860 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	dca999222f	Record off-host database recovery and prepare identity backup coverage ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 00:32:50 +02:00
tegwick	a1939a7d06	Prepare bounded off-host privacyIDEA recovery drill ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 00:09:13 +02:00
tegwick	c262470089	Inventory off-host recovery assets through existing bounded backup routes ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 23:58:41 +02:00
tegwick	d9557ba90e	Harden remaining bootstrap custody callers and prepare isolated recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 22:57:14 +02:00
tegwick	a6a9a3a266	Defer reef tasks so backlog remains stable during synchronization ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 22:29:08 +02:00
tegwick	258c85420e	Backlog NK-WP-0027 and document demand-driven resumption ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 22:27:57 +02:00
tegwick	b91bf46e82	Finish NK-WP-0022 with verified CoulombCore cluster retirement ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 22:10:34 +02:00
tegwick	341344a126	Prepare CoulombCore retirement and reconcile conditional recovery gate ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:54:35 +02:00
tegwick	c21ab4ccda	Checkpoint live hourly observation before independent acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:46:32 +02:00
tegwick	bd1bed731f	Register hourly cadence receiver and deploy verified durable Qonto collector ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:43:38 +02:00
tegwick	1ae0fe337a	Record approved hourly runtime rollout and native verification ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 20:57:08 +02:00
tegwick	9c4b1d7285	Record managed identity for shared coordination frame task ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 20:47:38 +02:00
tegwick	2d0681f361	Adopt shared hourly coordination frame and prepare guarded runtime patches ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 20:45:06 +02:00
tegwick	a83691398e	Reference established observer task for heartbeat repair ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:58:14 +02:00
tegwick	730e06dfe2	Revalidate cadence sources and prepare operational adoption gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:55:00 +02:00
tegwick	311620bbdb	Complete NK-WP-0031 with audit-core freshness adoption evidence ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:29:41 +02:00
tegwick	9442858535	Complete NK-WP-0051 with attended member and refusal evidence ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:23:19 +02:00
tegwick	c19eabc4ae	Accept the account-site session lines (NK-WP-0051-T03 done). ... Records the user-engine digest and that Authelia's authentication_level is not assurance, since KeyCape checks the one-time code. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 05:22:52 +02:00
tegwick	deedca52a4	Accept the KeyCape sign-in diagnosis page (NK-WP-0051-T02 done). ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 00:33:07 +02:00
tegwick	39b04113e5	Record the live openbao-admin signInDiagnosis flag (NK-WP-0051-T02). ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 00:25:20 +02:00
tegwick	c7ad8a5bf0	Prepare the openbao-admin signInDiagnosis flag rollout (NK-WP-0051-T02). ... One-line, byte-preserving edit of sso/keycape-config with inspect, server dry-run, attended apply and an exact rollback. No values are emitted. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 00:16:15 +02:00
tegwick	916bc7d5b8	Roll KeyCape to cdec9dd7 with the sign-in diagnosis page (NK-WP-0051-T02). ... Founder-run rollout: check-config valid, diff image-only, dry-run passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-15 00:09:12 +02:00
tegwick	cb634be39b	Record NK-WP-0051 owner implementations and fix the assurance source. ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:53:38 +02:00
tegwick	2cc09ceb05	Preview one uid's directory groups for sign-in diagnosis (NK-WP-0051-T04). ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:41:32 +02:00
tegwick	106d97f4a8	Write the sign-in diagnosis contract (NK-WP-0051-T01). ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:40:25 +02:00
custodian-sync	8f0a590200	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-14: - workplan status: ready → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:39:40 +02:00
tegwick	c12eb899b4	Sharpen NK-WP-0051 field names, opt-in page, and preview tool. ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:38:45 +02:00
tegwick	bb02e725f4	Record the State Hub ids for NK-WP-0051. ... Assistant: grok Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6	2026-10-14 22:27:40 +02:00
tegwick	4717863554	Add a workplan for workload sign-in diagnosis. ... NK-WP-0051 records who shows the uid, the group names, and whether this login verified a one-time code. Assistant: grok Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6	2026-10-14 22:25:51 +02:00
tegwick	e99c3e9791	docs(reuse): establish reviewed NetKingdom security capabilities ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-14 06:40:30 +02:00
repo-manager	1a36e857cc	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 02:11:30 +02:00
tegwick	4dffe2fe7a	fix: preserve resolver configuration during attended password cutover ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 01:52:37 +02:00
tegwick	ab25dde80d	security: repair LDAP group callers and fail incomplete T07 acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 01:17:35 +02:00
tegwick	e861f63513	security: reserve platform IAM groups in service group operations ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 00:44:33 +02:00
tegwick	84c5dbeec8	security: retire unsafe legacy LDAP lifecycle callers ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-14 00:08:42 +02:00
tegwick	276b95f6ba	security: reject Playwright audience and delivery alias collisions ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:44:41 +02:00
tegwick	eba6e1fdbb	security: bind Playwright activation and recovery to exact issuer state ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:39:58 +02:00
tegwick	5dd74dfbdf	security: prepare scoped Playwright consumer registrations and owner delivery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 23:13:48 +02:00
tegwick	30f0d27840	security: preserve realm configuration and remove shell credential evaluation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 22:47:24 +02:00
tegwick	96feef46ab	security: replace retired MFA diagnostic credential discovery with scoped checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 22:24:35 +02:00
tegwick	1cbe00fd78	security: preserve privacyIDEA key custody and restore the actual PVC ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:46:41 +02:00
tegwick	16021d3953	docs: distinguish remaining custody callers from repaired SOPS paths ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:10:23 +02:00
tegwick	8f808577d6	fix(security): constrain SOPS writes and custody argument handoff ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 21:03:24 +02:00
tegwick	b01a30bd49	fix(security): make service Secret updates private and conditional ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 20:20:42 +02:00
tegwick	7d4bb1653e	fix(security): reconcile KeyCape bootstrap with scoped factor custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 19:46:53 +02:00
tegwick	19a1c75d30	fix(security): make admin bootstrap private and non-overwriting ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 15:02:15 +02:00
tegwick	6ae4708ea0	fix(security): keep rotation credentials out of command output ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:54:10 +02:00
tegwick	681c5b0ea1	fix: decrypt SOPS through explicit custody into private output ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 12:08:35 +02:00
tegwick	4cf26a9bc8	fix: make custody input explicit and remove partial decryptions ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 10:53:30 +02:00
tegwick	b97f9f616f	fix: separate bootstrap encryption from private root custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a12d13-27f2-7163-b8c0-f682af02772c	2026-10-12 09:41:08 +02:00