tegwick 7350ba8003 NK-WP-0058-T03 step 1: name the causes (window-command identity phase, approval_entry field) ... executor-lanes.py: the identity phase distinguishes openbao_unreachable, openbao_sealed and platform_admin_login_required, with a one-line hint; LaneError keeps its fixed code. executor.py: approval_entry:<approver_not_listed|not_human|not_aal2|self_approval>, never the subject. Note: executor.py changed, so the next admission pins a new image. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 943911@bnt-lap001 Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0		2026-11-05 23:24:08 +01:00
..
bootstrap-recovery	List-first pruning of a full Storage Share CNPG dump folder (founder-run)	2026-10-29 23:43:00 +01:00
bounded-execution-admission	NK-WP-0056-T10: examples re-pinned at 15c9cdb	2026-10-31 20:33:28 +01:00
coordination-frame	build: derive coordination receiver from staged owner sources	2026-10-19 13:44:36 +02:00
custody-record	Advance approved custody delivery and expose observation expiry	2026-10-03 19:27:16 +02:00
emission-cadence-profile	NK-WP-0035-T04: readback records audit-core's independent_reader basis	2026-10-28 09:50:58 +01:00
execution-attribution-receipt	NK-WP-0056-T15: receipt schema v0.1, validator and executor fixtures; audit sender exercise	2026-11-04 01:39:57 +01:00
iam-profile-conformance	Implement NK-WP-0012 IAM profile specification	2026-05-22 14:35:31 +02:00
playbook-capability-contract	feat(orchestration): compose security scenarios	2026-08-23 12:40:52 +02:00
posture-feedback	NK-WP-0056-T07: founder kill switch and execution findings in posture feedback	2026-11-04 01:44:12 +01:00
rotation-lanes	NK-WP-0055-T15: credential rotation-lane register with coverage check	2026-10-28 11:01:08 +01:00
security-bootstrap-console	security: retire unsafe legacy LDAP lifecycle callers	2026-10-14 00:08:42 +02:00
security-case-types	fix(cases): validate optional exact machine descriptor pins	2026-10-16 21:23:04 +02:00
security-scenario-composer	feat(orchestration): compose KeyCape C1 and C2b	2026-08-23 13:24:55 +02:00
service-binds	NK-WP-0058-T03 step 1: name the causes (window-command identity phase, approval_entry field)	2026-11-05 23:24:08 +01:00
service-identity	Service identity: shorten the approval:read note (schema maxLength)	2026-11-01 10:43:45 +01:00
tenancy-posture	feat(posture): add deterministic feedback proposals	2026-08-23 13:16:34 +02:00
prepare_forgejo_type12_acknowledgment.py	Prepare reviewed Forgejo type 1.2 source decision package	2026-10-11 04:48:34 +02:00
security-tools.json	NK-WP-0056-T01 done: Bounded Execution Admission v0.1 (proposed)	2026-10-31 13:55:18 +01:00
security_tools.py	NK-WP-0054: security review; standard draft-3 as a SecurityCanon profile; agent security quickstart	2026-10-24 23:12:37 +02:00
sync-user-engine-delivery-secret.sh	Harden remaining bootstrap custody callers and prepare isolated recovery	2026-10-15 22:57:14 +02:00
validate_forgejo_type12_acknowledgment.py	Prepare reviewed Forgejo type 1.2 source decision package	2026-10-11 04:48:34 +02:00