98 commits

Author	SHA1	Message	Date
tegwick	c52ca7f405	fix(recovery): require one original client and refine native owner gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa	2026-10-17 04:15:30 +02:00
tegwick	4f65e41ac5	fix(identity): retain group provenance and prepare sealed recovery custody ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa	2026-10-17 00:28:17 +02:00
tegwick	5fcd5952ad	feat(recovery): add isolated KeyCape restore and loss cleanup proof ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa	2026-10-16 23:35:54 +02:00
tegwick	015694ee41	fix(cases): validate optional exact machine descriptor pins ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 21:23:04 +02:00
tegwick	8ae5150d4d	docs(recovery): accept retained token material and audit continuity ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 21:14:23 +02:00
tegwick	1ab5d53bd7	Prepare isolated privacyIDEA token and audit recovery checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 21:00:36 +02:00
tegwick	0e298813c7	Accept actual isolated LLDAP recovery and clear directory prerequisites ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 20:40:14 +02:00
tegwick	d5484bb90a	Prepare native isolated directory recovery and offline service images ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 20:33:57 +02:00
tegwick	31f483966c	Accept independent outage recovery and Storage Share guide publication ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 20:04:44 +02:00
tegwick	fbdd62b7ed	Fix private recovery prompts on nonseekable terminals ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 19:56:06 +02:00
tegwick	1764f40b43	Prepare independent outage recovery and Storage Share documentation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 17:59:18 +02:00
tegwick	17a8fa1495	feat(recovery): verify scoped delivery and create first full offsite bundle ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 09:21:55 +02:00
tegwick	8857d9ff6f	security(recovery): fence agent reads before publishing backup credentials ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 07:49:48 +02:00
tegwick	72c598e7de	fix(recovery): distinguish malformed paths from outside-folder denial ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 07:48:36 +02:00
tegwick	a17aa7edc1	fix(recovery): bind admitted host and record live provider scope approval ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 07:44:36 +02:00
tegwick	c31d21ba7d	feat(cases): verify browser case source against owner receipts ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 01:51:58 +02:00
tegwick	994d11c869	feat(recovery): prepare full identity backup and bootstrap handoff ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 01:37:11 +02:00
tegwick	dca999222f	Record off-host database recovery and prepare identity backup coverage ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 00:32:50 +02:00
tegwick	a1939a7d06	Prepare bounded off-host privacyIDEA recovery drill ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 00:09:13 +02:00
tegwick	c262470089	Inventory off-host recovery assets through existing bounded backup routes ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 23:58:41 +02:00
tegwick	d9557ba90e	Harden remaining bootstrap custody callers and prepare isolated recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 22:57:14 +02:00
tegwick	2d0681f361	Adopt shared hourly coordination frame and prepare guarded runtime patches ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 20:45:06 +02:00
tegwick	84c5dbeec8	security: retire unsafe legacy LDAP lifecycle callers ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 00:08:42 +02:00
tegwick	30f0d27840	security: preserve realm configuration and remove shell credential evaluation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 22:47:24 +02:00
tegwick	b97f9f616f	fix: separate bootstrap encryption from private root custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 09:41:08 +02:00
tegwick	bb9b9b556c	Select explicitly pinned security case type revisions without fallback ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 09:09:24 +02:00
tegwick	584a964684	Prepare reviewed Forgejo type 1.2 source decision package ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:48:34 +02:00
tegwick	850907a987	NK-WP-0048: {param:env} format spec; check follow-through/rollback templates ... Answers ops-warden's observation on the literal KEYCAPE_<CLIENT_ID>_CLIENT_SECRET. The type adopts the spec once ops-warden's planner renders it too. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 469893@bnt-lap001 Assistant-Session: 49296f15-2171-4137-b972-2443bab95edb	2026-10-09 19:02:56 +02:00
tegwick	33ebda59d4	NK-WP-0048-T05: fold ops-warden's review into the type; build memo r3 ... Canon section 3 defines warden_executes narrowly and adds per-step lane, value_handling and ready_check; catalog entries need a templated body. The type gets lanes, generated-in-custody minting, a Ready gate before bind-env, memberships only from the accepted case, mfa-pinned and secret-delivered checks, and the R4-prime catalog body. 110 tests pass. Memo r3 supersedes r2 and validates on both sides. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-09 00:22:04 +02:00
tegwick	074b3a047b	NK-WP-0048-T05: fold ops-mason's materialization review into oidc-browser-relying-party ... Derive custody at platform/workloads/keycape/{client_id} (secret_ref is no longer case-settable), reuse the workload-kv-read-keycape-* policy family with templated bodies, add the external-secrets-keycape-{client_id} ESO role, name the catalog entry {consuming_service}-keycape-client and collapse the duplicate KV-path rollback. Schema and validator require a body on policy/role items. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 330051@bnt-lap001 Assistant-Session: b98d4912-95a3-4619-b7fb-57aa1db7407b	2026-10-08 23:27:22 +02:00
tegwick	fa2cb57384	NK-WP-0048-T04: SecurityCaseType oidc-browser-relying-party 1.0 (proposed) ... Composes key-cape.oidc-client-registration; confidential/public conditions, one justified attended step, threat model, fit table of hand-built clients, Forgejo and public-portal examples. Validator gains when/required_when and provider discovery. 43 tests pass. Adds T08 (identity-provisioner groups ensure). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:45:31 +02:00
tegwick	d8cf42bab6	NK-WP-0048: canon accepted; SecurityCaseType schemas, validator and template (T01, T03) ... security-case-types_v0.1 accepted by the founder 2026-10-08. Adds JSON schemas for types and cases, tools/security-case-types/security_case_validator.py (validate-type, validate-case, render via the scenario composer, plan-only), and a runnable _template type with README sections, an example case and tests. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:29:13 +02:00
tegwick	f170350f69	Accept source cadence migrations and retain operational adoption gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 22:48:58 +02:00
tegwick	db319335b2	Advance approved custody delivery and expose observation expiry ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:27:16 +02:00
tegwick	de4c4f84f5	Accept root grant ADR and approved OpenBao delivery design ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:01:13 +02:00
tegwick	add86c116f	Harden custody record reads and define blocked owner delivery requirements ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 18:40:41 +02:00
tegwick	17f92c9f11	CUST-WP-0075: NK-WP-0045 custody-record schema and validator; NK-WP-0042 reply ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 12:56:22 +02:00
tegwick	639224b2eb	Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-03 00:01:14 +02:00
tegwick	0d460e3c02	Activate NK-WP-0009/0011; add tutorials slice and proposed ADR-0009 ... - docs/tutorials: template, OpenBao and SSH tutorials (unexercised) - tools/tutorial-verify + make tutorials-verify (NK-WP-0009-T06) - ADR-0009 proposed: expanded-mode Keycloak trigger and topology Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 295952@bnt-lap001 Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477	2026-09-28 23:31:48 +02:00
tegwick	36303d25a3	Require explicit cadence profile assessment and correct contract pins ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e77d-47a4-7771-8e34-7339c7fac0e4	2026-09-28 12:40:07 +02:00
tegwick	4e07d60ff1	Validate cadence contract and require functional MFA verification ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ea3-7939-7b63-8125-699f8b50bedd	2026-09-05 01:28:05 +02:00
tegwick	7f4e4e9f57	feat(orchestration): compose KeyCape C1 and C2b ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02929-244b-7391-b933-c04010e8eedb	2026-08-23 13:24:55 +02:00
tegwick	cfc9e7d0cb	feat(posture): add deterministic feedback proposals ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02929-244b-7391-b933-c04010e8eedb	2026-08-23 13:16:34 +02:00
tegwick	d96aab2321	feat(orchestration): compose security scenarios ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02929-244b-7391-b933-c04010e8eedb	2026-08-23 12:40:52 +02:00
tegwick	bee22db620	docs(canon): reconcile workload and tenant grouping semantics ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02929-244b-7391-b933-c04010e8eedb	2026-08-22 14:53:31 +02:00
tegwick	cced59d3aa	Publish tenancy posture draft-8 contract	2026-08-18 12:15:41 +02:00
tegwick	dbbccc1a80	Deploy scoped user-engine delivery lanes	2026-08-13 17:34:29 +02:00
tegwick	85a781b7a4	NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof ... T2: greenfield live proof against a fresh uninitialized OpenBao 2.5.5 — caught and fixed 'bao operator unseal -' not reading stdin (now 'bao write sys/unseal key=-'); init and reseal-replay paths proven. T3: attended-ceremony selectable — runbook, non-secret ceremony-record template + validator, and a lab/production deployment profile that blocks sops-held-automation in console selection, gates, and the init script. T4: console gate + evidence flags for auto-unseal-transit (Helm seal stanza prepared in railiance-platform). Also: SCOPE.md refreshed to current repo state; adhoc fix for the broken check-secrets Make target (unescaped $). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-02 22:08:33 +02:00
tegwick	f625dd0681	feat: OpenBao unseal custody models — automation-first with blocked alternatives ... Document three init/unseal custody paths; default sops-held-automation for fast rebuild cycles. Security bootstrap console lists models, blocks planned attended-ceremony and auto-unseal-transit with hints, and gates init ceremony on implemented selection. NET-WP-0020 tracks downstream SSH automation.	2026-06-18 00:51:48 +02:00
tegwick	9a3228489e	fix(NET-WP-0018-T08): add missing import os for the keycape deployed validator	2026-06-04 00:28:05 +02:00