coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
net-kingdom/docs/tutorials
History
Exact
tegwick 1c2d0c2cf6 Follow the access-engine CLI rename: ./cmd/flex-auth -> ./cmd/access-engine 
FLEX-DEC-2026-020; the old path is a stub that exits 2. Runtime names unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 736651@bnt-lap001
Assistant-Session: f6189624-fd64-4109-b53e-f8a59ca8a2d8
2026-10-10 15:28:05 +02:00
..
openbao-operating-path.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
protected-system-flex-auth.md Follow the access-engine CLI rename: ./cmd/flex-auth -> ./cmd/access-engine 2026-10-10 15:28:05 +02:00
README.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
ssh-certificates-and-tunnels.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00

README.md

NetKingdom Security Pattern Tutorials

The tutorials are now runbook packs in runbooks/ for the runbook-tutorials engine (NK-WP-0009, NK-WP-0044). Run them through the engine's UI or rtut; check them with make runbooks-validate. The markdown verifier is retired.

Pack Replaces Status
runbooks/object-storage-sts/ (new) vend temporary S3 credentials rehearsed 2026-10-02
runbooks/ssh-certificates/ ssh-certificates-and-tunnels.md rehearsed 2026-10-02
runbooks/openbao-operating-path/ openbao-operating-path.md rehearsed 2026-10-02
runbooks/protected-system-flex-auth/ protected-system-flex-auth.md rehearsed 2026-10-02

Maturity is derived by the engine from run history, not declared here. The three markdown files are kept as superseded reference. The flex-auth one still holds check N4 (an expired token is refused), which needs a ten-minute wait and is not in the pack.

Rules that still apply to every pack: name the owning repo for each step, include verification and rollback, never put secrets in a pack, link owner runbooks instead of copying manifests, and use the named openbao-ui-railiance01 tunnel, never a public Bao URL (bao.coulomb.social is retired).