NK-WP-0056-T04 done: svc-privacyidea written through from OpenBao; all four binds in platform custody

Browse source

Founder-run under CCR-2026-0055: setup, verify and realm_bootstrap.py
--rotate-bind --from-openbao with the admin MFA proof. The first apply's check
got a code that was not admin's, so both MFA prompts now name the user.
Custody re-sealed after setup.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 896183@bnt-lap001
Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2

...

This commit is contained in:

tegwick 2026-10-31 11:19:21 +01:00

parent c28651e55b

commit ad7d1cdf49

19 changed files with 67 additions and 9 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

BIN

sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age

View file

Binary file not shown.