tegwick 5a2e7d67a2 NK-WP-0048-T24: ensure-groups adapter source candidate ... Binds group creation to the T14/T21 PostgreSQL journal seam (exact case, source and principal binding; refuses untrusted journals), canonical 1.1 case only, created-only rollback via the journal receipt. Source candidate; owner review and native action remain separate gates. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 903097@bnt-lap001 Assistant-Session: aa320c8f-c3fa-46e7-8541-0b58e1e45d23		2026-10-17 07:56:25 +02:00
..
bootstrap	fix(identity): retain group provenance and prepare sealed recovery custody	2026-10-17 00:28:17 +02:00
k8s	NK-WP-0048-T24: ensure-groups adapter source candidate	2026-10-17 07:56:25 +02:00
WORKPLAN.md	security: repair LDAP group callers and fail incomplete T07 acceptance	2026-10-14 01:17:35 +02:00