818 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	8f808577d6	fix(security): constrain SOPS writes and custody argument handoff ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:03:24 +02:00
tegwick	b01a30bd49	fix(security): make service Secret updates private and conditional ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 20:20:42 +02:00
tegwick	7d4bb1653e	fix(security): reconcile KeyCape bootstrap with scoped factor custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 19:46:53 +02:00
tegwick	19a1c75d30	fix(security): make admin bootstrap private and non-overwriting ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 15:02:15 +02:00
tegwick	6ae4708ea0	fix(security): keep rotation credentials out of command output ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:54:10 +02:00
tegwick	681c5b0ea1	fix: decrypt SOPS through explicit custody into private output ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:08:35 +02:00
tegwick	4cf26a9bc8	fix: make custody input explicit and remove partial decryptions ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 10:53:30 +02:00
tegwick	b97f9f616f	fix: separate bootstrap encryption from private root custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 09:41:08 +02:00
custodian-sync	d552bf253c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for net-kingdom Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 23:25:33 +02:00
tegwick	8bcd7b882f	NK-WP-0022-T08: founder retires coulombcore for machine reuse; host-side inventory, no cert rotation ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 23:23:31 +02:00
tegwick	aeb26b37d2	Requalify tasks after founder attended-window choices (2026-10-11, round 3) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 21:06:42 +02:00
tegwick	beba775bd2	Sync work-record index after requalification ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:51:34 +02:00
custodian-sync	349e6104a6	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for net-kingdom Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:51:33 +02:00
tegwick	5cc5e895e9	Requalify tasks after round-2 founder decisions and fix mislabeled human gates (2026-10-11) ... See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:50:47 +02:00
tegwick	511c92457c	Sync work-record index after triage ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:36:06 +02:00
custodian-sync	012efc7012	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for net-kingdom Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:36:05 +02:00
custodian-sync	0e0552bbf4	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:51 +02:00
custodian-sync	b45ef84127	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:51 +02:00
custodian-sync	efc9686d6f	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:50 +02:00
custodian-sync	e550ea8c22	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:50 +02:00
custodian-sync	90f5c72b7f	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:50 +02:00
tegwick	06595627a4	Demote off-critical-path workplans to residual/backlog (2026-10-11 triage) ... Founder-authorized triage; tasks unchanged. See the-custodian history/20261011-netkingdom-security-progress-assessment.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:13 +02:00
tegwick	96eb40c695	Preserve October 10 owner decision source packets ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:46:21 +02:00
tegwick	8964affdea	Retain reviewed security workplan consolidation and bindings ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:46:21 +02:00
tegwick	7ceac4372d	Publish reviewed bounded JWT ready handoff and retained owner history ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:31:04 +02:00
tegwick	bf6a44db6d	Bound JWT private input and gate native effects on public health ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 17:30:10 +02:00
tegwick	dfc357eb8a	Publish reviewed KEY39 lifecycle source and preserve failed review history ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 15:33:14 +02:00
tegwick	98f09f4d4b	Record independent KEY39 lifecycle deadline review ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 14:21:04 +02:00
tegwick	bb9b9b556c	Select explicitly pinned security case type revisions without fallback ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 09:09:24 +02:00
tegwick	f6856cdb53	Record founder source acknowledgment for isolated Forgejo type 1.2 ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 08:56:45 +02:00
tegwick	584a964684	Prepare reviewed Forgejo type 1.2 source decision package ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:48:34 +02:00
tegwick	c26b018328	Prepare reviewed Forgejo consumer ESO scope and truthful recovery records ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:09:46 +02:00
tegwick	6180f87894	Retain accepted Staff doctrine handoff and proposed successor adoption ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:04:20 +02:00
tegwick	d8eabe675b	Review exact one-use catalogue exception and recovery limits ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:33:47 +02:00
tegwick	e3fffe3ab4	Review bounded Staff evidence doctrine without changing accepted canon ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:29:45 +02:00
tegwick	42aaf60062	Record exact conditional technical review of user readback rollout ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 02:44:21 +02:00
tegwick	81fa1769e0	Give changed draft publications new immutable revision identities ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 02:25:23 +02:00
tegwick	f4436dadd5	Preserve exact served security layer v0.7 revision artifacts ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 02:15:29 +02:00
tegwick	0e17d956ab	Accept security layer v0.8 from confirmed native review ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 01:53:56 +02:00
custodian-sync	f6b4be384f	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-10: - update .custodian-brief.md for net-kingdom Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-10 20:30:29 +02:00
custodian-sync	0a0512a4b6	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-10: - update .custodian-brief.md for net-kingdom Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-10 20:14:03 +02:00
tegwick	e26736a1f1	NK-WP-0048-T06: refresh blocking reason to the current Forgejo gates ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 15:39:56 +02:00
tegwick	69c5f5a1a8	chore: record hub ids for NK-WP-ADHOC-2026-10-10 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 15:30:28 +02:00
tegwick	8d2083e9d0	chore: regenerate WORK-RECORDS (NK-WP-ADHOC-2026-10-10) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 15:30:22 +02:00
tegwick	35880bbce4	NK-WP-0048: run keycape check-config before any registry patch ... keycape-client.py --check-config runs KeyCape's startup checks (key-cape c528daa) on the live and proposed registry via stdin; apply refuses a registry KeyCape would refuse at start. Type 1.1 patch names the option. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 15:28:05 +02:00
tegwick	1c2d0c2cf6	Follow the access-engine CLI rename: ./cmd/flex-auth -> ./cmd/access-engine ... FLEX-DEC-2026-020; the old path is a stub that exits 2. Runtime names unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 15:28:05 +02:00
tegwick	e2174cebaf	NK-WP-0048: oidc-browser-relying-party 1.1; re-pin the Forgejo case ... Adds verification consumer-enforces-groups and makes hand-over require the consumer to enforce access_groups (key-cape review R2). Founder go to move to 1.1 before any apply, so no 1.0 run overlaps. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 13:25:54 +02:00
tegwick	61ab6bcc33	NK-WP-0048: key-cape type review R1-R4 as a 1.0 patch ... R1: redirect URIs refuse '?' and '#' in the type and keycape-client.py. R2: allowed_scopes always includes groups; access_groups is enforced by the consumer, not KeyCape. R3/R4: mfa_required false and restart-for-all-clients documented. The consumer-enforcement verification step (1.1) awaits a decision. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 13:18:11 +02:00
tegwick	744b4aa36e	NK-WP-0048: record key-cape adoption of the derived Forgejo custody path ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 12:40:12 +02:00
tegwick	20a3e091f5	user-engine: record USER_ENGINE_MFA_MANAGEMENT_URL in migration input ... Founder go 2026-10-10. Live already carries the value via rapp-user-engine (the apply home); this file is not applied. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 10:28:00 +02:00