_PW tegwick 2026-10-31 10:24:22 +01:00
  • a1ab8ff807 KEY-WP-0045: value-safe identity-facts export for NK-WP-0054-T04 tegwick 2026-10-28 09:50:54 +01:00
  • 1af86580e3 KEY-WP-0044: record hub ids tegwick 2026-10-28 01:13:57 +01:00
  • 9adfb0bf4d KEY-WP-0044: traceparent correlation task and audit-core intake package (NK-WP-0055-T11) tegwick 2026-10-27 23:28:54 +01:00
  • fc9f09a8c2 Record KeyCape owner acceptance of NK-WP-0049 isolated restore (issuer side) tegwick 2026-10-27 21:40:11 +01:00
  • 7190f5dfb7 KEY-WP-0043: record hub ids written by fix-consistency tegwick 2026-10-24 23:53:01 +02:00
  • 3acc86fdef KEY-WP-0043: per-run agent identity assessment and proposed workplan tegwick 2026-10-24 23:49:33 +02:00
  • 41cd07c784 Declare the identity backends behind the key-cape facade. tegwick 2026-10-23 17:42:45 +02:00
  • f638b91b0c Declare the live release units for this owner. tegwick 2026-10-23 15:49:54 +02:00
  • a3f1b7dd12 build: keep generated orientation brief local and untracked tegwick 2026-10-19 13:44:09 +02:00
  • 5defa33cd8 build: adopt staged work-record index generation tegwick 2026-10-19 13:15:16 +02:00
  • e2c5a94782 Bind online human ID tokens to the exact current access grant tegwick 2026-10-18 12:13:56 +02:00
  • 08c083bae9 Share current-token verification and scoped cleanup through one producer client tegwick 2026-10-18 11:36:26 +02:00
  • 67a0869c1e Add opt-in issuer-owned access-token status and scoped revocation tegwick 2026-10-18 10:10:38 +02:00
  • d803e9282a docs(key39): scope pending task authorization correctly tegwick 2026-10-17 13:39:02 +02:00
  • 26ec9bb9b1 docs(key39): clarify original client approval scope tegwick 2026-10-17 13:36:07 +02:00
  • 40de616e07 docs(key39): record coordinator finalization review tegwick 2026-10-17 13:27:15 +02:00
  • e76d4130f3 KEY-WP-0039-T02: record Platform source-prepared owner returns tegwick 2026-10-17 04:33:43 +02:00
  • 39c475ca07 KEY-WP-0040-T01: record founder-confirmed serial suffix E1D tegwick 2026-10-17 04:22:21 +02:00
  • 258d899a78 Finish KEY-WP-0040: OTP help link and recovery preview accepted live. tegwick 2026-10-17 04:15:22 +02:00
  • 834b0d06a1 Review exact offline checker behavior for browser registration tegwick 2026-10-16 22:08:05 +02:00
  • 3c71226a1a docs: reconcile deployed MFA help and remaining recovery acceptance tegwick 2026-10-16 21:24:41 +02:00
  • 6a4afd8080 Finish KEY-WP-0041: diagnosis page accepted on a live OpenBao login. tegwick 2026-10-15 00:33:09 +02:00
  • 59c1df71e3 Record the live openbao-admin signInDiagnosis flag (KEY-WP-0041-T02). tegwick 2026-10-15 00:25:23 +02:00
  • 3b8d69546b Record live image cdec9dd7 with the sign-in diagnosis page (KEY-WP-0041-T02). tegwick 2026-10-15 00:09:11 +02:00
  • 8c6c071ad9 Record the State Hub ids for KEY-WP-0041. tegwick 2026-10-14 23:46:34 +02:00
  • 44b2434100 Add KEY-WP-0041 for the NK-WP-0051-T02 sign-in diagnosis page. tegwick 2026-10-14 23:45:20 +02:00
  • af3b1b0dfb Add opt-in sign-in diagnosis page and uid/assurance on auth log (NK-WP-0051-T02). tegwick 2026-10-14 23:45:11 +02:00
  • 205a1c0edc Link the MFA challenge to lost-authenticator help. tegwick 2026-10-14 18:29:33 +02:00
  • 61ee563b1f docs(reuse): establish reviewed NetKingdom security capabilities tegwick 2026-10-14 06:39:53 +02:00
  • 1344fc80e5 fix: preserve directory subjects in factor recovery tegwick 2026-10-12 01:23:29 +02:00
  • f8ea591ba4 Sync work-record index tegwick 2026-10-11 23:03:37 +02:00
  • aec060a631 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 23:03:36 +02:00
  • e67cca104a Add KEY-WP-0040: recovery preview defect and OTP prompt help link from attended MFA run tegwick 2026-10-11 23:02:25 +02:00
  • 6398e41dad Sync work-record index after requalification tegwick 2026-10-11 20:48:40 +02:00
  • eeb868ed25 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 20:48:39 +02:00
  • e4dfd047ac Requalify tasks after round-2 founder decisions and fix mislabeled human gates (2026-10-11) tegwick 2026-10-11 20:47:54 +02:00
  • 21c664643b Record verified KEY39 source acceptance and remaining execution prerequisites tegwick 2026-10-11 19:35:51 +02:00
  • e956fd1b52 Refresh work-record index after reviewed JWT source completion tegwick 2026-10-11 18:37:44 +02:00
  • 0f47e0c666 Publish reviewed bounded JWT ready handoff and retained owner history tegwick 2026-10-11 18:31:04 +02:00
  • f60e7419a9 Preserve JWT input refusal and bounded successor acknowledgment tegwick 2026-10-11 17:30:10 +02:00
  • 8764b57939 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 15:47:09 +02:00
  • a46024bf3e Publish reviewed KEY39 lifecycle source and preserve failed review history tegwick 2026-10-11 15:33:14 +02:00
  • aef56bcba1 Bind JWT negative probes to exact claim and cleanup evidence tegwick 2026-10-11 02:21:03 +02:00
  • f97f006ede chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 02:18:34 +02:00
  • 3ceead4903 KEY-WP-0038: record type review closure and 1.1 re-pin tegwick 2026-10-10 15:25:34 +02:00
  • b2762a3d8c chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-10 13:30:10 +02:00
  • c528daa5be Add keycape check-config; reject duplicate clientIds tegwick 2026-10-10 13:28:36 +02:00
  • 5bc4a366b0 chore(consistency): refresh the work-record index tegwick 2026-10-10 13:20:43 +02:00
  • 79b0a9f9c6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-10 13:20:30 +02:00
  • bae9f85160 KEY-WP-0039: probe registration packet and attended negative-probe script tegwick 2026-10-10 13:18:24 +02:00
  • 01b318db87 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-10 12:42:09 +02:00
  • 158f13b871 KEY-WP-0013: record the proposed CCR-2026-0018 disablement sequence tegwick 2026-10-10 12:40:37 +02:00
  • 60384834fe Review oidc-browser-relying-party 1.0 against KeyCape's client field rules tegwick 2026-10-10 12:39:31 +02:00
  • 45a04c14bb chore(consistency): record State Hub IDs for KEY-WP-0039 tegwick 2026-10-10 12:30:17 +02:00
  • fba29a33e6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-10 12:30:12 +02:00
  • ab5cccdcf3 KEY-WP-0038: Forgejo custody path derived by case type; propose KEY-WP-0039 negative-probe tokens tegwick 2026-10-10 12:29:32 +02:00
  • f8ef4d418c chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 23:04:37 +02:00
  • 213b98feb1 KEY-WP-0038-T04 cancelled: entry point moved to net-kingdom NK-WP-0048-T09 tegwick 2026-10-08 23:03:58 +02:00
  • 9fab7912f5 chore(consistency): record State Hub ID for KEY-WP-0038-T04 tegwick 2026-10-08 22:45:23 +02:00
  • 6e0ddd64fa chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 22:45:21 +02:00
  • c737e361ce Declare key-cape.oidc-client-registration; add KEY-WP-0038-T04 entry point tegwick 2026-10-08 22:44:43 +02:00
  • d8f3668a18 KEY-WP-0038-T02: register Forgejo as the first KnownSecurityCase tegwick 2026-10-08 22:17:03 +02:00
  • 9645a0604d chore(consistency): refresh the work-record index tegwick 2026-10-08 21:27:17 +02:00
  • acdc828219 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 21:27:15 +02:00
  • 05e05aa945 KEY-WP-0038-T01 done: founder accepted the Forgejo client request tegwick 2026-10-08 21:26:37 +02:00
  • ee36e1fb45 chore(consistency): refresh the work-record index tegwick 2026-10-08 19:32:54 +02:00
  • 823197a313 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 19:32:52 +02:00
  • d11bf87c2b chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-10-08 19:32:39 +02:00
  • 73d97e3323 KEY-WP-0038-T01: draft the Forgejo OIDC client request packet tegwick 2026-10-08 19:32:00 +02:00
  • c4a8b75884 chore(consistency): refresh the work-record index tegwick 2026-10-08 19:13:31 +02:00
  • 4bd40930fc chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 19:12:44 +02:00
  • ff6890788b Add KEY-WP-0038: Forgejo as a NetKingdom OIDC client tegwick 2026-10-08 19:12:09 +02:00
  • 96fb4eaf02 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-07 16:03:17 +02:00
  • 4672ef5390 Correct the in-pod verify-client cause in the T04 receipt tegwick 2026-10-07 13:57:05 +02:00
  • 6230e1706a chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-07 02:26:49 +02:00
  • e0b5faea52 KEY-WP-0037-T04 done: live issuance verified for secrets-engine-openbao tegwick 2026-10-07 02:26:03 +02:00
  • 5504a9c25c chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-07 02:23:45 +02:00
  • b2e1efcd0e KEY-WP-0037-T03 done: secrets-engine-openbao registered live tegwick 2026-10-07 02:21:59 +02:00
  • e583988599 Link KEY-WP-0037-T03 to the in-bao custody design and approval decision tegwick 2026-10-06 14:29:54 +02:00
  • 7d96ee4a43 Confirm groups and MFA for the secrets-engine-openbao operator reader tegwick 2026-10-06 14:05:37 +02:00
  • 7dab16935a chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-06 13:47:58 +02:00
  • 457854fad5 Record prepared KEY-WP-0037-T03 dependencies and the corrected KV path tegwick 2026-10-06 13:47:31 +02:00
  • e22029e232 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-05 09:39:11 +02:00
  • 1e65bd3f47 chore(consistency): refresh the work-record index tegwick 2026-10-05 09:38:27 +02:00
  • 103102ab7b chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-05 09:31:58 +02:00
  • 5e431eccc5 Record the approved OpenBao custody boundary. tegwick 2026-10-05 09:30:49 +02:00
  • 7e4c76998d Route the OpenBao custody approval to an open decision. tegwick 2026-10-05 02:39:36 +02:00
  • f485d6fe9c Record managed registration and custody work identities tegwick 2026-10-04 11:17:19 +02:00
  • 31ed8bb686 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-04 11:16:47 +02:00
  • 44cc067aa2 Name secrets-engine OpenBao registration and custody owner gates tegwick 2026-10-04 11:15:44 +02:00
  • 672e1faf4b Minor update tegwick 2026-10-03 00:38:23 +02:00
  • 985d8bf686 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-30 12:50:08 +02:00
  • 74064e1391 KEY-WP-0013: all tasks done, status blocked -> finished (CUST-WP-0074) tegwick 2026-09-30 12:49:13 +02:00
  • 1164f65d89 Map explicit Railiance admin directory group for alert acknowledgment tegwick 2026-09-28 10:48:17 +02:00