Commit graph

  • 9781102e29 Deploy KeyCape canonical subject fix main tegwick 2026-09-01 00:03:08 +02:00
  • d4e57e6312 docs: refresh published security canon index tegwick 2026-08-31 21:17:38 +02:00
  • ce198fc290 derive state hub identifiers tegwick 2026-08-31 19:08:31 +02:00
  • 9a7f5c9337 Intake NET-IN-0002: amend tenant-engine boundary contract tegwick 2026-08-29 13:02:58 +02:00
  • 66dc491dc0 Accept the security layer model; companion v0.2 to the repository root tegwick 2026-08-29 11:28:49 +02:00
  • ce2554fdc9 Security Layer Model v0.7 — write the rule v0.6 only announced tegwick 2026-08-29 10:44:53 +02:00
  • 8a17551103 Add the agent companion to the security layer model tegwick 2026-08-29 09:25:40 +02:00
  • 745dffb8ac Security Layer Model v0.6 — type the engines, name the gate, hold actuation at zero tegwick 2026-08-29 03:32:58 +02:00
  • 0efa06fe5c Security Layer Model v0.5 — four reviews, nine changes tegwick 2026-08-29 02:54:25 +02:00
  • bbdff49abf Refresh work-record index tegwick 2026-08-29 02:45:20 +02:00
  • f4f013279d repo.work.create_intake NET-IN-0001 repo-manager 2026-08-28 23:01:51 +02:00
  • 2aaf46ce95 Amend §11: who must declare, and what a declaration is tegwick 2026-08-28 23:01:35 +02:00
  • 584738bd9f Security Layer Model v0.4 — audit-core assent and its corrections tegwick 2026-08-28 22:54:50 +02:00
  • 90cc64f728 Security Layer Model v0.3 — assign approvals and maturity tegwick 2026-08-28 22:34:58 +02:00
  • 27a31f3f8f Security Layer Model v0.2 — accepted tegwick 2026-08-28 22:00:31 +02:00
  • c42086d475 Point layering note at the published standard tegwick 2026-08-28 21:21:07 +02:00
  • 1c3a9b46e3 Add NetKingdom Security Layer Model v0.1 (proposed) tegwick 2026-08-28 20:59:00 +02:00
  • 56f5ba8a2c Note NetKingdom layering review in INTENT tegwick 2026-08-28 20:33:42 +02:00
  • d9baa06f7e chore(registrar): assign State Hub identifiers repo-manager 2026-08-28 11:56:08 +02:00
  • 2dc7258bf5 chore: ignore patch backups tegwick 2026-08-28 11:54:39 +02:00
  • 745b54d786 chore(work-records): regenerate tegwick 2026-08-28 11:52:57 +02:00
  • 13d41b953e feat(workplan): open NK-WP-0034 for verification that verifies tegwick 2026-08-28 11:50:51 +02:00
  • e7d326458c docs(custody): every credential says what it is tegwick 2026-08-28 11:42:51 +02:00
  • 3252e68a84 chore(work-records): regenerate tegwick 2026-08-28 10:35:46 +02:00
  • c99b8da41f docs: name where operator credentials live, and label unexercised procedures tegwick 2026-08-28 10:33:48 +02:00
  • fd86397f52 fix(workplans): qualify archived ad-hoc identifiers tegwick 2026-08-28 00:34:01 +02:00
  • 13001a1452 fix(workplans): qualify ad-hoc identifiers with the repository prefix tegwick 2026-08-28 00:28:23 +02:00
  • c499843091 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-27 22:22:03 +02:00
  • 0f5f56275c docs(nk-wp-0033): record the 2026-08-27 attended session findings tegwick 2026-08-27 22:20:48 +02:00
  • 4a38511d11 fix(privacyidea): repair the resolver reconciliation script (NK-WP-0033) tegwick 2026-08-27 22:20:03 +02:00
  • 7ce02957b3 fix(workplans): terminate frontmatter that ran into the document codex 2026-08-26 08:28:56 +02:00
  • 0d01f08976 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 20:15:52 +02:00
  • 82452d655f fix(workplans): adopt ADR-007 derived identifiers for unregistered records codex 2026-08-25 20:14:28 +02:00
  • 623e9d24ba chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 19:54:47 +02:00
  • 80c3a76431 chore: commit work in progress before registrar reconciliation codex 2026-08-25 19:53:36 +02:00
  • eebf5de371 docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:21:25 +02:00
  • 5b0a521c9a NK-WP-0033 add attended resolver reconciliation receipt tegwick 2026-08-23 15:18:29 +02:00
  • eec7007c21 docs(security): pin privacyidea resolver reconciliation tegwick 2026-08-23 15:05:18 +02:00
  • dc21d246e4 chore(consistency): record resolver follow-up status tegwick 2026-08-23 14:45:44 +02:00
  • 1b60031b1d chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:44:13 +02:00
  • f2e578cf3e feat(privacyidea): add guarded resolver reconciliation helper tegwick 2026-08-23 14:43:39 +02:00
  • edee5c28ab docs: record downstream rotation follow-up tegwick 2026-08-23 14:42:59 +02:00
  • c956ceba19 fix(authelia): load rotated client verifier from secret file tegwick 2026-08-23 14:39:32 +02:00
  • d4333f02e0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:19:44 +02:00
  • c24d67bb85 docs(security): map KeyCape rotation dependencies tegwick 2026-08-23 14:17:42 +02:00
  • 9ae4e24305 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 14:08:12 +02:00
  • 7b2c9e8aa9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:08:11 +02:00
  • 9264a8a613 docs(security): open KeyCape exposure rotation incident tegwick 2026-08-23 14:05:07 +02:00
  • 61aeafef71 feat(NK-WP-0032): admit OpenBao operator loopback callback tegwick 2026-08-23 13:58:18 +02:00
  • 6700f1c1c3 docs(posture): record repaired estate baseline tegwick 2026-08-23 13:28:08 +02:00
  • d542335f99 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 13:26:15 +02:00
  • d0d5964037 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:26:14 +02:00
  • 7f4e4e9f57 feat(orchestration): compose KeyCape C1 and C2b tegwick 2026-08-23 13:24:55 +02:00
  • 21f477f699 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 13:18:34 +02:00
  • cfc9e7d0cb feat(posture): add deterministic feedback proposals tegwick 2026-08-23 13:16:34 +02:00
  • dc8da422f8 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 12:42:14 +02:00
  • b73d22cea6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 12:42:13 +02:00
  • d96aab2321 feat(orchestration): compose security scenarios tegwick 2026-08-23 12:40:52 +02:00
  • ad46cc89fc chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 12:02:15 +02:00
  • 6204184930 docs(scope): reconcile capability with intent tegwick 2026-08-23 11:58:39 +02:00
  • 2c8a296c3a chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 11:28:30 +02:00
  • 3491c294a2 docs(canon): advance audit-core posture to evidenced E2 tegwick 2026-08-23 10:45:04 +02:00
  • 104d5c684c docs(canon): record security zone adoption tegwick 2026-08-22 15:43:52 +02:00
  • a286b91652 docs(workplan): align managed workload declaration wording tegwick 2026-08-22 14:55:10 +02:00
  • db2ef631c6 chore(registrar): assign State Hub identifiers repo-manager 2026-08-22 14:54:45 +02:00
  • f7b4a834ef chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 14:54:44 +02:00
  • bee22db620 docs(canon): reconcile workload and tenant grouping semantics tegwick 2026-08-22 14:53:31 +02:00
  • ad2057acff chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 14:51:40 +02:00
  • 337484ae16 docs(canon): publish security zones v0.1 tegwick 2026-08-22 14:42:52 +02:00
  • f780289b4f chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 13:57:10 +02:00
  • c430def5cb chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 13:23:21 +02:00
  • 739b838b9f chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-21 23:52:30 +02:00
  • 25ed9281bb fix(workplans): normalize legacy task identifiers tegwick 2026-08-21 23:51:36 +02:00
  • 429c91b3a2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 22:07:23 +02:00
  • 9e041e3662 tenancy-posture draft-9: enforcement stance is not a seventh axis; reefs are canon's defect tegwick 2026-08-19 22:06:20 +02:00
  • 4a915ce6c7 NK-WP-0026 finished: user-engine caller identity verified live against railiance01 tegwick 2026-08-19 22:01:12 +02:00
  • dae0dc681a chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 01:12:30 +02:00
  • ccc2618dae Separate IAM Profile ids and mark v0.2 superseded tegwick 2026-08-19 01:09:18 +02:00
  • 0e0962e68b chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-18 22:40:04 +02:00
  • ba5d8642e9 Add first-wave NetKingdom arc42 stub tegwick 2026-08-18 22:35:47 +02:00
  • f4f885289e docs: point user-engine apply home at rapp-user-engine tegwick 2026-08-18 12:39:24 +02:00
  • cced59d3aa Publish tenancy posture draft-8 contract tegwick 2026-08-18 12:15:41 +02:00
  • 3efd5866ff chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-18 07:28:29 +02:00
  • 357109b2ab Tenancy Posture draft-7: three more reviews, eleven changes tegwick 2026-08-17 22:08:19 +02:00
  • 2744ce7d36 Tenancy Posture draft-6: the first review changed the document tegwick 2026-08-17 21:38:35 +02:00
  • cb32f6d68c Correct question 3: whitehat is NetKingdom's tegwick 2026-08-17 18:01:17 +02:00
  • e25545d9d0 Tenancy Posture §8.3: service class, and why there is no QoS axis tegwick 2026-08-17 17:41:12 +02:00
  • 101e659725 Tenancy Posture: question 3 has an owner tegwick 2026-08-17 16:41:56 +02:00
  • c31a5e3f8b Refresh completed ad-hoc work index tegwick 2026-08-14 20:12:52 +02:00
  • a9b1cd98ff chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-14 19:59:17 +02:00
  • 6f755d2615 Finish audit sender custody residual tegwick 2026-08-14 19:59:14 +02:00
  • 797a941dd3 Remove duplicate ad-hoc State Hub binding tegwick 2026-08-14 19:50:46 +02:00
  • 52f9b200e8 Track and harden NK-WP-0025 residuals tegwick 2026-08-14 19:35:46 +02:00
  • d9871e4de8 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-14 19:35:45 +02:00
  • b47eec5a42 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-14 19:35:16 +02:00
  • 9448384a69 Refresh completed registration work record tegwick 2026-08-14 19:16:12 +02:00
  • b93836b97b chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-14 19:16:11 +02:00
  • ded2398bb3 Finish public registration and JIT acceptance tegwick 2026-08-14 19:15:06 +02:00
  • 2a2d8ba055 Align provisioned identities with OIDC subjects tegwick 2026-08-14 18:53:37 +02:00
  • cbbd66697f Refresh NetKingdom work records tegwick 2026-08-14 17:42:09 +02:00