125 commits

Author	SHA1	Message	Date
tegwick	96eb40c695	Preserve October 10 owner decision source packets ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:46:21 +02:00
tegwick	7ceac4372d	Publish reviewed bounded JWT ready handoff and retained owner history ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:31:04 +02:00
tegwick	bf6a44db6d	Bound JWT private input and gate native effects on public health ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 17:30:10 +02:00
tegwick	dfc357eb8a	Publish reviewed KEY39 lifecycle source and preserve failed review history ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 15:33:14 +02:00
tegwick	98f09f4d4b	Record independent KEY39 lifecycle deadline review ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 14:21:04 +02:00
tegwick	bb9b9b556c	Select explicitly pinned security case type revisions without fallback ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 09:09:24 +02:00
tegwick	f6856cdb53	Record founder source acknowledgment for isolated Forgejo type 1.2 ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 08:56:45 +02:00
tegwick	584a964684	Prepare reviewed Forgejo type 1.2 source decision package ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:48:34 +02:00
tegwick	c26b018328	Prepare reviewed Forgejo consumer ESO scope and truthful recovery records ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:09:46 +02:00
tegwick	6180f87894	Retain accepted Staff doctrine handoff and proposed successor adoption ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:04:20 +02:00
tegwick	d8eabe675b	Review exact one-use catalogue exception and recovery limits ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:33:47 +02:00
tegwick	e3fffe3ab4	Review bounded Staff evidence doctrine without changing accepted canon ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:29:45 +02:00
tegwick	42aaf60062	Record exact conditional technical review of user readback rollout ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 02:44:21 +02:00
tegwick	81fa1769e0	Give changed draft publications new immutable revision identities ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 02:25:23 +02:00
tegwick	f4436dadd5	Preserve exact served security layer v0.7 revision artifacts ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 02:15:29 +02:00
tegwick	0e17d956ab	Accept security layer v0.8 from confirmed native review ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 01:53:56 +02:00
tegwick	1c2d0c2cf6	Follow the access-engine CLI rename: ./cmd/flex-auth -> ./cmd/access-engine ... FLEX-DEC-2026-020; the old path is a stub that exits 2. Runtime names unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 736651@bnt-lap001 Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8	2026-10-10 15:28:05 +02:00
tegwick	df15d6900d	NK-WP-0048-T02 done: SecurityCaseType inventory ... 36 of 37 CCRs are already workload-kv-read; browser and service OIDC clients and forge read identities follow. Ranking and recommendation recorded. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:21:40 +02:00
tegwick	4f3ad6a73b	Bind completed owner cadence changes and remaining observer gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 23:00:28 +02:00
tegwick	f170350f69	Accept source cadence migrations and retain operational adoption gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 22:48:58 +02:00
tegwick	d1e5661369	Report bootstrap audit failures and track cadence adoption work ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 22:42:57 +02:00
tegwick	d4d97acd57	Establish remaining owner requirements and correct blocked plan gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 22:21:11 +02:00
tegwick	0f2e8734e5	Finish NK-WP-0045 with verified attended custody recovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:59:22 +02:00
tegwick	9c8655af30	Record activity projection compatibility blocker ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:55:12 +02:00
tegwick	7782619773	Bind tested custody repair and backup consumer refresh tasks ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:51:03 +02:00
tegwick	742b8a24e5	Record custody share diagnosis and owned repair blockers ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:49:24 +02:00
tegwick	3f9ef08135	Record persistent provider rejection and tested read-only share diagnosis ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:32:32 +02:00
tegwick	d9f890c58a	Fix custody recovery handoff for required public DAV upload header ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:21:20 +02:00
tegwick	c55e27762f	Record failed custody finish diagnosis and tested recovery helper repair ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:09:39 +02:00
tegwick	fa186baaff	Record completed owner recovery preparation and final sync receipts ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:51:21 +02:00
tegwick	0ba6eefb36	Record live audit proof and bounded custody recovery handoff ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:49:31 +02:00
tegwick	36f2afcb38	Accept live empty custody integration and isolated recovery evidence ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:35:46 +02:00
tegwick	86c8379c14	Verify attended custody delivery and resume runtime acceptance ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:24:50 +02:00
tegwick	3a19022cc7	Record final custody release packet and preserved live settings ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:08:57 +02:00
tegwick	b190cf1526	Record verified custody image and deployment preflight ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:02:17 +02:00
tegwick	d3a890e002	Prepare empty custody baseline and record owner delivery handoff ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:53:32 +02:00
tegwick	db319335b2	Advance approved custody delivery and expose observation expiry ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:27:16 +02:00
tegwick	de4c4f84f5	Accept root grant ADR and approved OpenBao delivery design ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:01:13 +02:00
tegwick	add86c116f	Harden custody record reads and define blocked owner delivery requirements ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 18:40:41 +02:00
tegwick	40a6c7e739	Record scoped Emergent knowledge owner review ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10238-7ecc-78e2-903d-075f50e913cc	2026-10-03 17:34:43 +02:00
tegwick	639224b2eb	Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-03 00:01:14 +02:00
tegwick	d9d75b2d55	NK-WP-0039-T03: point repository coordinates at access-engine ... Runtime and package names stay flex-auth (FLEX-DEC-2026-013). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-09-30 18:46:05 +02:00
tegwick	cf0bd0da20	Propose ADR-0017: root-grant custody, tenant:platform mapping, observation evidence ... Answers user-engine's USER-WP-0037-T02 request; custody doc points to it. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-09-29 22:59:23 +02:00
tegwick	0150c8c37a	Runbook packs no longer carry exercise_status; note in the attended-procedure standard ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 295952@bnt-lap001 Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477	2026-09-29 21:28:56 +02:00
tegwick	93661631ff	Convert OpenBao and flex-auth tutorials to runbook packs (NK-WP-0044-T03) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 295952@bnt-lap001 Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477	2026-09-29 08:34:34 +02:00
tegwick	816610a7a1	Add NK-WP-0044 and NetKingdom runbook packs (legacy console wrapper, SSH pack) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 295952@bnt-lap001 Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477	2026-09-29 00:25:18 +02:00
tegwick	923e211365	Add flex-auth protected-system tutorial (NK-WP-0009-T05) ... Offline steps exercised against the secrets-engine example; live caller-auth steps remain unexercised. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 295952@bnt-lap001 Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477	2026-09-28 23:44:44 +02:00
tegwick	5497e2c100	Accept ADR-0009 with tenant-selectable isolation upgrade path ... Add shared-realm and dedicated-instance tiers selected by the IAM capability role, binding reference points (issuer invariance, subject preservation, tier-neutral declaration, drill), and NK-WP-0011-T09. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 295952@bnt-lap001 Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477	2026-09-28 23:41:12 +02:00
tegwick	0d460e3c02	Activate NK-WP-0009/0011; add tutorials slice and proposed ADR-0009 ... - docs/tutorials: template, OpenBao and SSH tutorials (unexercised) - tools/tutorial-verify + make tutorials-verify (NK-WP-0009-T06) - ADR-0009 proposed: expanded-mode Keycloak trigger and topology Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 295952@bnt-lap001 Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477	2026-09-28 23:31:48 +02:00
tegwick	947ad50252	ADR-0016: MFA is a user preference; workloads opt in. Close NK-WP-0037. ... - The operator's Vergabe recipient journey completed after the KeyCape fresh-login fix: sign-in, callback and account confirmation. - ADR-0016 records MFA as user preference by default, workload-requested step-up for all or part of a feature set, and an unchanged IAM v0.3 floor. - NK-WP-0042 (proposed) plans the step-up contract and user journey. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 299762@bnt-lap001 Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e	2026-09-23 22:21:48 +02:00