net-kingdom/tools
tegwick c43afd46a7 NK-WP-0056-T06 prep: admission helper, write-role window-open/close, service-client case; T15 evidence
- bounded-executor/prepare_admission.py: the live admission from the pilot example, pins read
  from the image's commit, window <= 2 h (audit-core's declared bound), validated.
- executor-lanes.py window-open/window-close: CCR-2026-0058's window-scoped write role, created
  for one admitted open window under attended platform-admin and deleted afterwards (idempotent).
- security-cases/nk-bind-executor-approval.yaml: the case of record, proposed (founder acceptance).
- docs/evidence/2026-11-04-nk56-t15-audit-sender: 8 checks against audit-core 876c3f6.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 523928@bnt-lap001
Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350
2026-11-04 01:49:40 +01:00
..
bootstrap-recovery List-first pruning of a full Storage Share CNPG dump folder (founder-run) 2026-10-29 23:43:00 +01:00
bounded-execution-admission NK-WP-0056-T10: examples re-pinned at 15c9cdb 2026-10-31 20:33:28 +01:00
coordination-frame build: derive coordination receiver from staged owner sources 2026-10-19 13:44:36 +02:00
custody-record Advance approved custody delivery and expose observation expiry 2026-10-03 19:27:16 +02:00
emission-cadence-profile NK-WP-0035-T04: readback records audit-core's independent_reader basis 2026-10-28 09:50:58 +01:00
execution-attribution-receipt NK-WP-0056-T15: receipt schema v0.1, validator and executor fixtures; audit sender exercise 2026-11-04 01:39:57 +01:00
iam-profile-conformance Implement NK-WP-0012 IAM profile specification 2026-05-22 14:35:31 +02:00
playbook-capability-contract feat(orchestration): compose security scenarios 2026-08-23 12:40:52 +02:00
posture-feedback NK-WP-0056-T07: founder kill switch and execution findings in posture feedback 2026-11-04 01:44:12 +01:00
rotation-lanes NK-WP-0055-T15: credential rotation-lane register with coverage check 2026-10-28 11:01:08 +01:00
security-bootstrap-console security: retire unsafe legacy LDAP lifecycle callers 2026-10-14 00:08:42 +02:00
security-case-types fix(cases): validate optional exact machine descriptor pins 2026-10-16 21:23:04 +02:00
security-scenario-composer feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
service-binds NK-WP-0056-T06 prep: admission helper, write-role window-open/close, service-client case; T15 evidence 2026-11-04 01:49:40 +01:00
service-identity Service identity: shorten the approval:read note (schema maxLength) 2026-11-01 10:43:45 +01:00
tenancy-posture feat(posture): add deterministic feedback proposals 2026-08-23 13:16:34 +02:00
prepare_forgejo_type12_acknowledgment.py Prepare reviewed Forgejo type 1.2 source decision package 2026-10-11 04:48:34 +02:00
security-tools.json NK-WP-0056-T01 done: Bounded Execution Admission v0.1 (proposed) 2026-10-31 13:55:18 +01:00
security_tools.py NK-WP-0054: security review; standard draft-3 as a SecurityCanon profile; agent security quickstart 2026-10-24 23:12:37 +02:00
sync-user-engine-delivery-secret.sh Harden remaining bootstrap custody callers and prepare isolated recovery 2026-10-15 22:57:14 +02:00
validate_forgejo_type12_acknowledgment.py Prepare reviewed Forgejo type 1.2 source decision package 2026-10-11 04:48:34 +02:00