tegwick c43afd46a7 NK-WP-0056-T06 prep: admission helper, write-role window-open/close, service-client case; T15 evidence ... - bounded-executor/prepare_admission.py: the live admission from the pilot example, pins read from the image's commit, window <= 2 h (audit-core's declared bound), validated. - executor-lanes.py window-open/window-close: CCR-2026-0058's window-scoped write role, created for one admitted open window under attended platform-admin and deleted afterwards (idempotent). - security-cases/nk-bind-executor-approval.yaml: the case of record, proposed (founder acceptance). - docs/evidence/2026-11-04-nk56-t15-audit-sender: 8 checks against audit-core 876c3f6. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 523928@bnt-lap001 Assistant-Session: 6c737afb-9c14-4152-9f02-477214b9c350		2026-11-04 01:49:40 +01:00
..
isolated-keycape-native-fixture-manifest.json
lldap_groups_native_fixture.py
mfa_state_native_fixture.py
playwright_registration_native_test.go
realm_bootstrap_native_fixture.py
resolver_cutover_native_fixture.py
run_isolated_keycape_native_fixture.py
test_admin_bootstrap.py
test_admin_bootstrap_privacyidea.py
test_bootstrap_recovery_transport.py
test_bootstrap_secret_output.py
test_custody_entrypoints.py
test_executor_lanes.py
test_identity_backup_preparation.py
test_identity_bundle.py
test_identity_offline_recovery.py
test_identity_offsite.py
test_isolated_authelia_recovery.py
test_isolated_keycape_fixture_plan.py
test_isolated_keycape_recovery.py
test_isolated_keycape_session.py
test_isolated_lldap_recovery.py
test_isolated_privacyidea_mfa.py
test_isolated_privacyidea_recovery.py
test_keycape_attempt_receipt_verifier.py
test_keycape_bootstrap.py
test_keycape_directory_bind_rollout.py
test_kingpath_offsite.py
test_legacy_lldap_retirement.py
test_lldap_group_maintenance.py
test_mfa_state_diagnostic.py
test_openbao_lab_boundary.py
test_prepare_isolated_keycape.py
test_privacyidea_key_custody.py
test_privacyidea_offhost_recovery.py
test_privacyidea_verification.py
test_private_manifest_binding.py
test_prune_storage_share_dumps.py
test_realm_bootstrap.py
test_reconcile_keycape_client_secret.py
test_reset_authority_observer.py
test_reset_role_transition.py
test_resolver_cutover.py
test_retirement_and_bundle_boundaries.py
test_rotation_output.py
test_scaleway_backup_inventory.py
test_sealed_custody.py
test_security_tools_index.py
test_service_apply_caller.py
test_service_bind_lane.py
test_service_secret_custody.py
test_sops_private.py
test_sops_write.py
test_storage_share_inventory.py
test_user_engine_platform_expansion.py