| .. |
|
isolated-keycape-native-fixture-manifest.json
|
fix(recovery): require one original client and refine native owner gates
|
2026-10-17 04:15:30 +02:00 |
|
lldap_groups_native_fixture.py
|
security: repair LDAP group callers and fail incomplete T07 acceptance
|
2026-10-14 01:17:35 +02:00 |
|
mfa_state_native_fixture.py
|
security: replace retired MFA diagnostic credential discovery with scoped checks
|
2026-10-13 22:24:35 +02:00 |
|
playwright_registration_native_test.go
|
security: prepare scoped Playwright consumer registrations and owner delivery
|
2026-10-13 23:13:48 +02:00 |
|
realm_bootstrap_native_fixture.py
|
security: preserve realm configuration and remove shell credential evaluation
|
2026-10-13 22:47:24 +02:00 |
|
resolver_cutover_native_fixture.py
|
fix: preserve resolver configuration during attended password cutover
|
2026-10-14 01:52:37 +02:00 |
|
run_isolated_keycape_native_fixture.py
|
feat(recovery): add isolated KeyCape restore and loss cleanup proof
|
2026-10-16 23:35:54 +02:00 |
|
test_admin_bootstrap.py
|
fix(security): make admin bootstrap private and non-overwriting
|
2026-10-12 15:02:15 +02:00 |
|
test_admin_bootstrap_privacyidea.py
|
fix(security): make admin bootstrap private and non-overwriting
|
2026-10-12 15:02:15 +02:00 |
|
test_bootstrap_recovery_transport.py
|
Harden remaining bootstrap custody callers and prepare isolated recovery
|
2026-10-15 22:57:14 +02:00 |
|
test_bootstrap_secret_output.py
|
Harden remaining bootstrap custody callers and prepare isolated recovery
|
2026-10-15 22:57:14 +02:00 |
|
test_custody_entrypoints.py
|
fix: make custody input explicit and remove partial decryptions
|
2026-10-12 10:53:30 +02:00 |
|
test_identity_backup_preparation.py
|
Record off-host database recovery and prepare identity backup coverage
|
2026-10-16 00:32:50 +02:00 |
|
test_identity_bundle.py
|
fix(recovery): bind admitted host and record live provider scope approval
|
2026-10-16 07:44:36 +02:00 |
|
test_identity_offline_recovery.py
|
Fix private recovery prompts on nonseekable terminals
|
2026-10-16 19:56:06 +02:00 |
|
test_identity_offsite.py
|
feat(recovery): verify scoped delivery and create first full offsite bundle
|
2026-10-16 09:21:55 +02:00 |
|
test_isolated_authelia_recovery.py
|
NK-WP-0049-T41: isolated Authelia restore stage, fixture-tested
|
2026-10-24 17:14:52 +02:00 |
|
test_isolated_keycape_fixture_plan.py
|
feat(recovery): add isolated KeyCape restore and loss cleanup proof
|
2026-10-16 23:35:54 +02:00 |
|
test_isolated_keycape_recovery.py
|
fix(recovery): require one original client and refine native owner gates
|
2026-10-17 04:15:30 +02:00 |
|
test_isolated_keycape_session.py
|
feat(recovery): add isolated KeyCape restore and loss cleanup proof
|
2026-10-16 23:35:54 +02:00 |
|
test_isolated_lldap_recovery.py
|
NK-WP-0054-T05 phase 3b: restore launchers follow the archived identities; startup proof
|
2026-10-29 22:11:19 +01:00 |
|
test_isolated_privacyidea_mfa.py
|
NK-WP-0049-T42: rebuild the MFA stage around the restored directory; check by user and realm
|
2026-10-24 18:42:35 +02:00 |
|
test_isolated_privacyidea_recovery.py
|
Prepare isolated privacyIDEA token and audit recovery checks
|
2026-10-16 21:00:36 +02:00 |
|
test_keycape_attempt_receipt_verifier.py
|
NK-WP-0049-T33: independent attempt receipt verifier, retained location and ACME reissue step
|
2026-10-23 00:22:50 +02:00 |
|
test_keycape_bootstrap.py
|
NK-WP-0054-T05 phase 2b: each directory consumer binds with its own account
|
2026-10-28 20:33:04 +01:00 |
|
test_keycape_directory_bind_rollout.py
|
NK-WP-0056-T04: svc-keycape bind lane (source only, CCR-2026-0054)
|
2026-10-31 10:31:30 +01:00 |
|
test_kingpath_offsite.py
|
NK-WP-0055-T05 done by decision; T08 sealed Storage Share copy with digest-bound verify
|
2026-10-28 12:37:46 +01:00 |
|
test_legacy_lldap_retirement.py
|
security: retire unsafe legacy LDAP lifecycle callers
|
2026-10-14 00:08:42 +02:00 |
|
test_lldap_group_maintenance.py
|
Preview one uid's directory groups for sign-in diagnosis (NK-WP-0051-T04).
|
2026-10-14 23:41:32 +02:00 |
|
test_mfa_state_diagnostic.py
|
security: replace retired MFA diagnostic credential discovery with scoped checks
|
2026-10-13 22:24:35 +02:00 |
|
test_openbao_lab_boundary.py
|
Harden remaining bootstrap custody callers and prepare isolated recovery
|
2026-10-15 22:57:14 +02:00 |
|
test_prepare_isolated_keycape.py
|
fix(identity): retain group provenance and prepare sealed recovery custody
|
2026-10-17 00:28:17 +02:00 |
|
test_privacyidea_key_custody.py
|
security: preserve privacyIDEA key custody and restore the actual PVC
|
2026-10-13 21:46:41 +02:00 |
|
test_privacyidea_offhost_recovery.py
|
Prepare bounded off-host privacyIDEA recovery drill
|
2026-10-16 00:09:13 +02:00 |
|
test_privacyidea_verification.py
|
NK-WP-0054-T05 phase 2b: each directory consumer binds with its own account
|
2026-10-28 20:33:04 +01:00 |
|
test_private_manifest_binding.py
|
fix(identity): retain group provenance and prepare sealed recovery custody
|
2026-10-17 00:28:17 +02:00 |
|
test_prune_storage_share_dumps.py
|
List-first pruning of a full Storage Share CNPG dump folder (founder-run)
|
2026-10-29 23:43:00 +01:00 |
|
test_realm_bootstrap.py
|
NK-WP-0056-T04: svc-privacyidea lane in OpenBao custody with attended write-through
|
2026-10-31 11:06:53 +01:00 |
|
test_reconcile_keycape_client_secret.py
|
NK-WP-0056-T04: reconcile tool reports a value-free error class
|
2026-10-30 21:58:01 +01:00 |
|
test_reset_authority_observer.py
|
Prepare attended read-only classification for accepted reset subject
|
2026-10-31 13:54:51 +01:00 |
|
test_reset_role_transition.py
|
Prepare guarded reset-role transition and native recovery proof
|
2026-10-31 14:26:17 +01:00 |
|
test_resolver_cutover.py
|
fix: preserve resolver configuration during attended password cutover
|
2026-10-14 01:52:37 +02:00 |
|
test_retirement_and_bundle_boundaries.py
|
Harden remaining bootstrap custody callers and prepare isolated recovery
|
2026-10-15 22:57:14 +02:00 |
|
test_rotation_output.py
|
fix(security): make service Secret updates private and conditional
|
2026-10-13 20:20:42 +02:00 |
|
test_scaleway_backup_inventory.py
|
Inventory off-host recovery assets through existing bounded backup routes
|
2026-10-15 23:58:41 +02:00 |
|
test_sealed_custody.py
|
fix(identity): retain group provenance and prepare sealed recovery custody
|
2026-10-17 00:28:17 +02:00 |
|
test_security_tools_index.py
|
NK-WP-0054: security review; standard draft-3 as a SecurityCanon profile; agent security quickstart
|
2026-10-24 23:12:37 +02:00 |
|
test_service_apply_caller.py
|
fix(security): make service Secret updates private and conditional
|
2026-10-13 20:20:42 +02:00 |
|
test_service_bind_lane.py
|
NK-WP-0056-T04: svc-privacyidea lane in OpenBao custody with attended write-through
|
2026-10-31 11:06:53 +01:00 |
|
test_service_secret_custody.py
|
NK-WP-0054-T05 phase 3a: founder-run bind-split helper with end-to-end test
|
2026-10-29 22:00:49 +01:00 |
|
test_sops_private.py
|
feat(identity): add PostgreSQL provenance and verify sealed SOPS custody
|
2026-10-17 01:36:38 +02:00 |
|
test_sops_write.py
|
feat(identity): add PostgreSQL provenance and verify sealed SOPS custody
|
2026-10-17 01:36:38 +02:00 |
|
test_storage_share_inventory.py
|
Inventory off-host recovery assets through existing bounded backup routes
|
2026-10-15 23:58:41 +02:00 |
|
test_user_engine_platform_expansion.py
|
NK-WP-0026 finished: user-engine caller identity verified live against railiance01
|
2026-08-19 22:01:12 +02:00 |
