..
adr
feat: implement T01-T04 — Go module, canonical model, LDAP validator, error taxonomy
2026-03-13 01:27:54 +01:00
evidence
Record verified KEY39 source acceptance and remaining execution prerequisites
2026-10-11 19:35:51 +02:00
proposals
KEY-WP-0043: per-run agent identity assessment and proposed workplan
2026-10-24 23:49:33 +02:00
reviews
Publish reviewed bounded JWT ready handoff and retained owner history
2026-10-11 18:31:04 +02:00
approval-clients-deployment.patch.yaml
docs(keycape): prepare pinned approval-client rollout and recovery
2026-09-08 17:03:59 +02:00
approval-clients-rollout.md
docs: close live approval service registration gate
2026-09-09 02:18:12 +02:00
approval-engine-auth-contract.md
Register the approver client now its callback exists
2026-09-10 22:50:13 +02:00
approval-engine-provisioning-request.yaml
Register the approver client now its callback exists
2026-09-10 22:50:13 +02:00
audit-core-sender-package.md
KEY-WP-0044: traceparent correlation task and audit-core intake package (NK-WP-0055-T11)
2026-10-27 23:28:54 +01:00
authorization-code-bindings.md
Document the authorization-code bindings for relying parties
2026-09-07 00:17:56 +02:00
credential-renewal-release-2026-09-13.md
Record provider credential renewal release and remaining owner handoff
2026-09-13 14:27:35 +02:00
current-token-client.md
Bind online human ID tokens to the exact current access grant
2026-10-18 12:13:56 +02:00
enrollment-assurance-release-2026-09-13.md
Retain provider acceptance CI and synchronized assurance task binding
2026-09-13 17:06:32 +02:00
forgejo-oidc-client-request.yaml
KEY-WP-0038: Forgejo custody path derived by case type; propose KEY-WP-0039 negative-probe tokens
2026-10-10 12:29:32 +02:00
native-authentication.md
Ship the live-registration check both blocked tasks depend on
2026-09-08 14:30:43 +02:00
nk49-isolated-restore-owner-acceptance-2026-10-27.md
Record KeyCape owner acceptance of NK-WP-0049 isolated restore (issuer side)
2026-10-27 21:40:11 +01:00
offline-checker-owner-review-2026-10-16.json
Review exact offline checker behavior for browser registration
2026-10-16 22:08:05 +02:00
offline-checker-owner-review-2026-10-16.md
Review exact offline checker behavior for browser registration
2026-10-16 22:08:05 +02:00
oidc-browser-relying-party-type-review.md
Review oidc-browser-relying-party 1.0 against KeyCape's client field rules
2026-10-10 12:39:31 +02:00
online-token-status.md
Bind online human ID tokens to the exact current access grant
2026-10-18 12:13:56 +02:00
openbao-negative-probe-clients.yaml
Publish reviewed KEY39 lifecycle source and preserve failed review history
2026-10-11 15:33:14 +02:00
openbao-negative-probe-session-proposal.md
Publish reviewed KEY39 lifecycle source and preserve failed review history
2026-10-11 15:33:14 +02:00
openbao-negative-token-producer-decision.json
Publish reviewed bounded JWT ready handoff and retained owner history
2026-10-11 18:31:04 +02:00
openbao-negative-token-producer-decision.md
Publish reviewed bounded JWT ready handoff and retained owner history
2026-10-11 18:31:04 +02:00
openbao-service-auth-contract.md
Correct platform infrastructure client tenant bindings
2026-09-27 16:43:31 +02:00
operations.md
KEY-WP-0046: directory bind password from KEYCAPE_LLDAP_BIND_PW
2026-10-31 10:24:22 +01:00
optional-mfa.md
Record deployed P06 policy and completed platform acceptance
2026-09-14 00:10:25 +02:00
qonto-runtime-identity-contract.md
Define Qonto runtime identity contract
2026-07-26 13:34:56 +02:00
secrets-engine-openbao-owner-packet.md
Confirm groups and MFA for the secrets-engine-openbao operator reader
2026-10-06 14:05:37 +02:00
sitting-requester-registration.json
Register informed-decision-sitting-requester as create-only.
2026-09-15 20:08:07 +02:00
t03-requester-registration.json
Register create-only Secrets Engine approval requester
2026-09-14 02:47:31 +02:00
t03-requester-registration.md
Register create-only Secrets Engine approval requester
2026-09-14 02:47:31 +02:00
tenant-claim-contract.md
Correct platform infrastructure client tenant bindings
2026-09-27 16:43:31 +02:00
upstream-issuer-proof.md
docs(identity): record verified live upstream issuer and completed cleanup
2026-09-08 23:50:54 +02:00