coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • dd8d5781e3 chore(consistency): register KEY-WP-0025 [auto] tegwick 2026-09-08 09:44:33 +02:00
  • d568b79223 Give the runtime real readiness, graceful shutdown and stated limits tegwick 2026-09-08 09:43:49 +02:00
  • a9296fdf84 chore(consistency): register KEY-WP-0024 [auto] tegwick 2026-09-08 09:00:39 +02:00
  • a0f3cac122 Wire tenant_roles as explicit opt-in configuration tegwick 2026-09-08 08:59:40 +02:00
  • 01551d9b0a chore(consistency): register KEY-WP-0023 [auto] tegwick 2026-09-08 08:55:52 +02:00
  • e729ad4c28 Prove the migration against live directories and fix what that surfaced tegwick 2026-09-08 00:29:34 +02:00
  • 9819250851 chore(consistency): register KEY-WP-0022 [auto] tegwick 2026-09-07 23:32:51 +02:00
  • 7534552754 Make the replacement harness runnable and target a live issuer tegwick 2026-09-07 23:32:11 +02:00
  • ebc48e31ae chore(consistency): register KEY-WP-0021 [auto] tegwick 2026-09-07 23:23:38 +02:00
  • 21acb5cdd6 Make snapshot attribute validation enforce a real rule tegwick 2026-09-07 23:22:55 +02:00
  • f366df814a chore(consistency): register KEY-WP-0020 and refresh work records [auto] tegwick 2026-09-07 13:49:40 +02:00
  • e9fc8544ab Make the Keycloak transform preserve or name every policy field tegwick 2026-09-07 13:48:48 +02:00
  • 8707d375a2 Record what the consolidated verifier's tests actually establish tegwick 2026-09-07 09:05:16 +02:00
  • 2be6c73d99 chore(consistency): sync KEY-WP-0019 completion [auto] tegwick 2026-09-07 09:02:05 +02:00
  • ec85ad93a4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 09:01:53 +02:00
  • 3ec8404c87 Move the caller verifier onto internal/jose tegwick 2026-09-07 09:01:16 +02:00
  • 8c1a3e052c chore(consistency): register KEY-WP-0019 [auto] tegwick 2026-09-07 08:52:28 +02:00
  • d4134ee91a chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 08:52:13 +02:00
  • 91e3d50907 Verify upstream Authelia ID tokens tegwick 2026-09-07 08:51:42 +02:00
  • 7d0f6d67a6 chore(consistency): register KEY-WP-0018 and refresh work records [auto] tegwick 2026-09-07 08:47:00 +02:00
  • f7dd51b8d2 Make the LLDAP export report its own completeness tegwick 2026-09-07 08:45:50 +02:00
  • 7fe5bccc7c chore(consistency): register KEY-WP-0017 and ADHOC-2026-09-07 [auto] tegwick 2026-09-07 00:23:58 +02:00
  • a770ac67d0 Reconcile the canonical model and discovery with the runtime tegwick 2026-09-07 00:22:49 +02:00
  • 0d7e2f6b41 Document the authorization-code bindings for relying parties tegwick 2026-09-07 00:17:56 +02:00
  • 2e78648fb2 chore(consistency): register KEY-WP-0016 and refresh work records [auto] tegwick 2026-09-06 22:44:55 +02:00
  • 139b6ff351 Harden the authorization-code grant and UserInfo verification tegwick 2026-09-06 22:43:47 +02:00
  • 217223b4d1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-06 22:31:08 +02:00
  • 7a6666d1f9 Align approval registrations to the tenant:platform decision tegwick 2026-09-06 22:30:32 +02:00
  • 519e4d8ef1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-06 20:33:38 +02:00
  • da7bc31d45 Document tenant claim ownership and prove registration binding tegwick 2026-09-06 20:33:06 +02:00
  • 30fa8570aa Document actual capabilities and assess scope against intent tegwick 2026-09-05 01:27:16 +02:00
  • b989de4e90 Add native verified login and service-token commands tegwick 2026-09-05 01:08:58 +02:00
  • 66df5fcf07 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-05 01:07:12 +02:00
  • 403904b901 Add bounded resource audiences and enforce browser scope grants tegwick 2026-09-05 00:41:17 +02:00
  • b8dda4115a repo.work.assign_missing_identifiers repo-manager 2026-09-01 01:36:20 +02:00
  • 3ed3a391d6 docs: close canonical UserInfo repair tegwick 2026-09-01 01:36:12 +02:00
  • 153258b9d3 Fix UserInfo canonical subject resolution tegwick 2026-08-31 23:41:29 +02:00
  • 49dabb2d5c Refresh work-record index tegwick 2026-08-29 02:45:20 +02:00
  • 608c5d20cf repo.work.create_intake KEY-IN-0001 repo-manager 2026-08-28 23:01:53 +02:00
  • 892149a7b5 Point layering note at the published standard tegwick 2026-08-28 21:21:07 +02:00
  • 1299ef60a3 Note NetKingdom layering review in INTENT tegwick 2026-08-28 20:33:42 +02:00
  • 270a065383 fix(workplans): adopt ADR-007 derived identifiers for unregistered records codex 2026-08-25 20:13:23 +02:00
  • 23ab8397b6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 19:53:11 +02:00
  • 5c730240af docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:21:16 +02:00
  • 93704fd242 ops: restart identity provisioner during keycape rotation tegwick 2026-08-23 14:42:44 +02:00
  • 6a996bd71e security: rotate exposed KeyCape credentials tegwick 2026-08-23 14:26:36 +02:00
  • c9fd9b1f9a chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:24:54 +02:00
  • bb6dc8d7fc chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 13:57:59 +02:00
  • a9dce795b7 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:57:58 +02:00
  • b7b4985baa Track KeyCape live secret exposure recovery tegwick 2026-08-23 13:56:09 +02:00
  • d150be1097 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 13:19:35 +02:00
  • 48fb556ce8 Use canonical workplan ID for callback admission tegwick 2026-08-23 13:16:46 +02:00
  • f5cf77fa0c Admit operator-tunneled OpenBao callback tegwick 2026-08-23 13:16:21 +02:00
  • 34fadae1c1 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 13:13:38 +02:00
  • 56adce7652 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:13:37 +02:00
  • efce3e9331 Implement KeyCape provider and service identity contracts tegwick 2026-08-23 13:10:13 +02:00
  • cdfb046b80 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:00:52 +02:00
  • 0a7cc7e9e9 Refresh WORK-RECORDS after KEY-WP-0008 closeout tegwick 2026-08-16 01:06:27 +02:00
  • bd90a0e82c chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-16 01:06:09 +02:00
  • b6af6c5268 Finish KEY-WP-0008: registration handoff and client MFA isolation tegwick 2026-08-16 01:05:27 +02:00
  • fff9e39478 docs: point at RMASTER-WP-0019 after master prefix rename tegwick 2026-08-14 14:29:19 +02:00
  • 3bef507cb8 KEY-WP-0008: honor per-client mfaRequired and acr_values step-up tegwick 2026-08-09 22:42:51 +02:00
  • 8e976bc60f chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-09 21:56:59 +02:00
  • 460dcbce0d chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-09 20:52:35 +02:00
  • cd33e118c0 Add coulomb-social public OIDC client to KeyCape dev-config tegwick 2026-08-09 01:50:52 +02:00
  • 09aafdb9c6 Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) tegwick 2026-07-29 23:48:58 +02:00
  • a6ff5384b1 Finish portal OIDC integration tegwick 2026-07-29 22:59:38 +02:00
  • 6b32fb1384 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-29 22:55:54 +02:00
  • 253a5bac77 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-29 22:15:20 +02:00
  • 2465481e3c Complete Binky tenant onboarding tegwick 2026-07-29 22:13:53 +02:00
  • abd9e6fa2b Record Binky MFA login acceptance tegwick 2026-07-29 22:05:18 +02:00
  • 72b0eb404c Record platform-root authorization fix tegwick 2026-07-29 21:33:37 +02:00
  • 90a20783e5 Map platform-root group to platform operator tegwick 2026-07-29 21:30:56 +02:00
  • 41d2e1d1f6 Record Binky password handoff readiness tegwick 2026-07-28 17:56:14 +02:00
  • 49a8992d6e Advance Binky human onboarding tegwick 2026-07-28 16:49:27 +02:00
  • 2bfd115f11 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-28 16:48:13 +02:00
  • 070c38f447 Record suspended identity enforcement tegwick 2026-07-28 01:33:24 +02:00
  • 909bb327fc Deny suspended directory identities tegwick 2026-07-28 01:23:22 +02:00
  • 76da0237ff Bind portal OIDC workplan to State Hub tegwick 2026-07-28 00:43:56 +02:00
  • 806bcf18d4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-28 00:40:13 +02:00
  • e8b4eded88 Map explicit tenant groups into OIDC claims tegwick 2026-07-28 00:34:19 +02:00
  • 993a4dd589 Register user-engine portal OIDC client tegwick 2026-07-28 00:06:38 +02:00
  • 401ab9ca55 Refresh Binky onboarding records tegwick 2026-07-27 22:34:21 +02:00
  • c9459b29fc chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 22:31:59 +02:00
  • 1cd137cd9d Route Binky onboarding through user portal tegwick 2026-07-27 22:31:43 +02:00
  • 3d108adeb8 Refresh work record index tegwick 2026-07-27 21:13:44 +02:00
  • 3def97b087 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:53:36 +02:00
  • e54bcd9a40 Advance Binky identity onboarding tegwick 2026-07-27 20:39:13 +02:00
  • 0fa9ec9673 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:18:33 +02:00
  • 881fffc079 Complete KeyCape service-token rollout tegwick 2026-07-27 20:17:55 +02:00
  • f4a2f7eb1e chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:03:36 +02:00
  • e4464278e7 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 20:03:31 +02:00
  • e877d2752d Implement KeyCape service-token issuance tegwick 2026-07-27 20:03:07 +02:00
  • 519f0772d2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-27 19:39:07 +02:00
  • 86e6c083f7 Define Qonto runtime identity contract tegwick 2026-07-26 13:34:56 +02:00
  • 739b1f5c72 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-26 13:09:56 +02:00
  • a32512c6de chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-26 11:03:32 +02:00
  • 9ce84b915f chore(consistency): sync WORK-RECORDS.md for KEY-WP-0005 closure [auto] tegwick 2026-07-24 00:18:50 +02:00
  • f4da182a1f chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-24 00:18:41 +02:00
  • 44da5f5f99 KEY-WP-0005-T02-T03: cached tenant_roles claim, close workplan tegwick 2026-07-24 00:18:17 +02:00