custodian-sync
956bc44f44
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-08-13:
- NK-WP-0024-T02: wait → progress
2026-08-13 14:58:04 +02:00
custodian-sync
685c439796
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-08-13:
- NK-WP-0024-T01: wait → progress
2026-08-13 14:58:04 +02:00
96266b9371
Resume user-engine integration rollout
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-08-13 14:56:53 +02:00
20d4d8af04
Allow user-engine egress to email-connect; record T04 hand-back.
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
NetworkPolicy egress to email-connect:8080 for transactional invitation send;
NK-WP-0024 note points at EMAIL-WP-0004 failure evidence.
2026-08-12 13:32:11 +02:00
0e3a24d888
Deploy KeyCape client MFA override for coulomb-social
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Register coulomb-social with mfaRequired: false, roll key-cape image that
honors client policy, and track NK-WP-0025 public registration orchestration.
2026-08-09 22:42:51 +02:00
0165ac8d14
Deploy user-engine flex-auth policy service
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-08-09 02:21:41 +02:00
29ae3e70c6
Activate expanded portal integration gate
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-08-09 02:00:58 +02:00
d975086ef0
Complete reversible identity retirement
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-30 09:28:05 +02:00
5959fc0537
Close portal integration MVP and narrow identity cutover
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-30 00:52:52 +02:00
39b71d6d96
Complete user-engine runtime custody
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-30 00:40:43 +02:00
f854969a01
Move portal workloads to registry digests
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-30 00:25:16 +02:00
52b57c99f7
Add user-engine backup and rollback verification
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-30 00:00:14 +02:00
12ac63f32c
Deploy identity drift reconciliation
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-29 23:41:42 +02:00
487012e961
Complete identity seams and email login
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-29 23:14:09 +02:00
6aadcd2a1a
Complete Binky and identity conformance gates
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-29 22:14:19 +02:00
00d3a9b508
Record OIDC network policy correction
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-29 21:41:20 +02:00
3710894120
Record platform-root claim correction
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-29 21:33:31 +02:00
8905c4f493
Record password setup conformance
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 17:55:39 +02:00
a58df4c3e6
Advance pre-cutover identity conformance
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 16:48:47 +02:00
43045cbaf5
Verify railiance01 identity dependencies
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 12:59:12 +02:00
9497529ed2
Reconcile identity state onto railiance01
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 12:11:45 +02:00
f0bbd0bfce
Complete CoulombCore identity backup gate
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 09:26:16 +02:00
ae986c723a
Record CoulombCore cutover inventory
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 02:52:14 +02:00
8156525a82
Add login alias and record CoulombCore DNS inventory
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:57:22 +02:00
44eec293fa
Record identity lifecycle enforcement
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:33:04 +02:00
custodian-sync
8e9a4cdb28
chore(consistency): sync task status from DB [auto]
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Updated by fix-consistency on 2026-07-28:
- NK-WP-0023-T06: progress → wait
2026-07-28 01:15:07 +02:00
4f3e10f6f0
Record deployed provisioner evidence
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 01:13:23 +02:00
custodian-sync
a2bd03c68b
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-28:
- NK-WP-0023-T03: wait → progress
2026-07-28 00:42:21 +02:00
9a486c3531
Deploy KeyCape-backed portal login edge
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-28 00:39:22 +02:00
custodian-sync
1d9b7f5772
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-27:
- NK-WP-0023-T05: wait → progress
2026-07-27 23:26:13 +02:00
custodian-sync
67f5996687
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-27:
- NK-WP-0023-T02: wait → progress
2026-07-27 23:26:13 +02:00
49f727c54c
Deploy internal user-engine portal foundation
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 23:24:36 +02:00
custodian-sync
b83f75af82
chore(consistency): sync task status from DB [auto]
...
Updated by fix-consistency on 2026-07-27:
- NK-WP-0023-T02: progress → wait
2026-07-27 22:50:04 +02:00
9d1ae01b75
Define user-engine portal integration boundary
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
2026-07-27 22:48:58 +02:00
custodian-sync
b2dcf7b5ee
chore(consistency): renormalize lifecycle state [auto]
...
Updated by fix-consistency on 2026-07-27:
- workplan status: ready → active
2026-07-27 22:33:00 +02:00
custodian-sync
806db522a3
chore(consistency): renormalize lifecycle state [auto]
...
Updated by fix-consistency on 2026-07-27:
- workplan status: backlog → active
2026-07-27 22:33:00 +02:00
e47e94dbe8
Register portal integration sequence
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 22:32:27 +02:00
custodian-sync
eb4fc59b46
chore(consistency): renormalize lifecycle state [auto]
...
Updated by fix-consistency on 2026-07-27:
- workplan status: backlog → active
2026-07-27 22:30:36 +02:00
abc92a1197
Sequence identity portal before stack cutover
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 22:30:02 +02:00
71b1a7b028
Register identity cutover workplan
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 21:41:00 +02:00
428762648f
Correct identity cutover workplan ID
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 21:39:45 +02:00
6b367a0f3f
Plan identity stack cutover to railiance01
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
2026-07-27 21:37:52 +02:00
a9aec541ec
Implement NK-WP-0021 activity-core ops SSO least-privilege.
...
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s
Seed LLDAP activity-core-operators, add membership runbook and helper,
restrict Authelia access on activity/temporal.coulomb.social to that
group (member one_factor + domain deny fallback), apply live, and verify
via Authelia check-policy plus unauthenticated edge redirects.
2026-07-22 15:47:26 +02:00
3580e43e5f
Add NK-WP-0021 for activity-core ops SSO least-privilege.
...
Promote NK-IN-0001/0002 after scope/intent review into a single ready
workplan (LLDAP operator group, membership runbook, Authelia domain rules,
live verification). Hub workstream and tasks registered via fix-consistency.
2026-07-22 15:21:22 +02:00
bb7daf0f83
CUST-WP-0055 T07: add archive workplan terminology grandfather note
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 4s
2026-07-08 20:26:36 +02:00
db12130c22
Postpone NK-WP-0009 and NK-WP-0011 to backlog
...
Move security pattern tutorials and enterprise federation SAML workplans
from proposed to backlog status.
2026-07-08 12:31:39 +02:00
85a781b7a4
NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof
...
T2: greenfield live proof against a fresh uninitialized OpenBao 2.5.5 —
caught and fixed 'bao operator unseal -' not reading stdin (now
'bao write sys/unseal key=-'); init and reseal-replay paths proven.
T3: attended-ceremony selectable — runbook, non-secret ceremony-record
template + validator, and a lab/production deployment profile that blocks
sops-held-automation in console selection, gates, and the init script.
T4: console gate + evidence flags for auto-unseal-transit (Helm seal stanza
prepared in railiance-platform).
Also: SCOPE.md refreshed to current repo state; adhoc fix for the broken
check-secrets Make target (unescaped $).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 22:08:33 +02:00
60b9d7037d
chore(consistency): commit ADHOC-2026-07-02 task-id writeback
2026-07-02 19:13:29 +02:00
951ba07c30
adhoc: creds-bootstrap-agent dry-run no longer dies without age key
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 14:08:33 +02:00
67b4677cea
NET-WP-0020-T02: wire OpenBao init/unseal as Phase 7b in creds-bootstrap-agent (operator-reviewed)
...
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 13:32:58 +02:00
