332 commits

Author	SHA1	Message	Date
tegwick	fa2cb57384	NK-WP-0048-T04: SecurityCaseType oidc-browser-relying-party 1.0 (proposed) ... Composes key-cape.oidc-client-registration; confidential/public conditions, one justified attended step, threat model, fit table of hand-built clients, Forgejo and public-portal examples. Validator gains when/required_when and provider discovery. 43 tests pass. Adds T08 (identity-provisioner groups ensure). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:45:31 +02:00
tegwick	d8cf42bab6	NK-WP-0048: canon accepted; SecurityCaseType schemas, validator and template (T01, T03) ... security-case-types_v0.1 accepted by the founder 2026-10-08. Adds JSON schemas for types and cases, tools/security-case-types/security_case_validator.py (validate-type, validate-case, render via the scenario composer, plan-only), and a runnable _template type with README sections, an example case and tests. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:29:13 +02:00
custodian-sync	c24ae4cca9	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-08: - workplan status: ready → active Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:22:13 +02:00
tegwick	df15d6900d	NK-WP-0048-T02 done: SecurityCaseType inventory ... 36 of 37 CCRs are already workload-kv-read; browser and service OIDC clients and forge read identities follow. Ranking and recommendation recorded. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:21:40 +02:00
tegwick	a49d5bcc6a	chore(consistency): record State Hub IDs for NK-WP-0048 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:19:55 +02:00
tegwick	4b21f7bdee	Propose SecurityCaseTypes canon and add NK-WP-0048 ... security-case-types_v0.1 (proposed): types designed once with docs, tests and an informed-decision; known cases light (accept, ops-mason materializes, ops-warden follows through). Founder direction 2026-10-08. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 22:17:03 +02:00
tegwick	1fbb8dbdf6	Register secrets-engine-openbao live and fold its env binding in (NK-WP-0046-T03) ... Founder live go caafe4be. Config resourceVersion 71471711 -> 71655453 with only this client added; KeyCape restarted on the kept image 6f79a2af. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 132360@bnt-lap001 Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b	2026-10-07 02:20:08 +02:00
tegwick	d644e6a79f	docs: complete native reset mail and personal login acceptance ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 20:54:42 +02:00
tegwick	513fd03639	docs: confirm reset email receipt and track app acceptance ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 20:52:29 +02:00
tegwick	c558c29bbd	Record successful SMTP activation and pending user recovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 20:38:27 +02:00
tegwick	17ec12e99d	Record approved SMTP infrastructure and attended-admission dependency ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 20:25:27 +02:00
tegwick	27c3edfb1c	Register reset-mail workplan identifiers and index ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 19:33:58 +02:00
tegwick	8620c47655	Prepare platform SMTP notifier and scoped Authelia custody ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 19:30:58 +02:00
tegwick	9d9aa74be4	NK-WP-0046-T02: keep the deployed KeyCape image for the registration ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 132360@bnt-lap001 Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b	2026-10-06 13:58:16 +02:00
tegwick	d842bcb722	Record State Hub ids for NK-WP-0046 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 132360@bnt-lap001 Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b	2026-10-06 13:36:41 +02:00
tegwick	a1e7302930	Prepare the secrets-engine-openbao KeyCape client registration as source only ... Owner-specific exact-match merge and rollback for sso/keycape-config, the one proposed env secretKeyRef, synthetic tests and NK-WP-0046 for KEY-WP-0037-T03. Nothing is applied; the live rollout waits on decision caafe4be. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 132360@bnt-lap001 Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b	2026-10-06 13:35:12 +02:00
tegwick	45a189a391	Qualify dormant federation waits without inventing adoption demand ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10391-6355-7b41-b0fa-3e14e874f091	2026-10-04 00:27:02 +02:00
tegwick	f170350f69	Accept source cadence migrations and retain operational adoption gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 22:48:58 +02:00
tegwick	d1e5661369	Report bootstrap audit failures and track cadence adoption work ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 22:42:57 +02:00
tegwick	d4d97acd57	Establish remaining owner requirements and correct blocked plan gates ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 22:21:11 +02:00
tegwick	0f2e8734e5	Finish NK-WP-0045 with verified attended custody recovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:59:22 +02:00
tegwick	7782619773	Bind tested custody repair and backup consumer refresh tasks ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:51:03 +02:00
tegwick	742b8a24e5	Record custody share diagnosis and owned repair blockers ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:49:24 +02:00
tegwick	3f9ef08135	Record persistent provider rejection and tested read-only share diagnosis ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:32:32 +02:00
tegwick	d9f890c58a	Fix custody recovery handoff for required public DAV upload header ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:21:20 +02:00
tegwick	c55e27762f	Record failed custody finish diagnosis and tested recovery helper repair ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 21:09:39 +02:00
tegwick	fa186baaff	Record completed owner recovery preparation and final sync receipts ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:51:21 +02:00
tegwick	0ba6eefb36	Record live audit proof and bounded custody recovery handoff ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:49:31 +02:00
tegwick	36f2afcb38	Accept live empty custody integration and isolated recovery evidence ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:35:46 +02:00
tegwick	86c8379c14	Verify attended custody delivery and resume runtime acceptance ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:24:50 +02:00
tegwick	3a19022cc7	Record final custody release packet and preserved live settings ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:08:57 +02:00
tegwick	b190cf1526	Record verified custody image and deployment preflight ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:02:17 +02:00
tegwick	d3a890e002	Prepare empty custody baseline and record owner delivery handoff ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:53:32 +02:00
tegwick	db319335b2	Advance approved custody delivery and expose observation expiry ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:27:16 +02:00
tegwick	de4c4f84f5	Accept root grant ADR and approved OpenBao delivery design ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:01:13 +02:00
tegwick	9b0be9b9d8	Record owner handoff receipts and full custody regression results ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 18:41:13 +02:00
tegwick	add86c116f	Harden custody record reads and define blocked owner delivery requirements ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 18:40:41 +02:00
repo-manager	9e3ad860d6	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10238-7ecc-78e2-903d-075f50e913cc	2026-10-03 17:35:11 +02:00
tegwick	40a6c7e739	Record scoped Emergent knowledge owner review ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10238-7ecc-78e2-903d-075f50e913cc	2026-10-03 17:34:43 +02:00
tegwick	17f92c9f11	CUST-WP-0075: NK-WP-0045 custody-record schema and validator; NK-WP-0042 reply ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 12:56:22 +02:00
tegwick	a8cebcfc94	CUST-WP-0075-T03: route human gates to hub decisions ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 03:31:07 +02:00
tegwick	639224b2eb	Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-03 00:01:14 +02:00
tegwick	61a09c9962	NK-WP-0009: close T02-T04 on rehearsal receipts; NK-WP-0044: record status ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-02 23:51:49 +02:00
tegwick	65e3af594c	NK-WP-0044: record first operator failure and QA proposals ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-02 23:10:46 +02:00
tegwick	2f48c9df8d	ssh-certificates pack: use ops-warden's rehearsal config (WARDEN_CONFIG); record dry-run ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-02 22:01:44 +02:00
tegwick	8091016bb3	ssh-certificates pack: inert rehearsal actor defaults, honest tunnel alternative; record ops-warden registry request ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-02 21:52:02 +02:00
tegwick	4660d242f8	NK-WP-0044: record dry-run findings and the rtut v0.2 CLI gap ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-01 22:05:50 +02:00
tegwick	0db2e1404d	NK-WP-0039-T04: retire runtime.yaml to owner pointers; finish NK-WP-0039 ... tenant-engine disposition TEN-DEC-2026-003. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-10-01 21:38:03 +02:00
tegwick	d9d75b2d55	NK-WP-0039-T03: point repository coordinates at access-engine ... Runtime and package names stay flex-auth (FLEX-DEC-2026-013). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-09-30 18:46:05 +02:00
tegwick	445ffbdc5a	NK-WP-0039: record reply to flex-auth FLEX-WP-0020-T04 ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 6969@bnt-lap001 Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0	2026-09-30 15:22:47 +02:00