net-kingdom

Author	SHA1	Message	Date
tegwick	c12eb899b4	Sharpen NK-WP-0051 field names, opt-in page, and preview tool. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:38:45 +02:00
tegwick	bb02e725f4	Record the State Hub ids for NK-WP-0051. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: grok Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6	2026-10-14 22:27:40 +02:00
tegwick	4717863554	Add a workplan for workload sign-in diagnosis. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details NK-WP-0051 records who shows the uid, the group names, and whether this login verified a one-time code. Assistant: grok Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6	2026-10-14 22:25:51 +02:00
tegwick	e99c3e9791	docs(reuse): establish reviewed NetKingdom security capabilities All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-14 06:40:30 +02:00
repo-manager	1a36e857cc	repo.work.assign_missing_identifiers All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 02:11:30 +02:00
tegwick	4dffe2fe7a	fix: preserve resolver configuration during attended password cutover All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 01:52:37 +02:00
tegwick	ab25dde80d	security: repair LDAP group callers and fail incomplete T07 acceptance All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 01:17:35 +02:00
tegwick	e861f63513	security: reserve platform IAM groups in service group operations Some checks failed CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Identity provider journey acceptance / provider (push) Failing after 16s Details Build and Publish identity-provisioner / build-and-push (push) Successful in 7s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 00:44:33 +02:00
tegwick	84c5dbeec8	security: retire unsafe legacy LDAP lifecycle callers All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 00:08:42 +02:00
tegwick	276b95f6ba	security: reject Playwright audience and delivery alias collisions All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:44:41 +02:00
tegwick	eba6e1fdbb	security: bind Playwright activation and recovery to exact issuer state All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:39:58 +02:00
tegwick	5dd74dfbdf	security: prepare scoped Playwright consumer registrations and owner delivery All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:13:48 +02:00
tegwick	30f0d27840	security: preserve realm configuration and remove shell credential evaluation All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 22:47:24 +02:00
tegwick	96feef46ab	security: replace retired MFA diagnostic credential discovery with scoped checks All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 22:24:35 +02:00
tegwick	1cbe00fd78	security: preserve privacyIDEA key custody and restore the actual PVC All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:46:41 +02:00
tegwick	16021d3953	docs: distinguish remaining custody callers from repaired SOPS paths All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:10:23 +02:00
tegwick	8f808577d6	fix(security): constrain SOPS writes and custody argument handoff All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:03:24 +02:00
tegwick	b01a30bd49	fix(security): make service Secret updates private and conditional All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 20:20:42 +02:00
tegwick	7d4bb1653e	fix(security): reconcile KeyCape bootstrap with scoped factor custody All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 19:46:53 +02:00
tegwick	19a1c75d30	fix(security): make admin bootstrap private and non-overwriting All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 15:02:15 +02:00
tegwick	6ae4708ea0	fix(security): keep rotation credentials out of command output All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:54:10 +02:00
tegwick	681c5b0ea1	fix: decrypt SOPS through explicit custody into private output All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:08:35 +02:00
tegwick	4cf26a9bc8	fix: make custody input explicit and remove partial decryptions All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 10:53:30 +02:00
tegwick	b97f9f616f	fix: separate bootstrap encryption from private root custody All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 09:41:08 +02:00
custodian-sync	d552bf253c	chore(consistency): sync task status from DB [auto] All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for net-kingdom Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 23:25:33 +02:00
tegwick	8bcd7b882f	NK-WP-0022-T08: founder retires coulombcore for machine reuse; host-side inventory, no cert rotation All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 1s Details Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 23:23:31 +02:00
tegwick	aeb26b37d2	Requalify tasks after founder attended-window choices (2026-10-11, round 3) All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 21:06:42 +02:00
tegwick	beba775bd2	Sync work-record index after requalification All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:51:34 +02:00
custodian-sync	349e6104a6	chore(consistency): sync task status from DB [auto] Some checks are pending CI Smoke / host-smoke (push) Waiting to run Details CI Smoke / container-smoke (push) Waiting to run Details Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for net-kingdom Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:51:33 +02:00
tegwick	5cc5e895e9	Requalify tasks after round-2 founder decisions and fix mislabeled human gates (2026-10-11) All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:50:47 +02:00
tegwick	511c92457c	Sync work-record index after triage All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:36:06 +02:00
custodian-sync	012efc7012	chore(consistency): sync task status from DB [auto] Some checks failed CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Has been cancelled Details Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for net-kingdom Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:36:05 +02:00
custodian-sync	0e0552bbf4	chore(consistency): renormalize lifecycle state [auto] Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:51 +02:00
custodian-sync	b45ef84127	chore(consistency): renormalize lifecycle state [auto] Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:51 +02:00
custodian-sync	efc9686d6f	chore(consistency): renormalize lifecycle state [auto] Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:50 +02:00
custodian-sync	e550ea8c22	chore(consistency): renormalize lifecycle state [auto] Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:50 +02:00
custodian-sync	90f5c72b7f	chore(consistency): renormalize lifecycle state [auto] Updated by fix-consistency on 2026-10-11: - workplan status: backlog → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:50 +02:00
tegwick	06595627a4	Demote off-critical-path workplans to residual/backlog (2026-10-11 triage) All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Founder-authorized triage; tasks unchanged. See the-custodian history/20261011-netkingdom-security-progress-assessment.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87	2026-10-11 20:35:13 +02:00
tegwick	96eb40c695	Preserve October 10 owner decision source packets All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:46:21 +02:00
tegwick	8964affdea	Retain reviewed security workplan consolidation and bindings Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:46:21 +02:00
tegwick	7ceac4372d	Publish reviewed bounded JWT ready handoff and retained owner history All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 18:31:04 +02:00
tegwick	bf6a44db6d	Bound JWT private input and gate native effects on public health All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 17:30:10 +02:00
tegwick	dfc357eb8a	Publish reviewed KEY39 lifecycle source and preserve failed review history All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 15:33:14 +02:00
tegwick	98f09f4d4b	Record independent KEY39 lifecycle deadline review All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 14:21:04 +02:00
tegwick	bb9b9b556c	Select explicitly pinned security case type revisions without fallback All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 09:09:24 +02:00
tegwick	f6856cdb53	Record founder source acknowledgment for isolated Forgejo type 1.2 All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 08:56:45 +02:00
tegwick	584a964684	Prepare reviewed Forgejo type 1.2 source decision package All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:48:34 +02:00
tegwick	c26b018328	Prepare reviewed Forgejo consumer ESO scope and truthful recovery records All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:09:46 +02:00
tegwick	6180f87894	Retain accepted Staff doctrine handoff and proposed successor adoption Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:04:20 +02:00
tegwick	d8eabe675b	Review exact one-use catalogue exception and recovery limits All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:33:47 +02:00

1 2 3 4 5 ...

834 commits