Commit graph

Select branches

Hide pull requests

main

Mono Color

• 033b77f6ee Classify open workplans with flavor (CUST-WP-0072). main tegwick 2026-09-14 15:50:43 +02:00
• 8dc5050aa3 Pin identity-provisioner digest and readiness to directory preflight tegwick 2026-09-14 04:57:39 +02:00
• 84c4225542 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-14 04:47:36 +02:00
• c8e07615c3 Surface redacted directory bind failures before native onboarding tegwick 2026-09-14 04:46:29 +02:00
• d90e3b27f2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-14 00:22:15 +02:00
• dc42b0344c Record canonical portal hostname and callback cutover tegwick 2026-09-14 00:16:33 +02:00
• bea425cf78 Record deployed P06 policy and completed platform acceptance tegwick 2026-09-14 00:10:26 +02:00
• a5496170cf Implement scoped P06 authentication policy and guarded optional onboarding tegwick 2026-09-14 00:00:09 +02:00
• d1a169dedd Record verified P05 rollout and service recovery acceptance tegwick 2026-09-13 22:31:16 +02:00
• ce695337f5 Record completed P04 recovery rollout and acceptance tegwick 2026-09-13 21:19:13 +02:00
• 7df21d188b Connect P04 audited recovery to fresh-MFA platform browser flow tegwick 2026-09-13 21:05:33 +02:00
• 54a47dd810 Record verified enrollment assurance release and automate provider contract tests tegwick 2026-09-13 17:03:44 +02:00
• 37b4d70823 Establish scoped KeyCape factor custody and verified automatic renewal tegwick 2026-09-13 16:25:33 +02:00
• 5f57e06cf9 Record provider credential renewal release and remaining owner handoff tegwick 2026-09-13 14:27:35 +02:00
• 122d5deaa2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 12:30:38 +02:00
• 6420d80a70 Record and pin verified account journey release tegwick 2026-09-13 12:29:43 +02:00
• 84f7635ea1 Run journey CI in a pinned Python environment tegwick 2026-09-13 12:22:17 +02:00
• 11014b4d1c chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 12:21:20 +02:00
• a0cc947bf6 Support tenant-scoped directory lifecycle with isolation tests tegwick 2026-09-13 12:20:02 +02:00
• 0071dba99e Pin browser-verified account recovery and provider sign-out tegwick 2026-09-12 10:50:35 +02:00
• 91ea47ad01 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 03:20:42 +02:00
• 4d71e1bd16 Record deployed issuer and company-welcome configuration tegwick 2026-09-12 03:12:45 +02:00
• eb5aac2ace chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 02:55:32 +02:00
• ff1b25f515 Prepare pinned company-welcome and shared-issuer rollout patches tegwick 2026-09-12 02:53:55 +02:00
• 3db3eae394 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 02:45:59 +02:00
• 48a75b1a54 Bind password setup grants to approved company welcome pages tegwick 2026-09-12 02:43:31 +02:00
• c8ad7a85ea docs: record verified identity provisioner credential repair tegwick 2026-09-11 22:00:37 +02:00
• 2bc6e37f9f chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 22:00:19 +02:00
• a158d3badb repo.work.assign_missing_identifiers repo-manager 2026-09-11 21:43:11 +02:00
• 6a0773bcfa ops: record native tenant success and prepare attended identity repair tegwick 2026-09-11 21:41:26 +02:00
• 6f9cfe3dfd chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 21:30:08 +02:00
• 41840f6e95 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 21:19:17 +02:00
• 6cd89f0a7a fix: restore native user portal login and track tenant integration tegwick 2026-09-11 20:55:30 +02:00
• 5293a9bea3 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 20:55:12 +02:00
• f9e1611cc7 Register the tenant-provenance gap in 13 (GH-DEC-2026-013) tegwick 2026-09-09 23:20:22 +02:00
• 64394e99b9 Apply the v0.8 assent round: nine corrections, one request declined tegwick 2026-09-09 20:10:55 +02:00
• 303a584bd0 feat: accept KeyCape approval clients with tested recovery tegwick 2026-09-09 02:18:12 +02:00
• ce826cfa8d feat: exercise contained KeyCape approval client rollout tegwick 2026-09-09 01:32:45 +02:00
• 896c1200c0 Record exercised live issuer pin and unchanged production deployment tegwick 2026-09-09 00:40:23 +02:00
• ad9979b159 Add contained issuer-only configuration check and revision-guarded pin tegwick 2026-09-09 00:23:21 +02:00
• 46455439cf chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 13:45:29 +02:00
• ec1a59f274 chore(consistency): register NK-WP-0035 workplan and task identifiers tegwick 2026-09-07 08:47:38 +02:00
• 3f51f12d90 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 08:47:22 +02:00
• 165c2dc224 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 08:46:51 +02:00
• da7747dc42 Correct v0.8 §11: the emission-guarantee check contradicted the profile it cites tegwick 2026-09-07 08:44:52 +02:00
• 31a49a43eb Correct v0.8 §9.7.3: the binding correspondence as first cut could never pass tegwick 2026-09-06 15:26:51 +02:00
• 66eeabad38 Cut security-layer-model v0.8 (proposed) from gate-house's amendment set tegwick 2026-09-06 14:52:42 +02:00
• 4e07d60ff1 Validate cadence contract and require functional MFA verification tegwick 2026-09-05 01:28:05 +02:00
• d4d61b722e repo.work.assign_missing_identifiers repo-manager 2026-09-04 00:26:59 +02:00
• af6fdb3305 Repair archived workplan task metadata tegwick 2026-09-04 00:26:50 +02:00
• 9781102e29 Deploy KeyCape canonical subject fix tegwick 2026-09-01 00:03:08 +02:00
• d4e57e6312 docs: refresh published security canon index tegwick 2026-08-31 21:17:38 +02:00
• ce198fc290 derive state hub identifiers tegwick 2026-08-31 19:08:31 +02:00
• 9a7f5c9337 Intake NET-IN-0002: amend tenant-engine boundary contract tegwick 2026-08-29 13:02:58 +02:00
• 66dc491dc0 Accept the security layer model; companion v0.2 to the repository root tegwick 2026-08-29 11:28:49 +02:00
• ce2554fdc9 Security Layer Model v0.7 — write the rule v0.6 only announced tegwick 2026-08-29 10:44:53 +02:00
• 8a17551103 Add the agent companion to the security layer model tegwick 2026-08-29 09:25:40 +02:00
• 745dffb8ac Security Layer Model v0.6 — type the engines, name the gate, hold actuation at zero tegwick 2026-08-29 03:32:58 +02:00
• 0efa06fe5c Security Layer Model v0.5 — four reviews, nine changes tegwick 2026-08-29 02:54:25 +02:00
• bbdff49abf Refresh work-record index tegwick 2026-08-29 02:45:20 +02:00
• f4f013279d repo.work.create_intake NET-IN-0001 repo-manager 2026-08-28 23:01:51 +02:00
• 2aaf46ce95 Amend §11: who must declare, and what a declaration is tegwick 2026-08-28 23:01:35 +02:00
• 584738bd9f Security Layer Model v0.4 — audit-core assent and its corrections tegwick 2026-08-28 22:54:50 +02:00
• 90cc64f728 Security Layer Model v0.3 — assign approvals and maturity tegwick 2026-08-28 22:34:58 +02:00
• 27a31f3f8f Security Layer Model v0.2 — accepted tegwick 2026-08-28 22:00:31 +02:00
• c42086d475 Point layering note at the published standard tegwick 2026-08-28 21:21:07 +02:00
• 1c3a9b46e3 Add NetKingdom Security Layer Model v0.1 (proposed) tegwick 2026-08-28 20:59:00 +02:00
• 56f5ba8a2c Note NetKingdom layering review in INTENT tegwick 2026-08-28 20:33:42 +02:00
• d9baa06f7e chore(registrar): assign State Hub identifiers repo-manager 2026-08-28 11:56:08 +02:00
• 2dc7258bf5 chore: ignore patch backups tegwick 2026-08-28 11:54:39 +02:00
• 745b54d786 chore(work-records): regenerate tegwick 2026-08-28 11:52:57 +02:00
• 13d41b953e feat(workplan): open NK-WP-0034 for verification that verifies tegwick 2026-08-28 11:50:51 +02:00
• e7d326458c docs(custody): every credential says what it is tegwick 2026-08-28 11:42:51 +02:00
• 3252e68a84 chore(work-records): regenerate tegwick 2026-08-28 10:35:46 +02:00
• c99b8da41f docs: name where operator credentials live, and label unexercised procedures tegwick 2026-08-28 10:33:48 +02:00
• fd86397f52 fix(workplans): qualify archived ad-hoc identifiers tegwick 2026-08-28 00:34:01 +02:00
• 13001a1452 fix(workplans): qualify ad-hoc identifiers with the repository prefix tegwick 2026-08-28 00:28:23 +02:00
• c499843091 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-27 22:22:03 +02:00
• 0f5f56275c docs(nk-wp-0033): record the 2026-08-27 attended session findings tegwick 2026-08-27 22:20:48 +02:00
• 4a38511d11 fix(privacyidea): repair the resolver reconciliation script (NK-WP-0033) tegwick 2026-08-27 22:20:03 +02:00
• 7ce02957b3 fix(workplans): terminate frontmatter that ran into the document codex 2026-08-26 08:28:56 +02:00
• 0d01f08976 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 20:15:52 +02:00
• 82452d655f fix(workplans): adopt ADR-007 derived identifiers for unregistered records codex 2026-08-25 20:14:28 +02:00
• 623e9d24ba chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 19:54:47 +02:00
• 80c3a76431 chore: commit work in progress before registrar reconciliation codex 2026-08-25 19:53:36 +02:00
• eebf5de371 docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:21:25 +02:00
• 5b0a521c9a NK-WP-0033 add attended resolver reconciliation receipt tegwick 2026-08-23 15:18:29 +02:00
• eec7007c21 docs(security): pin privacyidea resolver reconciliation tegwick 2026-08-23 15:05:18 +02:00
• dc21d246e4 chore(consistency): record resolver follow-up status tegwick 2026-08-23 14:45:44 +02:00
• 1b60031b1d chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:44:13 +02:00
• f2e578cf3e feat(privacyidea): add guarded resolver reconciliation helper tegwick 2026-08-23 14:43:39 +02:00
• edee5c28ab docs: record downstream rotation follow-up tegwick 2026-08-23 14:42:59 +02:00
• c956ceba19 fix(authelia): load rotated client verifier from secret file tegwick 2026-08-23 14:39:32 +02:00
• d4333f02e0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:19:44 +02:00
• c24d67bb85 docs(security): map KeyCape rotation dependencies tegwick 2026-08-23 14:17:42 +02:00
• 9ae4e24305 chore(registrar): assign State Hub identifiers repo-manager 2026-08-23 14:08:12 +02:00
• 7b2c9e8aa9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-23 14:08:11 +02:00
• 9264a8a613 docs(security): open KeyCape exposure rotation incident tegwick 2026-08-23 14:05:07 +02:00
• 61aeafef71 feat(NK-WP-0032): admit OpenBao operator loopback callback tegwick 2026-08-23 13:58:18 +02:00
• 6700f1c1c3 docs(posture): record repaired estate baseline tegwick 2026-08-23 13:28:08 +02:00