custodian-sync
51b2d2d190
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-28:
- update .custodian-brief.md for net-kingdom
2026-07-28 09:09:59 +02:00
ae986c723a
Record CoulombCore cutover inventory
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 02:52:14 +02:00
fea55461e9
Refresh cutover work records
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 02:27:14 +02:00
custodian-sync
38c94263f5
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-28:
- update .custodian-brief.md for net-kingdom
2026-07-28 02:25:56 +02:00
2d13ea84b2
Make Authelia certificate lifecycle explicit
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 02:16:07 +02:00
8156525a82
Add login alias and record CoulombCore DNS inventory
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:57:22 +02:00
dc64fc8bef
Refresh generated work records
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:41:21 +02:00
44eec293fa
Record identity lifecycle enforcement
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:33:04 +02:00
5b8f52749e
Deploy identity administration lifecycle images
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:30:39 +02:00
e182d989fd
Refresh generated work records
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:16:38 +02:00
custodian-sync
8e9a4cdb28
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-28:
- NK-WP-0023-T06: progress → wait
2026-07-28 01:15:07 +02:00
4f3e10f6f0
Record deployed provisioner evidence
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:13:23 +02:00
c9295d278a
Roll forward normalized provisioning images
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:06:34 +02:00
dbf7cfd862
Normalize mounted provisioner token
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:04:15 +02:00
609a718348
Deploy current user-engine provisioning image
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:00:28 +02:00
ba07dd2acb
Add scoped LLDAP identity provisioner
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 00:57:16 +02:00
custodian-sync
86eed20012
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-28:
- update .custodian-brief.md for net-kingdom
2026-07-28 00:42:31 +02:00
custodian-sync
a2bd03c68b
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-28:
- NK-WP-0023-T03: wait → progress
2026-07-28 00:42:21 +02:00
9a486c3531
Deploy KeyCape-backed portal login edge
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 00:39:22 +02:00
eac9d655b0
Refresh portal deployment work records
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 23:29:19 +02:00
custodian-sync
69e0ecfe72
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-27:
- update .custodian-brief.md for net-kingdom
2026-07-27 23:26:17 +02:00
custodian-sync
1d9b7f5772
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-27:
- NK-WP-0023-T05: wait → progress
2026-07-27 23:26:13 +02:00
custodian-sync
67f5996687
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-27:
- NK-WP-0023-T02: wait → progress
2026-07-27 23:26:13 +02:00
49f727c54c
Deploy internal user-engine portal foundation
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 23:24:36 +02:00
custodian-sync
480a84abfb
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Updated by fix-consistency on 2026-07-27:
- update .custodian-brief.md for net-kingdom
2026-07-27 22:50:08 +02:00
custodian-sync
b83f75af82
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-27:
- NK-WP-0023-T02: progress → wait
2026-07-27 22:50:04 +02:00
9d1ae01b75
Define user-engine portal integration boundary
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
2026-07-27 22:48:58 +02:00
b56dbffd79
Refresh portal integration records
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 22:34:15 +02:00
custodian-sync
da147da286
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-27:
- update .custodian-brief.md for net-kingdom
2026-07-27 22:33:04 +02:00
custodian-sync
b2dcf7b5ee
chore(consistency): renormalize lifecycle state [auto]
...
Updated by fix-consistency on 2026-07-27:
- workplan status: ready → active
2026-07-27 22:33:00 +02:00
custodian-sync
806db522a3
chore(consistency): renormalize lifecycle state [auto]
...
Updated by fix-consistency on 2026-07-27:
- workplan status: backlog → active
2026-07-27 22:33:00 +02:00
e47e94dbe8
Register portal integration sequence
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 22:32:27 +02:00
custodian-sync
4f4aa955fa
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Updated by fix-consistency on 2026-07-27:
- update .custodian-brief.md for net-kingdom
2026-07-27 22:30:40 +02:00
custodian-sync
eb4fc59b46
chore(consistency): renormalize lifecycle state [auto]
...
Updated by fix-consistency on 2026-07-27:
- workplan status: backlog → active
2026-07-27 22:30:36 +02:00
abc92a1197
Sequence identity portal before stack cutover
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 22:30:02 +02:00
71b1a7b028
Register identity cutover workplan
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 21:41:00 +02:00
custodian-sync
c4867c3954
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-27:
- update .custodian-brief.md for net-kingdom
2026-07-27 21:40:26 +02:00
428762648f
Correct identity cutover workplan ID
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 21:39:45 +02:00
custodian-sync
bd966e02b7
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-27:
- update .custodian-brief.md for net-kingdom
2026-07-27 21:38:30 +02:00
6b367a0f3f
Plan identity stack cutover to railiance01
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 21:37:52 +02:00
c3800b6dea
Ratify tenant grouping identifiers
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 20:39:12 +02:00
11a14648c4
Register rapp-qonto KeyCape client
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
2026-07-27 20:17:56 +02:00
9026d7f904
ADR-0014 + tenant-engine boundary contract + IAM Profile v0.3
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 5s
Ratifies the tenant capability-role model (PLTF/IAM/VEN/CUS, non-exclusive,
independent of ADR-0013's grouping axis), a hybrid carrying mechanism
(tenant-engine authoritative, key-cape caches a tenant_roles claim at
issuance, flex-auth re-validates live for aal2-class decisions), and
tenant-engine as a new, separate service owning tenant existence, grouping,
capability roles, and plan/subscription assignment -- not a module inside
user-engine, whose own boundary contract already scopes it to consuming
tenant identifiers, not owning them.
canon/standards/tenant-engine-boundary-contract_v0.1.md defines that
ownership boundary before the repo exists, mirroring how
user-engine-boundary-contract_v0.1.md was sequenced.
canon/standards/iam-profile_v0.3.md (minor version per ADR-0011's own
governance -- optional claim addition, no breaking change) adds the
tenant_roles claim, folds in ADR-0013's tenant-identifier vocabulary, and
documents the live-revalidation requirement. docs/platform-identity-
security-architecture.md's Tenant Model section and SCOPE.md's canonical
spec pointer updated to match; other historical citations of v0.2 left as
version-pinned references, not bulk-updated.
Records Bernd's trial-tenant policy: trial-grouped tenants may hold any
capability role (showcase/test/explore), with safety enforced through
tenant-engine-owned resource guardrails (spend limits, entity/action
counts) rather than role gating -- guardrail design is reserved, explicitly
not specified by this change.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-23 21:45:37 +02:00
a18f83c4af
ADR-0013: tenant onboarding grouping taxonomy, orthogonal to capability role
...
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 4s
Replaces the sandbox/customer suggested tenant identifiers in
iam-profile_v0.2.md's Tenant Claim section with an onboarding-risk/
entity-shape grouping (trial, friendly, single, small, medium, large,
enterprise, consumer, family, community, association, agentic) that stays
orthogonal to the separate, still-unratified capability-role model
(PLTF/IAM/VEN/CUS) a tenant can also hold. Role words as a grouping would
collide the moment a tenant's roles evolve -- Binky Hedgehog GmbH is CUS
now and VEN later, so tenant:customer:binky was already the wrong shape.
First application: tenant:friendly:binky
(key-cape/workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md).
tenant:platform and tenant:coulomb proposed as reserved/ungrouped, flagged
for explicit confirmation. Classified as an editorial change per ADR-0011's
governance (no required-claim schema change) -- the iam-profile_v0.2.md
Tenant Claim section edit itself is tracked as a follow-up, not bundled here.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-23 16:01:55 +02:00
efda4e729b
chore: refresh WORK-RECORDS.md after NK-WP-0021 finish
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
2026-07-22 15:48:23 +02:00
custodian-sync
72970dad7f
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Updated by fix-consistency on 2026-07-22:
- update .custodian-brief.md for net-kingdom
2026-07-22 15:48:16 +02:00
a9aec541ec
Implement NK-WP-0021 activity-core ops SSO least-privilege.
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s
Seed LLDAP activity-core-operators, add membership runbook and helper,
restrict Authelia access on activity/temporal.coulomb.social to that
group (member one_factor + domain deny fallback), apply live, and verify
via Authelia check-policy plus unauthenticated edge redirects.
2026-07-22 15:47:26 +02:00
3580e43e5f
Add NK-WP-0021 for activity-core ops SSO least-privilege.
...
Promote NK-IN-0001/0002 after scope/intent review into a single ready
workplan (LLDAP operator group, membership runbook, Authelia domain rules,
live verification). Hub workstream and tasks registered via fix-consistency.
2026-07-22 15:21:22 +02:00
custodian-sync
101f91cbda
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Updated by fix-consistency on 2026-07-22:
- update .custodian-brief.md for net-kingdom
2026-07-22 15:20:51 +02:00
fab1f371e1
Add routed intakes NK-IN-0001/0002 for activity-core SSO operators.
...
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 9s
ACTIVITY-WP-0025 residual T06: LLDAP group activity-core-operators and
Authelia domain rules for activity/temporal.coulomb.social. File-backed
work records registered in State Hub (C-32).
2026-07-22 10:47:25 +02:00
