7 commits

Author	SHA1	Message	Date
tegwick	3b14469afb	Retire bao.coulomb.social callbacks from the KeyCape openbao-admin client ... The name was retired on 2026-09-15. Remove both public UI callbacks from the code-defined client (openbao-client-config.py, create-secrets.sh), stop probing them in verify-openbao-client.sh, and fail verification in openbao-client-config.py and verify-t07.sh if either is registered again. The CLI and operator-tunneled 127.0.0.1:18200 callbacks remain. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 299762@bnt-lap001 Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e	2026-09-23 19:41:35 +02:00
tegwick	ad9979b159	Add contained issuer-only configuration check and revision-guarded pin ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 00:23:21 +02:00
tegwick	61aeafef71	feat(NK-WP-0032): admit OpenBao operator loopback callback ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4	2026-08-23 14:01:57 +02:00
tegwick	11a14648c4	Register rapp-qonto KeyCape client	2026-07-27 20:17:56 +02:00
tegwick	efbdab4652	feat(keycape): add netkingdom OIDC mount and bao.coulomb.social callbacks ... Configure OpenBao auth for both netkingdom and keycape mounts with browser redirect URIs; update verify scripts and runtime architecture notes.	2026-06-18 01:23:02 +02:00
tegwick	c48e076429	Close OpenBao OIDC admin bootstrap path	2026-06-01 21:20:53 +02:00
tegwick	59c924bc18	Patch KeyCape OpenBao client without bootstrap secrets	2026-05-26 02:36:04 +02:00