tegwick f625dd0681 feat: OpenBao unseal custody models — automation-first with blocked alternatives ... Document three init/unseal custody paths; default sops-held-automation for fast rebuild cycles. Security bootstrap console lists models, blocks planned attended-ceremony and auto-unseal-transit with hints, and gates init ceremony on implemented selection. NET-WP-0020 tracks downstream SSH automation.		2026-06-18 00:51:48 +02:00
..
iam-profile-conformance	Implement NK-WP-0012 IAM profile specification	2026-05-22 14:35:31 +02:00
playbook-capability-contract	Implement NK-WP-0013 playbook capability contract	2026-05-22 14:49:25 +02:00
security-bootstrap-console	feat: OpenBao unseal custody models — automation-first with blocked alternatives	2026-06-18 00:51:48 +02:00