coulomb/mail-address-semantics
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
60 commits 1 branch 0 tags 1.2 MiB
Commit graph

8 commits

Author SHA1 Message Date
tegwick
cca58d41fb MAS-WP-0005-T12: gateway reads trusted A-R verdict; ticket service replies only on DMARC pass 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 252470@bnt-lap001
Assistant-Session: ad628c8f-4be2-4979-94c9-76c7ed6f8241
 2026-10-18 22:40:30 +02:00
tegwick
ab3346d187 MAS-WP-0005-T11: OpenDKIM+OpenDMARC milters; forged A-R stripped by header_checks 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 252470@bnt-lap001
Assistant-Session: ad628c8f-4be2-4979-94c9-76c7ed6f8241
 2026-10-18 22:38:43 +02:00
tegwick
d4585eb542 MAS-WP-0003-T06: lifetime cap on sent replies (300), discard Postfix bounces 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 252470@bnt-lap001
Assistant-Session: ad628c8f-4be2-4979-94c9-76c7ed6f8241
 2026-10-18 13:32:32 +02:00
tegwick
f782de3320 MAS-WP-0003: explicit ExternalSecret target metadata (reject-secret-last-applied) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 252470@bnt-lap001
Assistant-Session: ad628c8f-4be2-4979-94c9-76c7ed6f8241
 2026-10-18 13:08:03 +02:00
tegwick
2e9a0742a5 MAS-WP-0003: TEM relay login via ExternalSecret (ops-mason MASON-WP-0014) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 252470@bnt-lap001
Assistant-Session: ad628c8f-4be2-4979-94c9-76c7ed6f8241
 2026-10-18 12:27:17 +02:00
tegwick
a80f858643 MAS-WP-0003-T03: optional Scaleway TEM relay for replies; unchroot Postfix 
Port 25 outbound is blocked on railiance01, so replies need an authenticated
submission relay. Enabled only when Secret mas-relay is mounted; otherwise
non-local mail is refused at RCPT time instead of queueing.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 252470@bnt-lap001
Assistant-Session: ad628c8f-4be2-4979-94c9-76c7ed6f8241
 2026-10-18 11:11:58 +02:00
tegwick
6518044633 MAS-WP-0003-T01/T02: fix Postfix relay restrictions, deploy live MX + statute 
smtpd refused to start without a reject-class entry in
smtpd_relay_restrictions, and ignored access-map results for !/% local-parts
without allow_untrusted_routing. Relay regexp now permits @DOMAIN only and the
list ends in reject. Deployed to railiance01 namespace mas and verified live.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 252470@bnt-lap001
Assistant-Session: ad628c8f-4be2-4979-94c9-76c7ed6f8241
 2026-10-18 10:34:16 +02:00
tegwick
e517f2b81a Add railiance deploy manifests, mas.coulomb.social statute example, probe JSONL log + bind option 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1370019@bnt-lap001
Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
 2026-10-11 20:22:37 +02:00