171 commits

Author	SHA1	Message	Date
tegwick	8ae5150d4d	docs(recovery): accept retained token material and audit continuity ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 21:14:23 +02:00
tegwick	1ab5d53bd7	Prepare isolated privacyIDEA token and audit recovery checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 21:00:36 +02:00
tegwick	0e298813c7	Accept actual isolated LLDAP recovery and clear directory prerequisites ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 20:40:14 +02:00
tegwick	d5484bb90a	Prepare native isolated directory recovery and offline service images ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 20:33:57 +02:00
tegwick	31f483966c	Accept independent outage recovery and Storage Share guide publication ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 20:04:44 +02:00
tegwick	fbdd62b7ed	Fix private recovery prompts on nonseekable terminals ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 19:56:06 +02:00
tegwick	1764f40b43	Prepare independent outage recovery and Storage Share documentation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 17:59:18 +02:00
tegwick	cc2dd01f40	ops(recovery): verify complete hardened recurring backup service ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 09:41:02 +02:00
tegwick	1de6deaf0a	ops(recovery): verify full archive recovery and activate protected backup timers ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 09:38:31 +02:00
tegwick	17a8fa1495	feat(recovery): verify scoped delivery and create first full offsite bundle ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 09:21:55 +02:00
tegwick	72c598e7de	fix(recovery): distinguish malformed paths from outside-folder denial ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 07:48:36 +02:00
tegwick	a17aa7edc1	fix(recovery): bind admitted host and record live provider scope approval ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 07:44:36 +02:00
tegwick	994d11c869	feat(recovery): prepare full identity backup and bootstrap handoff ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 01:37:11 +02:00
tegwick	dca999222f	Record off-host database recovery and prepare identity backup coverage ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 00:32:50 +02:00
tegwick	a1939a7d06	Prepare bounded off-host privacyIDEA recovery drill ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 00:09:13 +02:00
tegwick	c262470089	Inventory off-host recovery assets through existing bounded backup routes ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 23:58:41 +02:00
tegwick	d9557ba90e	Harden remaining bootstrap custody callers and prepare isolated recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 22:57:14 +02:00
tegwick	b91bf46e82	Finish NK-WP-0022 with verified CoulombCore cluster retirement ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 22:10:34 +02:00
tegwick	341344a126	Prepare CoulombCore retirement and reconcile conditional recovery gate ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:54:35 +02:00
tegwick	c21ab4ccda	Checkpoint live hourly observation before independent acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:46:32 +02:00
tegwick	bd1bed731f	Register hourly cadence receiver and deploy verified durable Qonto collector ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:43:38 +02:00
tegwick	1ae0fe337a	Record approved hourly runtime rollout and native verification ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 20:57:08 +02:00
tegwick	2d0681f361	Adopt shared hourly coordination frame and prepare guarded runtime patches ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 20:45:06 +02:00
tegwick	730e06dfe2	Revalidate cadence sources and prepare operational adoption gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:55:00 +02:00
tegwick	311620bbdb	Complete NK-WP-0031 with audit-core freshness adoption evidence ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:29:41 +02:00
tegwick	9442858535	Complete NK-WP-0051 with attended member and refusal evidence ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:23:19 +02:00
tegwick	c19eabc4ae	Accept the account-site session lines (NK-WP-0051-T03 done). ... Records the user-engine digest and that Authelia's authentication_level is not assurance, since KeyCape checks the one-time code. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 05:22:52 +02:00
tegwick	deedca52a4	Accept the KeyCape sign-in diagnosis page (NK-WP-0051-T02 done). ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 00:33:07 +02:00
tegwick	39b04113e5	Record the live openbao-admin signInDiagnosis flag (NK-WP-0051-T02). ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 00:25:20 +02:00
tegwick	916bc7d5b8	Roll KeyCape to cdec9dd7 with the sign-in diagnosis page (NK-WP-0051-T02). ... Founder-run rollout: check-config valid, diff image-only, dry-run passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 00:09:12 +02:00
tegwick	cb634be39b	Record NK-WP-0051 owner implementations and fix the assurance source. ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:53:38 +02:00
tegwick	106d97f4a8	Write the sign-in diagnosis contract (NK-WP-0051-T01). ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:40:25 +02:00
tegwick	4dffe2fe7a	fix: preserve resolver configuration during attended password cutover ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 01:52:37 +02:00
tegwick	ab25dde80d	security: repair LDAP group callers and fail incomplete T07 acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 01:17:35 +02:00
tegwick	84c5dbeec8	security: retire unsafe legacy LDAP lifecycle callers ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 00:08:42 +02:00
tegwick	276b95f6ba	security: reject Playwright audience and delivery alias collisions ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:44:41 +02:00
tegwick	eba6e1fdbb	security: bind Playwright activation and recovery to exact issuer state ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:39:58 +02:00
tegwick	5dd74dfbdf	security: prepare scoped Playwright consumer registrations and owner delivery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:13:48 +02:00
tegwick	30f0d27840	security: preserve realm configuration and remove shell credential evaluation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 22:47:24 +02:00
tegwick	96feef46ab	security: replace retired MFA diagnostic credential discovery with scoped checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 22:24:35 +02:00
tegwick	8f808577d6	fix(security): constrain SOPS writes and custody argument handoff ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:03:24 +02:00
tegwick	19a1c75d30	fix(security): make admin bootstrap private and non-overwriting ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 15:02:15 +02:00
tegwick	6ae4708ea0	fix(security): keep rotation credentials out of command output ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:54:10 +02:00
tegwick	681c5b0ea1	fix: decrypt SOPS through explicit custody into private output ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:08:35 +02:00
tegwick	4cf26a9bc8	fix: make custody input explicit and remove partial decryptions ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 10:53:30 +02:00
tegwick	b97f9f616f	fix: separate bootstrap encryption from private root custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 09:41:08 +02:00
tegwick	96eb40c695	Preserve October 10 owner decision source packets ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:46:21 +02:00
tegwick	7ceac4372d	Publish reviewed bounded JWT ready handoff and retained owner history ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:31:04 +02:00
tegwick	bf6a44db6d	Bound JWT private input and gate native effects on public health ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 17:30:10 +02:00
tegwick	dfc357eb8a	Publish reviewed KEY39 lifecycle source and preserve failed review history ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 15:33:14 +02:00