tegwick 074b3a047b NK-WP-0048-T05: fold ops-mason's materialization review into oidc-browser-relying-party ... Derive custody at platform/workloads/keycape/{client_id} (secret_ref is no longer case-settable), reuse the workload-kv-read-keycape-* policy family with templated bodies, add the external-secrets-keycape-{client_id} ESO role, name the catalog entry {consuming_service}-keycape-client and collapse the duplicate KV-path rollback. Schema and validator require a body on policy/role items. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 330051@bnt-lap001 Assistant-Session: b98d4912-95a3-4619-b7fb-57aa1db7407b		2026-10-08 23:27:22 +02:00
..
custody-record_v0.1.schema.json	Accept root grant ADR and approved OpenBao delivery design	2026-10-03 19:01:13 +02:00
playbook-capability-declaration_v0.1.schema.json	Implement NK-WP-0013 playbook capability contract	2026-05-22 14:49:25 +02:00
posture-feedback-report_v0.1.schema.json	feat(posture): add deterministic feedback proposals	2026-08-23 13:16:34 +02:00
security-case-type_v0.1.schema.json	NK-WP-0048-T05: fold ops-mason's materialization review into oidc-browser-relying-party	2026-10-08 23:27:22 +02:00
security-case_v0.1.schema.json	NK-WP-0048: canon accepted; SecurityCaseType schemas, validator and template (T01, T03)	2026-10-08 22:29:13 +02:00
security-scenario_v0.1.schema.json	feat(orchestration): compose security scenarios	2026-08-23 12:40:52 +02:00
tenancy-posture_v0.1.schema.json	feat(posture): add deterministic feedback proposals	2026-08-23 13:16:34 +02:00