coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Open security core for dev sec ops on kubernetes
719 commits 2 branches 0 tags 5.4 MiB
Find a file
Exact
tegwick 513fd03639 docs: confirm reset email receipt and track app acceptance 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680
2026-10-06 20:52:29 +02:00
.claude docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 2) 2026-07-08 16:41:16 +02:00
.forgejo/workflows Surface redacted directory bind failures before native onboarding 2026-09-14 04:46:29 +02:00
.githooks feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
.repo-manager Security Layer Model v0.5 — four reviews, nine changes 2026-08-29 02:54:25 +02:00
canon Accept root grant ADR and approved OpenBao delivery design 2026-10-03 19:01:13 +02:00
capabilities/playbooks feat(orchestration): compose security scenarios 2026-08-23 12:40:52 +02:00
docs Bind completed owner cadence changes and remaining observer gates 2026-10-03 23:00:28 +02:00
examples Prepare empty custody baseline and record owner delivery handoff 2026-10-03 19:53:32 +02:00
history Reconcile infrastructure workplans and retire stale flex-auth references 2026-09-28 12:40:03 +02:00
identity-provisioner Record the human onboarding run and fix password-setup usability 2026-09-23 21:48:29 +02:00
intakes Validate cadence contract and require functional MFA verification 2026-09-05 01:28:05 +02:00
keys feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
local-identity Report bootstrap audit failures and track cadence adoption work 2026-10-03 22:42:57 +02:00
projects/nk-rehearsal Add nk-rehearsal project for the NK-WP-0044-T05 pack rehearsal 2026-10-02 22:31:20 +02:00
registry feat(posture): add deterministic feedback proposals 2026-08-23 13:16:34 +02:00
runbooks ssh-certificates pack: use ops-warden's rehearsal config (WARDEN_CONFIG); record dry-run 2026-10-02 22:01:44 +02:00
sso-mfa Prepare platform SMTP notifier and scoped Authelia custody 2026-10-06 19:30:58 +02:00
tests Validate cadence contract and require functional MFA verification 2026-09-05 01:28:05 +02:00
tools Accept source cadence migrations and retain operational adoption gates 2026-10-03 22:48:58 +02:00
wiki Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
workplans docs: confirm reset email receipt and track app acceptance 2026-10-06 20:52:29 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-10-06 20:41:59 +02:00
.gitignore chore: ignore patch backups 2026-08-28 11:54:39 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
.sops.yaml feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
AGENTS.md Add shared Emergent Security knowledge pilot entrypoints 2026-10-03 15:25:38 +02:00
CLAUDE.md Add shared Emergent Security knowledge pilot entrypoints 2026-10-03 15:25:38 +02:00
CONFIG.md feat(sso-mfa): T05 SSO stack pivot — Keycloak → Authelia + LLDAP + KeyCape (NK-WP-0001-T05) 2026-03-19 08:31:51 +00:00
DECISIONS.md Decision for KeyCape Implementation Language Go 2026-03-26 09:21:17 +01:00
INTENT.md Declare net-kingdom's own layer and record positions on the v0.8 hold and §11 amendments. 2026-09-21 12:36:10 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-29 23:43:45 +02:00
Makefile CUST-WP-0075: NK-WP-0045 custody-record schema and validator; NK-WP-0042 reply 2026-10-03 12:56:22 +02:00
README.md Validate cadence contract and require functional MFA verification 2026-09-05 01:28:05 +02:00
SCOPE.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
SECURITY-COMPANION.md Validate cadence contract and require functional MFA verification 2026-09-05 01:28:05 +02:00
WORK-RECORDS.md docs: confirm reset email receipt and track app acceptance 2026-10-06 20:52:29 +02:00

README.md

NetKingdom

NetKingdom is the canonical security architecture, integration boundary, and bootstrap/reference implementation for NetKingdom environments. It defines identity, tenancy, credential, workload-zone, and security-composition contracts while leaving provider and Railiance execution in their owning repositories.

The dynamic, self-optimizing security platform is the long-term direction in INTENT.md, not a claim about current delivery.

Orientation

  • SCOPE.md — what this repo owns, current state, and when it is relevant
  • SECURITY-COMPANION.md — start here. The working form of the security layer model: what to declare, what binds you, what you may never claim about evidence, and the two things the estate cannot do yet
  • Security layer model — the statute the companion serves (accepted 2026-08-29): how the security estate is layered (Taxonomy / Tooling / Engines / Staff) and what each layer may own
  • Security scenario composition — deterministic, plan-only capability and trust composition
  • Posture feedback — deterministic, proposal-only posture and evidence remediation findings
  • Emission cadence security profile — NetKingdom obligations over the InfoTechCanon declaration contract; proposed pending owner-instance migration

Security Infrastructure Documents

  • secrets-engine security infrastructure boundary defines how secrets-engine participates in the NetKingdom security infrastructure and how it interacts with OpenBao, flex-auth, user-engine, ops-warden, ops-bridge, info-tech-canon, State Hub, and agents.