net-kingdom/workplans
tegwick 329a03d149
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Roll back Authelia to pinned 4.38 after 4.39.28 broke KeyCape token exchange
4.39 rejects KeyCape's in-cluster http back-channel token call
(invalid X-Forwarded-Proto 'http'). Operator restored the pre-upgrade DB
and the 4.38 digest; incident recorded in NK-WP-0041-T02.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 299762@bnt-lap001
Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e
2026-09-24 01:54:12 +02:00
..
archived repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-07-02.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-08-14.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-08-23.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof 2026-07-02 22:08:33 +02:00
NK-WP-0009-netkingdom-security-pattern-tutorials.md Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:43 +02:00
NK-WP-0011-enterprise-federation-saml.md Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:43 +02:00
NK-WP-0021-activity-core-ops-sso-operators.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:43 +02:00
NK-WP-0023-user-engine-portal-platform-integration.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0024-user-engine-portal-integration-expansion.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0025-public-self-registration-and-application-jit.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0026-flex-auth-caller-identity-rollout.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0027-reef-placement-reconciliation.md Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:43 +02:00
NK-WP-0028-canon-publication-and-grouping-semantics.md chore(registrar): assign State Hub identifiers 2026-08-22 14:54:45 +02:00
NK-WP-0029-scope-and-intent-reconciliation.md chore(registrar): assign State Hub identifiers 2026-08-23 12:02:15 +02:00
NK-WP-0030-deterministic-security-scenario-composition.md feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
NK-WP-0031-deterministic-posture-feedback.md Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:43 +02:00
NK-WP-0032-openbao-operator-loopback-callback.md Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:43 +02:00
NK-WP-0033-keycape-secret-exposure-rotation.md Close NK-WP-0034: verify-t06 proven FAIL-then-PASS on production 2026-09-23 21:20:19 +02:00
NK-WP-0034-verification-that-verifies.md Close NK-WP-0034: verify-t06 proven FAIL-then-PASS on production 2026-09-23 21:20:19 +02:00
NK-WP-0035-emission-cadence-security-profile.md Classify open workplans with flavor (CUST-WP-0072). 2026-09-14 15:50:43 +02:00
NK-WP-0036-restore-user-portal-client-registration.md Record the human onboarding run and fix password-setup usability 2026-09-23 21:48:29 +02:00
NK-WP-0037-vergabe-company-welcome.md ADR-0016: MFA is a user preference; workloads opt in. Close NK-WP-0037. 2026-09-23 22:21:48 +02:00
NK-WP-0038-tenant-scoped-identity-lifecycle.md Record and pin verified account journey release 2026-09-13 12:29:43 +02:00
NK-WP-0039-flex-auth-access-engine-coordinate-intake.md chore(consistency): record NK-WP-0039 hub task ids 2026-09-23 20:02:48 +02:00
NK-WP-0040-execution-attribution-receipt.md Review: NK-WP-0040 ready, NK-WP-0042 backlog (operator decision) 2026-09-24 01:23:00 +02:00
NK-WP-0041-onboarding-journey-usability.md Roll back Authelia to pinned 4.38 after 4.39.28 broke KeyCape token exchange 2026-09-24 01:54:12 +02:00
NK-WP-0042-workload-mfa-step-up.md Review: NK-WP-0040 ready, NK-WP-0042 backlog (operator decision) 2026-09-24 01:23:00 +02:00