coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
net-kingdom/docs/tutorials
History
tegwick 639224b2eb
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 6969@bnt-lap001
Assistant-Session: e8ae73f2-8385-4c9c-b714-94c3c52cdbc0
2026-10-03 00:01:14 +02:00
..
openbao-operating-path.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
protected-system-flex-auth.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
README.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
ssh-certificates-and-tunnels.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00

README.md

NetKingdom Security Pattern Tutorials

The tutorials are now runbook packs in runbooks/ for the runbook-tutorials engine (NK-WP-0009, NK-WP-0044). Run them through the engine's UI or rtut; check them with make runbooks-validate. The markdown verifier is retired.

Pack Replaces Status
runbooks/object-storage-sts/ (new) vend temporary S3 credentials rehearsed 2026-10-02
runbooks/ssh-certificates/ ssh-certificates-and-tunnels.md rehearsed 2026-10-02
runbooks/openbao-operating-path/ openbao-operating-path.md rehearsed 2026-10-02
runbooks/protected-system-flex-auth/ protected-system-flex-auth.md rehearsed 2026-10-02

Maturity is derived by the engine from run history, not declared here. The three markdown files are kept as superseded reference. The flex-auth one still holds check N4 (an expired token is refused), which needs a ten-minute wait and is not in the pack.

Rules that still apply to every pack: name the owning repo for each step, include verification and rollback, never put secrets in a pack, link owner runbooks instead of copying manifests, and use the named openbao-ui-railiance01 tunnel, never a public Bao URL (bao.coulomb.social is retired).