Select explicitly pinned security case type revisions without fallback
2026-10-11 09:09:24 +02:00
Record founder source acknowledgment for isolated Forgejo type 1.2
2026-10-11 08:56:45 +02:00
Preserve exact served security layer v0.7 revision artifacts
2026-10-11 02:15:29 +02:00
Record exact conditional technical review of user readback rollout
2026-10-11 02:44:21 +02:00
Record off-host database recovery and prepare identity backup coverage
2026-10-16 00:32:50 +02:00
NK-WP-0035-T04: attended receiver readback; presence 3/3, counts refused by reconciliation source scope
2026-10-23 10:56:40 +02:00
Finish NK-WP-0022 with verified CoulombCore cluster retirement
2026-10-15 22:10:34 +02:00
Complete NK-WP-0031 with audit-core freshness adoption evidence
2026-10-15 19:29:41 +02:00
Complete NK-WP-0051 with attended member and refusal evidence
2026-10-15 19:23:19 +02:00
feat(recovery): prepare full identity backup and bootstrap handoff
2026-10-16 01:37:11 +02:00
ops(recovery): verify complete hardened recurring backup service
2026-10-16 09:41:02 +02:00
docs(recovery): accept retained token material and audit continuity
2026-10-16 21:14:23 +02:00
NK-WP-0049: T33 attempt assembly requires secrets-engine selector --admission; T35/T36 owner prep
2026-10-21 01:04:19 +02:00
docs: index privacyIDEA and KeyCape helper entry points from the NK49 caller ledger
2026-10-23 00:19:09 +02:00
NK-WP-0049-T18: attended original KeyCape attempt verified in isolation; receipt retained outside Git by hash
2026-10-23 20:01:28 +02:00
NK-WP-0049-T17: done; founder ran the isolated Authelia restore on the actual backup
2026-10-24 17:25:16 +02:00
NK-WP-0049-T19: done; founder ran the isolated existing-token MFA check on the actual backup
2026-10-24 18:49:33 +02:00
NK-WP-0054-T05 phase 3b: restore launchers follow the archived identities; startup proof
2026-10-29 22:11:19 +01:00
NK-WP-0053-T02/T04: first admin-operated identity restore drill passed (2026-10-29)
2026-10-30 00:12:41 +01:00
NK-WP-0056-T04: custody client secret reconciled with live; re-sealed custody
2026-10-30 22:01:30 +01:00
NK-WP-0055-T08: kingpath off-site receipts uploaded and verified
2026-10-30 22:22:35 +01:00
NK-WP-0056-T04: svc-provisioner bind delivered from OpenBao; setup and verify receipts
2026-10-30 23:19:10 +01:00
NK-WP-0054-T05: post-split restore drill passed as admin; SI-X1 retired
2026-10-31 08:31:17 +01:00
NK-WP-0056-T02: record access-engine, secrets-engine and railiance-platform answers; LLDAP self-rotation proven
2026-10-31 14:30:33 +01:00
NK-WP-0056-T04: svc-authelia bind delivered from OpenBao; setup and verify receipts
2026-10-31 10:11:07 +01:00
NK-WP-0056-T04: svc-keycape bind delivered from OpenBao; bindPW cleared from keycape-config
2026-10-31 10:52:05 +01:00
NK-WP-0056-T04 done: svc-privacyidea written through from OpenBao; all four binds in platform custody
2026-10-31 11:19:21 +01:00
NK-WP-0056-T08 done: synthetic identity stack on pinned images; broken binds fail closed
2026-10-31 12:27:01 +01:00
NK-WP-0056-T09 done: syn-journey live, synthetic journey passes at aal2
2026-10-31 13:33:31 +01:00
NK-WP-0056-T10: executor lanes set up and verified (founder-run receipts)
2026-10-31 19:47:29 +01:00
NK-WP-0056-T10 done: unattended live journey passes at aal2
2026-10-31 20:48:42 +01:00
NK-WP-0056-T10: one OpenBao login per lane; renew before the 15m lease ends
2026-10-31 19:01:44 +01:00
NK-WP-0056-T12 done: pilot operations; synthetic rotation and revert pass
2026-10-31 16:24:17 +01:00
Prepare guarded reset-role transition and native recovery proof
2026-10-31 14:26:17 +01:00
feat: accept KeyCape approval clients with tested recovery
2026-09-09 02:18:12 +02:00
feat: accept KeyCape approval clients with tested recovery
2026-09-09 02:18:12 +02:00
Record exercised live issuer pin and unchanged production deployment
2026-09-09 00:40:23 +02:00
feat: accept KeyCape approval clients with tested recovery
2026-09-09 02:18:12 +02:00
docs: record verified identity provisioner credential repair
2026-09-11 22:00:37 +02:00
Bind completed owner cadence changes and remaining observer gates
2026-10-03 23:00:28 +02:00
Accept source cadence migrations and retain operational adoption gates
2026-10-03 22:48:58 +02:00
Record scoped Emergent knowledge owner review
2026-10-03 17:34:43 +02:00
Establish remaining owner requirements and correct blocked plan gates
2026-10-03 22:21:11 +02:00
Verify attended custody delivery and resume runtime acceptance
2026-10-03 20:24:50 +02:00
Accept live empty custody integration and isolated recovery evidence
2026-10-03 20:35:46 +02:00
Verify attended custody delivery and resume runtime acceptance
2026-10-03 20:24:50 +02:00
Record live audit proof and bounded custody recovery handoff
2026-10-03 20:49:31 +02:00
Record failed custody finish diagnosis and tested recovery helper repair
2026-10-03 21:09:39 +02:00
Record persistent provider rejection and tested read-only share diagnosis
2026-10-03 21:32:32 +02:00
Fix custody recovery handoff for required public DAV upload header
2026-10-03 21:21:20 +02:00
Finish NK-WP-0045 with verified attended custody recovery
2026-10-03 21:59:22 +02:00
Record custody share diagnosis and owned repair blockers
2026-10-03 21:49:24 +02:00
Finish NK-WP-0045 with verified attended custody recovery
2026-10-03 21:59:22 +02:00
Accept live empty custody integration and isolated recovery evidence
2026-10-03 20:35:46 +02:00
Accept live empty custody integration and isolated recovery evidence
2026-10-03 20:35:46 +02:00
NK-WP-0049-T21: correct the factor-diagnostic row with source and live evidence
2026-10-27 21:57:49 +01:00
NK-WP-0055-T13: done; king path drilled and production SSO-down walk passed
2026-10-28 01:04:29 +01:00
NK-WP-0055-T13: done; king path drilled and production SSO-down walk passed
2026-10-28 01:04:29 +01:00
Complete user-engine runtime custody
2026-07-30 00:40:43 +02:00
