coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
274 commits 1 branch 0 tags 3.1 MiB
Commit graph

274 commits

This branch
This branch
All branches
Author SHA1 Message Date
custodian-sync
4ad4763547 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-22:
  - update .custodian-brief.md for net-kingdom
 2026-07-22 10:44:58 +02:00
tegwick
bb7daf0f83 CUST-WP-0055 T07: add archive workplan terminology grandfather note
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details
2026-07-08 20:26:36 +02:00
tegwick
76c66d40ba docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 2)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-07-08 16:41:16 +02:00
tegwick
e814a4ed36 Regenerate agent instructions from state-hub templates (CUST-WP-0055 T01)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Sync AGENTS.md, CLAUDE.md, and .claude/rules from updated project_rules
templates: workplan-first session protocol, legacy terminology footnote,
and GET /workplans/ examples.
 2026-07-08 14:50:31 +02:00
tegwick
cd8a633ad9 Remove STATUS.md; SCOPE.md is the canonical orientation doc
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details 
STATUS.md duplicated SCOPE.md intent. Drop the file and point README
orientation at SCOPE.md only.
 2026-07-08 13:19:06 +02:00
tegwick
802d7f258c Link STATUS.md from README orientation section
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 5s
Details 
Add Status & Orientation section pointing to STATUS.md and SCOPE.md.
 2026-07-08 13:07:03 +02:00
tegwick
e4ee5d0fd7 Update SCOPE.md current state to reflect backlog workplans
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details 
Align NK-WP-0009 and NK-WP-0011 status with backlog, reference STATUS.md
and reuse.coulomb.social for ecosystem orientation.
 2026-07-08 12:48:36 +02:00
tegwick
75cfaed593 Add STATUS.md — NetKingdom ecosystem status snapshot
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details 
Documents net-kingdom delivery state, sister-repo maturity from
reuse.coulomb.social federation, capability ladder position, backlog,
and cross-ecosystem coordination gaps as of 2026-07-08.
 2026-07-08 12:44:00 +02:00
tegwick
3d23f8c4e2 Add Forgejo CI smoke workflow (enablement template)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
2026-07-08 12:37:33 +02:00
custodian-sync
d34c6891b3 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-08:
  - update .custodian-brief.md for net-kingdom
 2026-07-08 12:33:01 +02:00
tegwick
db12130c22 Postpone NK-WP-0009 and NK-WP-0011 to backlog 
Move security pattern tutorials and enterprise federation SAML workplans
from proposed to backlog status.
 2026-07-08 12:31:39 +02:00
custodian-sync
1b5fab9bcd chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-07:
  - update .custodian-brief.md for net-kingdom
 2026-07-07 16:48:58 +00:00
custodian-sync
02cb63c8ab chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-07:
  - update .custodian-brief.md for net-kingdom
 2026-07-07 16:34:53 +00:00
tegwick
9767f7230f Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 2) 
Honest first-pass maturity vector grounded in README/docs/tests present
in this repo; no invented evidence. Flagged for human review before
publish. See reuse-surface history/2026-07-06-coverage-classification.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-07-06 19:41:37 +02:00
tegwick
d2c7473fb2 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for net-kingdom
 2026-07-02 22:09:52 +02:00
tegwick
85a781b7a4 NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof 
T2: greenfield live proof against a fresh uninitialized OpenBao 2.5.5 —
caught and fixed 'bao operator unseal -' not reading stdin (now
'bao write sys/unseal key=-'); init and reseal-replay paths proven.
T3: attended-ceremony selectable — runbook, non-secret ceremony-record
template + validator, and a lab/production deployment profile that blocks
sops-held-automation in console selection, gates, and the init script.
T4: console gate + evidence flags for auto-unseal-transit (Helm seal stanza
prepared in railiance-platform).
Also: SCOPE.md refreshed to current repo state; adhoc fix for the broken
check-secrets Make target (unescaped $).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 22:08:33 +02:00
tegwick
60b9d7037d chore(consistency): commit ADHOC-2026-07-02 task-id writeback 2026-07-02 19:13:29 +02:00
tegwick
951ba07c30 adhoc: creds-bootstrap-agent dry-run no longer dies without age key 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 14:08:33 +02:00
tegwick
67b4677cea NET-WP-0020-T02: wire OpenBao init/unseal as Phase 7b in creds-bootstrap-agent (operator-reviewed) 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 13:32:58 +02:00
tegwick
abde6b1fd4 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-07-02:
  - update .custodian-brief.md for net-kingdom
 2026-07-02 11:02:40 +02:00
tegwick
60142241a3 NET-WP-0020-T02: SOPS-held OpenBao init/unseal automation helper 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 11:01:34 +02:00
tegwick
764c3cfd6d Regenerate agent instructions: workstream -> workplan terminology 
Registration guidance now prescribes file-first + fix-consistency (C-06)
instead of manual create_workplan/create_workstream calls; progress-event
examples use workplan_id; legacy field names annotated.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 01:47:46 +02:00
tegwick
a770a6a11d Archive closed workplans to workplans/archived/ (ADR-001) 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 00:25:42 +02:00
tegwick
9a7d10f840 Repo hygiene: fill stack-and-commands, normalize workplan statuses 
- Fill .claude/rules/stack-and-commands.md (was an empty TODO template)
- Normalize workplan frontmatter statuses to canonical vocabulary
  (completed/done -> finished) per ADR-001
- Repair glued frontmatter delimiter in NK-WP-0001 (superseded_by line)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-02 00:21:49 +02:00
tegwick
93e465525f Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 
- Align agent files with on-disk workplan prefixes (infer from workplan ids)
- Set workplan domain to registered domain_slug; add topic_slug where applicable
- Repair frontmatter delimiter formatting; migrate legacy task status literals
- Regenerate AGENTS.md, CLAUDE.md, and .claude/rules from State Hub templates
 2026-06-22 23:16:27 +02:00
tegwick
30c647ff5b Updated and fixed workplan 2026-06-22 18:42:46 +02:00
tegwick
53c015b97b Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
tegwick
366574a7b1 Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) 2026-06-22 17:47:38 +02:00
tegwick
3764ea03ed chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-22:
  - update .custodian-brief.md for net-kingdom
 2026-06-22 12:40:25 +02:00
tegwick
3875d546bc Expose OIDC auth mounts to unauthenticated OpenBao UI listing 
Set listing_visibility=unauth on netkingdom and keycape during OIDC configure
so the browser login mask can select KeyCape instead of falling back to token.
 2026-06-19 21:04:31 +02:00
tegwick
2056eee862 Add credential routing instructions for all agent runtimes 
Propagate shared credential-routing section (Codex, Claude, Grok, llm-connect)
from state-hub template via scripts/propagate_credential_routing.py.
 2026-06-18 22:48:38 +02:00
tegwick
efbdab4652 feat(keycape): add netkingdom OIDC mount and bao.coulomb.social callbacks 
Configure OpenBao auth for both netkingdom and keycape mounts with browser
redirect URIs; update verify scripts and runtime architecture notes.
 2026-06-18 01:23:02 +02:00
tegwick
8a05dd0db7 docs(NET-WP-0020): mark T5 done after live SSH engine and host CA apply 2026-06-18 01:18:57 +02:00
tegwick
5a5eb482d4 docs(NET-WP-0020): T5 automation ready; operator apply is next gate 
Update workplan T5 to progress and assessment next-actions for live cluster
apply before WP-0008 warden sign smoke.
 2026-06-18 01:06:43 +02:00
tegwick
6336c28626 docs: persist OpenBao/SSH/bootstrap state assessment in history 
Capture live vs greenfield tracks, unseal custody models, console S6
interpretation, repo ownership, and ordered next actions before NET-WP-0020 T5.
 2026-06-18 01:01:50 +02:00
tegwick
f625dd0681 feat: OpenBao unseal custody models — automation-first with blocked alternatives 
Document three init/unseal custody paths; default sops-held-automation for
fast rebuild cycles. Security bootstrap console lists models, blocks planned
attended-ceremony and auto-unseal-transit with hints, and gates init ceremony
on implemented selection. NET-WP-0020 tracks downstream SSH automation.
 2026-06-18 00:51:48 +02:00
tegwick
da9debf431 docs: recognize ops-warden operational SSH credential lane 
Add Operational SSH Path to platform architecture and move ops-warden
from out-of-scope to operational SSH dependency in responsibility-map.
Aligns with ops-warden WARDEN-WP-0006 stewardship work.
 2026-06-17 08:22:45 +02:00
tegwick
c5688acd92 Add capability registry scaffold (REUSE-WP-0014-T06 B04) 2026-06-16 01:55:44 +02:00
tegwick
3ab326b597 Clarifications on sops 2026-06-14 19:51:05 +02:00
tegwick
443b585010 finished workplan 2026-06-05 13:10:37 +02:00
tegwick
ce0cccc1ca chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-05:
  - update .custodian-brief.md for net-kingdom
 2026-06-05 09:48:54 +02:00
tegwick
cc0cb03c1d NET-WP-0018: fix archive prefix to 260604 (two-digit year 26 per convention and existing archived/ files like 260603-*) 2026-06-04 02:07:50 +02:00
tegwick
280294b9c3 NET-WP-0018: archive finished workplan to archived/ (per ADR-001 / AGENTS.md convention) 
- All tasks (T01-T09) complete, frontmatter status: finished, hub workstream finished.
- Move: workplans/NET-WP-0018-...md -> workplans/archived/20240604-NET-WP-0018-...
- Frontmatter id unchanged.
- Followed by statehub sync.
- T09 completion + 9/9 done.
 2026-06-04 01:58:22 +02:00
tegwick
9f82709b6d NET-WP-0018: mark workplan frontmatter status: finished (all 9 tasks done per T09) 
- Updated per convention (ADR-001 / AGENTS.md): after implementation complete, set status finished.
- Brief + hub workstream already set to finished by prior fix-consistency (C-13).
- This keeps file as source of truth.
- Followed by statehub sync.
 2026-06-04 00:57:55 +02:00
tegwick
b573f5377f chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-04:
  - update .custodian-brief.md for net-kingdom
 2026-06-04 00:57:37 +02:00
tegwick
4a99f8245d NET-WP-0018 T09: cross-ref completion in smooth-bootstrap-guide.md Step 8 (now points to new risk/rehearsal doc) 2026-06-04 00:52:01 +02:00
tegwick
dc753cfdf5 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-04:
  - update .custodian-brief.md for net-kingdom
 2026-06-04 00:51:31 +02:00
tegwick
875e50d573 NET-WP-0018 T09: Assess scratch-rebuild risk and define rehearsal plan 
- Created docs/security-bootstrap-rebuild-risk-and-rehearsal.md (risk table 12+ items classified likelihood/impact/etc; UE adapters #1 HIGH per assessment 7 gaps; non-destructive rehearsal plan: scripted dry (creds-init --dry + 0019 orchestrator + make/console validate + T07/T08) then ns-isolated then parallel; rollback via cleanup/lock-offboard; prove via validators/evidence/status/tests; recs + coverage gaps documented; refs T02/T03/T05/T07/T08/0019/assessment/contract)
- Updated workplan T09 status:done + detailed 2026-06-04 completion note (reviews all prior T0x + live console/evidence/metadata exercised in T09; pragmatic infra used; 9/9 closes 0018)
- Frontmatter updated date
- No destructive; all per session protocol + pragmatic audit (file source per ADR-001)
- T07 tests + T08 validate-keycape + validate-onboarding-dry-run exercised OK as part of review

Refs: workstream 800f9f16-..., task a9e60fd5-...; will POST /progress/ + fix-consistency
 2026-06-04 00:50:18 +02:00
tegwick
9a3228489e fix(NET-WP-0018-T08): add missing import os for the keycape deployed validator 2026-06-04 00:28:05 +02:00
tegwick
8a76235213 chore(consistency): sync task status from DB [auto] 
Updated by fix-consistency on 2026-06-04:
  - update .custodian-brief.md for net-kingdom
 2026-06-04 00:27:42 +02:00