7 commits

Author	SHA1	Message	Date
tegwick	3b14469afb	Retire bao.coulomb.social callbacks from the KeyCape openbao-admin client ... The name was retired on 2026-09-15. Remove both public UI callbacks from the code-defined client (openbao-client-config.py, create-secrets.sh), stop probing them in verify-openbao-client.sh, and fail verification in openbao-client-config.py and verify-t07.sh if either is registered again. The CLI and operator-tunneled 127.0.0.1:18200 callbacks remain. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 299762@bnt-lap001 Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e	2026-09-23 19:41:35 +02:00
tegwick	61aeafef71	feat(NK-WP-0032): admit OpenBao operator loopback callback ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4	2026-08-23 14:01:57 +02:00
tegwick	efbdab4652	feat(keycape): add netkingdom OIDC mount and bao.coulomb.social callbacks ... Configure OpenBao auth for both netkingdom and keycape mounts with browser redirect URIs; update verify scripts and runtime architecture notes.	2026-06-18 01:23:02 +02:00
tegwick	8a3d7a8aff	chore: make T06 verify scripts executable (chmod +x for check-mfa and keycape-verify used in dry-run evidence)	2026-06-03 02:03:03 +02:00
tegwick	cac59a37c1	openbao and itsec tooling integration	2026-05-27 18:56:30 +02:00
tegwick	a47c707a9a	Verify KeyCape discovery without container wget	2026-05-26 02:47:01 +02:00
tegwick	59c924bc18	Patch KeyCape OpenBao client without bootstrap secrets	2026-05-26 02:36:04 +02:00