24 commits

Author	SHA1	Message	Date
tegwick	4a915ce6c7	NK-WP-0026 finished: user-engine caller identity verified live against railiance01 ... T02 done. Deployed user-engine digest c501aeb2 reads the projected flex-auth token per decision (verified in the running container); flex-auth-user-engine 138aa347 serves with caller-auth enforce. Probes: valid 200 decision:d9aef25f08e17b84, missing token 401, wrong-system 403. Closes manifest drift: runtime.yaml pinned e3b5f65b, the digest T01 warned against, while the cluster ran c501aeb2. Re-applying it would have rolled the portal back to an image that cannot authenticate to a PDP now in enforce. kubectl diff is now empty. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-19 22:01:12 +02:00
tegwick	f4f885289e	docs: point user-engine apply home at rapp-user-engine	2026-08-18 12:39:24 +02:00
tegwick	2a2d8ba055	Align provisioned identities with OIDC subjects	2026-08-14 18:53:37 +02:00
tegwick	94f27cb546	Complete live registration acceptance	2026-08-14 17:39:08 +02:00
tegwick	c56465e32d	Enable public registration and prove event delivery	2026-08-14 00:42:14 +02:00
tegwick	dbbccc1a80	Deploy scoped user-engine delivery lanes	2026-08-13 17:34:29 +02:00
tegwick	96266b9371	Resume user-engine integration rollout	2026-08-13 14:56:53 +02:00
tegwick	20d4d8af04	Allow user-engine egress to email-connect; record T04 hand-back. ... NetworkPolicy egress to email-connect:8080 for transactional invitation send; NK-WP-0024 note points at EMAIL-WP-0004 failure evidence.	2026-08-12 13:32:11 +02:00
tegwick	4511a43f7a	Wire user-engine authorization runtime	2026-08-10 19:15:18 +02:00
tegwick	0165ac8d14	Deploy user-engine flex-auth policy service	2026-08-09 02:21:41 +02:00
tegwick	62b1ea3d59	Deploy tenant authority for user portal	2026-08-09 01:39:57 +02:00
tegwick	03cc0c5a91	Deploy expanded user-engine portal	2026-08-08 23:18:29 +02:00
tegwick	0ec6f8c75d	Move identity secret stores to local OpenBao	2026-08-03 21:37:17 +02:00
tegwick	39b71d6d96	Complete user-engine runtime custody	2026-07-30 00:40:43 +02:00
tegwick	f854969a01	Move portal workloads to registry digests	2026-07-30 00:25:16 +02:00
tegwick	52b57c99f7	Add user-engine backup and rollback verification	2026-07-30 00:00:14 +02:00
tegwick	816c5c3773	Deploy reusable password setup handoff	2026-07-28 17:45:09 +02:00
tegwick	a58df4c3e6	Advance pre-cutover identity conformance	2026-07-28 16:48:47 +02:00
tegwick	5b8f52749e	Deploy identity administration lifecycle images	2026-07-28 01:30:39 +02:00
tegwick	c9295d278a	Roll forward normalized provisioning images	2026-07-28 01:06:34 +02:00
tegwick	609a718348	Deploy current user-engine provisioning image	2026-07-28 01:00:28 +02:00
tegwick	ba07dd2acb	Add scoped LLDAP identity provisioner	2026-07-28 00:57:16 +02:00
tegwick	9a486c3531	Deploy KeyCape-backed portal login edge	2026-07-28 00:39:22 +02:00
tegwick	49f727c54c	Deploy internal user-engine portal foundation	2026-07-27 23:24:36 +02:00