coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 9cb950752f Declare key-cape's layer as Tooling in INTENT.md frontmatter. main tegwick 2026-09-21 12:36:03 +02:00
  • 1620ce2edd Register informed-decision-sitting-requester as create-only. tegwick 2026-09-15 20:08:07 +02:00
  • f67d98ff63 Classify open workplans with flavor (CUST-WP-0072). tegwick 2026-09-14 15:50:43 +02:00
  • b854e1ed0c Fix missing live Informed Decision browser registration tegwick 2026-09-14 02:54:52 +02:00
  • 651625c547 Register create-only Secrets Engine approval requester tegwick 2026-09-14 02:47:31 +02:00
  • 6bcc2a5919 Synchronize session work records tegwick 2026-09-14 00:16:31 +02:00
  • 672da6ff7d chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-14 00:11:48 +02:00
  • e17b3f4631 Record deployed P06 policy and completed platform acceptance tegwick 2026-09-14 00:10:25 +02:00
  • e0b3c25f06 Implement scoped P06 authentication policy and guarded optional onboarding tegwick 2026-09-14 00:00:05 +02:00
  • aa709fb854 Implement P05 checked services and safe selected delivery recovery tegwick 2026-09-13 22:11:49 +02:00
  • 187c49abe5 Pin final P04 release and native ownership-lock evidence tegwick 2026-09-13 21:30:50 +02:00
  • 63b3070853 Refuse multi-owner factors and lock ownership during recovery tegwick 2026-09-13 21:21:24 +02:00
  • 30cd99cad1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 21:19:55 +02:00
  • a10c2f7f98 Record completed P04 recovery rollout and acceptance tegwick 2026-09-13 21:19:13 +02:00
  • d15f4dde0b Reconcile recovery by support reference and bound provider lookup tegwick 2026-09-13 21:11:03 +02:00
  • cb51584f58 Connect P04 audited recovery to fresh-MFA platform browser flow tegwick 2026-09-13 21:05:33 +02:00
  • 317d897b85 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 17:31:15 +02:00
  • 4d893ed3c2 Verify factor identity again after recovery mutation tegwick 2026-09-13 17:30:23 +02:00
  • 3b7df9047e Implement audited lost-factor recovery and track remaining P04 acceptance tegwick 2026-09-13 17:28:45 +02:00
  • 244e7e096f chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 17:25:26 +02:00
  • 502a2d5c56 Retain provider acceptance CI and synchronized assurance task binding tegwick 2026-09-13 17:06:32 +02:00
  • 7f3a6da042 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 17:05:13 +02:00
  • ecca6cb4ba Record verified enrollment assurance release and automate provider contract tests tegwick 2026-09-13 17:03:44 +02:00
  • 113f3a6296 Verify reader scope before accepting absence of enrolled factors tegwick 2026-09-13 16:59:09 +02:00
  • 122a0d1369 Require confirmed enrollment and genuine OTP evidence for MFA tegwick 2026-09-13 16:37:08 +02:00
  • 3a36f1a507 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 16:26:53 +02:00
  • 74b4f7f1bc Establish scoped KeyCape factor custody and verified automatic renewal tegwick 2026-09-13 16:25:33 +02:00
  • fd34ac98f0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 14:28:27 +02:00
  • 78f5a718e9 Record provider credential renewal release and remaining owner handoff tegwick 2026-09-13 14:27:35 +02:00
  • f4d8e44f0b chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 14:24:50 +02:00
  • 632b1f1376 Support provider credential renewal and reject unsuccessful OTP validation tegwick 2026-09-13 14:23:24 +02:00
  • 85f5deaf4a Support opt-in MFA per browser client with authoritative enrollment checks tegwick 2026-09-13 00:28:09 +02:00
  • 9a226e9cd0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 00:27:39 +02:00
  • ac8ed65203 Support opt-in MFA per browser client with authoritative enrollment checks tegwick 2026-09-13 00:27:28 +02:00
  • e1e292919a Record generated State Hub recovery task bindings tegwick 2026-09-12 17:10:41 +02:00
  • 51f2bad145 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 17:10:02 +02:00
  • 62a86a4ba0 Record live account recovery and browser sign-out verification tegwick 2026-09-12 10:50:35 +02:00
  • 4d8b8fe934 Allow registered provider redirects after sign-out confirmation tegwick 2026-09-12 10:47:33 +02:00
  • 91efb6d988 Preserve browser Origin on the confirmed sign-out form tegwick 2026-09-12 10:43:32 +02:00
  • 074c2ce498 Add central login recovery and confirmed shared sign-out tegwick 2026-09-12 10:34:41 +02:00
  • 89694ad6df chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 03:20:30 +02:00
  • 22788787c1 Record attended fresh-login rollout and verification tegwick 2026-09-12 03:12:45 +02:00
  • d68389861e chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 02:55:27 +02:00
  • 0647301c03 Record published fresh-login image and attended rollout gate tegwick 2026-09-12 02:53:55 +02:00
  • 7695a064bc chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 02:45:56 +02:00
  • 8d4336e944 Forward fresh-login requirements to the authentication provider tegwick 2026-09-12 02:43:31 +02:00
  • 139994cfac chore(consistency): register KEY-WP-0032 and refresh records [auto] tegwick 2026-09-10 23:07:49 +02:00
  • c09937dcb4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-10 23:07:35 +02:00
  • b66ce13e4e Close G10, the last of the ten assessment gaps tegwick 2026-09-10 23:06:57 +02:00
  • f247d3529d Close T04 and pin the single route by which a principal becomes human tegwick 2026-09-10 23:05:16 +02:00
  • 11bd9fb2bb chore(consistency): refresh work records [auto] tegwick 2026-09-10 22:51:04 +02:00
  • 2957b02d27 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-10 22:50:51 +02:00
  • c9bb7fac58 Register the approver client now its callback exists tegwick 2026-09-10 22:50:13 +02:00
  • f9812ab3b2 Carry approval-engine's store-isolation limit into the tenant contract tegwick 2026-09-10 13:44:02 +02:00
  • 324b5e056d Record the owner decision: Qonto rotation deferred, not refused tegwick 2026-09-10 09:15:48 +02:00
  • ed67780da8 Record the rotation authority answer and why it was not scheduled tegwick 2026-09-10 08:10:34 +02:00
  • 204bb229d6 chore(consistency): register KEY-WP-0031 [auto] tegwick 2026-09-10 08:07:09 +02:00
  • f2c9aa45a8 Split the gate-house ruling work into its own workplan tegwick 2026-09-10 08:05:49 +02:00
  • 7f6fdd00e6 Record the answered rotation authority; T04 now waits on a decision tegwick 2026-09-10 08:05:15 +02:00
  • 63d646b594 Carry the tenant claim's provenance, and correct a guard the ruling voided tegwick 2026-09-10 07:58:29 +02:00
  • d29032d6c4 Record the operator withdrawal and the gate-house tenant conditions tegwick 2026-09-09 23:30:09 +02:00
  • 5f516a0fbb Make the static-registration precondition a checked condition tegwick 2026-09-09 23:23:48 +02:00
  • a4e2751ab5 Make the registration-bound tenant caveat a condition, not a paragraph tegwick 2026-09-09 23:23:41 +02:00
  • f12d24e079 Name the baseline the reassessment actually covers tegwick 2026-09-09 20:11:56 +02:00
  • 66ca76cb9c Name the third state SCOPE had no vocabulary for tegwick 2026-09-09 20:09:01 +02:00
  • 06f39906e9 chore(consistency): register KEY-WP-0029 [auto] tegwick 2026-09-09 20:07:24 +02:00
  • d6ecb2b7aa Reassess SCOPE against the current revision tegwick 2026-09-09 20:06:38 +02:00
  • 7a73352368 Record the custody owner's confirmations and guard a receipt against misreading tegwick 2026-09-09 20:05:40 +02:00
  • 5ae80d341f Record the two unreleased fail-closed startup changes for the rollout tegwick 2026-09-09 16:41:38 +02:00
  • 04931387f5 Record the stale-claim correction alongside the others tegwick 2026-09-09 16:41:10 +02:00
  • cb25ec2a8d Correct the T02 claim-contract record: the attended run already happened tegwick 2026-09-09 16:38:20 +02:00
  • b9a251b16b chore(consistency): refresh work records [auto] tegwick 2026-09-09 16:38:13 +02:00
  • 1dc11b8448 Record live custody admission and re-verify the new rule against it tegwick 2026-09-09 14:44:38 +02:00
  • 74b35b6107 Reject service-identity fields a browser client silently ignores tegwick 2026-09-09 14:42:26 +02:00
  • 329e48f64a Let a human token carry the zone it is issued into, without relabelling anyone tegwick 2026-09-09 14:40:36 +02:00
  • a73da29093 Answer the approver-client questions, and fix what checking them turned up tegwick 2026-09-09 14:25:38 +02:00
  • 0f5535eed9 docs: refresh work record index after verifier acceptance tegwick 2026-09-09 02:28:33 +02:00
  • 9a78f7e7f0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-09 02:20:39 +02:00
  • 3a4fd38c00 docs: close live approval service registration gate tegwick 2026-09-09 02:18:12 +02:00
  • cf23469ead Consume verified owner configuration pin before custody rollout tegwick 2026-09-09 00:40:23 +02:00
  • e30ba7b3c0 docs(records): attach issuer proof to the receiving admission task tegwick 2026-09-09 00:07:01 +02:00
  • 41f6916a5d docs(identity): record verified live upstream issuer and completed cleanup tegwick 2026-09-08 23:50:54 +02:00
  • 7ecc78f410 chore(records): retain issuer probe task identity and index tegwick 2026-09-08 23:26:46 +02:00
  • c3983facd2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-08 23:25:28 +02:00
  • 1b9793ffed docs(oidc): pin tested issuer probe and bounded owner execution packet tegwick 2026-09-08 23:18:11 +02:00
  • 6f33abddcf feat(oidc): prepare one-shot upstream issuer proof without token disclosure tegwick 2026-09-08 23:14:46 +02:00
  • 5c7db26b7c chore(records): index verifier completion and human-client residual tegwick 2026-09-08 20:35:53 +02:00
  • bb507e993e chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-08 20:24:00 +02:00
  • e147364721 repo.work.assign_missing_identifiers repo-manager 2026-09-08 17:04:19 +02:00
  • e534e1d5e8 docs(keycape): prepare pinned approval-client rollout and recovery tegwick 2026-09-08 17:03:59 +02:00
  • dcebd46fa6 Require typed issuer refusals in live registration verification tegwick 2026-09-08 16:46:02 +02:00
  • 471465df22 Record the two ops-warden catalog corrections tegwick 2026-09-08 14:49:01 +02:00
  • 2a8735173b Ship the live-registration check both blocked tasks depend on tegwick 2026-09-08 14:30:43 +02:00
  • 54b7687903 Record the rollout-precondition handoff to railiance-platform tegwick 2026-09-08 14:02:37 +02:00
  • 044830da79 chore(consistency): register KEY-WP-0027 [auto] tegwick 2026-09-08 14:00:51 +02:00
  • 7dda967c27 Establish the live state and find a rollout precondition for G10 tegwick 2026-09-08 11:41:42 +02:00
  • 64942639ad chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-08 10:23:26 +02:00
  • 7c9ed852ff Close the KEY-WP-0009 handoff gap and deliver the two blocked admissions tegwick 2026-09-08 10:22:52 +02:00
  • 2ab70924a1 chore(consistency): register KEY-WP-0026 [auto] tegwick 2026-09-08 09:52:42 +02:00
  • 3b72834bca Reconcile packaging, bootstrap and migration credential handling tegwick 2026-09-08 09:51:59 +02:00